cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1346
Views
0
Helpful
4
Replies

ACS 5.3 and Enterasys A2 switch support

Murat TASKIN
Level 1
Level 1

Hi experts,

I am using ACS 5.3.I need to make macauthentication on Enterasys switch with Cisco ACS 5.3.I get the following error;

Parsing error or event type unknown:xxxxxxxxxxxxx ERROR RADIUS : RADIUS packet contains invalid attribute(s) ;Failed-Attepmt:Radius request dropped

How can I integrate Custom Attribute Enterasys A2 Switch with Cisco ACS 5.3 ?

Thanks.

2 Accepted Solutions

Accepted Solutions

jrabinow
Level 7
Level 7

I think what you need to do is define the Vendor attributes for this device

Can be done as follows:

Go to System Administration > Configuration > Dictionaries > Protocols > RADIUS > RADIUS VSA

can define the new RADIUS vendor by pressing "Create". Vendor ID is the assigned ID. Attribute prefix allows you to assign a standard prefix to all attributes for this vendor. Names of all RADIUS attributes must be unqiue across all vendors

Once have define the RADIUS vendor can select it from the list and press "Show Vendor Attributes". Can now define the attributes for this vendor. This option is also available from the left navigation by select the vendor name.

Note that adding/removing vendor attributes takes a little time (quite a few seconds) and so don't be perturbed

View solution in original post

Once I had problems with radius between a Cisco switch and Cisco ACS. The switch didn't understand some radius attributes, so I had to configure "radius-server vsa send authentication" in the switch, so the swith could understand Vendor Specific Attributes. That command fixed my problem.

I guess it's happening the same with your enterasys switch.

Another option will be to capture the packet sent from ACS to see what attributes is sending ACS. That way you can deduce which attributes are not understood by Enterasys and try to configure ACS not to send those attributes. But I really don't think the ACS is the problem but the switch.

Kind regards

View solution in original post

4 Replies 4

jrabinow
Level 7
Level 7

I think what you need to do is define the Vendor attributes for this device

Can be done as follows:

Go to System Administration > Configuration > Dictionaries > Protocols > RADIUS > RADIUS VSA

can define the new RADIUS vendor by pressing "Create". Vendor ID is the assigned ID. Attribute prefix allows you to assign a standard prefix to all attributes for this vendor. Names of all RADIUS attributes must be unqiue across all vendors

Once have define the RADIUS vendor can select it from the list and press "Show Vendor Attributes". Can now define the attributes for this vendor. This option is also available from the left navigation by select the vendor name.

Note that adding/removing vendor attributes takes a little time (quite a few seconds) and so don't be perturbed

Once I had problems with radius between a Cisco switch and Cisco ACS. The switch didn't understand some radius attributes, so I had to configure "radius-server vsa send authentication" in the switch, so the swith could understand Vendor Specific Attributes. That command fixed my problem.

I guess it's happening the same with your enterasys switch.

Another option will be to capture the packet sent from ACS to see what attributes is sending ACS. That way you can deduce which attributes are not understood by Enterasys and try to configure ACS not to send those attributes. But I really don't think the ACS is the problem but the switch.

Kind regards


Thanks for your help.I had to configure radius attributes on the switch.My problem is solved.

Kind Regards.

Hi,

do you have maybe an sample config for Entereasys and ACS 5.X, or an short guide?

We try at the moment the same.

MAC Authentication against Cisco ACS with Enterasys.

But nothing works.

Even if the ACS denied the access, the Enterasys didn't disable the port.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: