Cisco - Juniper RADIUS setup problem

MortezaSoltani · ‎09-29-2007

Hello

I configured a juniper firewall to authenticate with Cisco ACS Radius

and when a request go to the ACS it accepts and pass it (in pass authenticated log) , but juniper log say user authentication failed and rejected by radius server . Is there any specific things that i should configure in ACS as attribute ?

Thanks

Mory

Danilo Dy · ‎10-01-2007

Hi,

MAke sure you set the vendor-specific-attribute for Juniper in ACS. I think the steps are in this link http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_user_guide_chapter09186a008007decd.html#273901

Regards,

Dandy

MortezaSoltani · ‎10-01-2007

Hello Dandy

Appreciate for ur answer , but i dont know what should i set for Juniper VSA in ACS , do u have a configuration example .Thanks for your kindness .

Regards

Mory

Danilo Dy · ‎10-01-2007

Hi,

Juniper Vendor ID number is 2636

Attribute:

Juniper-Local-User-Name

Juniper-Allow-Commands

Juniper-Deny-Commands

Number:

001

002

003

Type of value:

string (maximum length 247 characters)

Inbound/Outbound:

Outbound

Multiple:

No

Regards,

Dandy

MortezaSoltani · ‎10-01-2007

Dear Dandy

I dont know what should i put for Juniper-Local-User-Name or other juniper attribute values in ACS .

Regards

Dandy

Danilo Dy · ‎10-02-2007

Hi,

Check this link http://www.juniper.net/techpubs/software/junos/junos57/swconfig57-getting-started/html/sys-mgmt-authentication3.html

...and no copying of name :)

Regards,

Dandy

MortezaSoltani · ‎10-02-2007

Thanks Dear and sorry about name :))

Mory