parsing vsa:not a cisco vendor id:311 – radius

[Muhammed AKYUZ]

Hi,

We are getting "parsing vsa:not a cisco vendor id:311 – radius"  error logs from Nexus. What is the impact of this log?

[Marko Pribanic]

Did you ever get some more info on this log message?

[Alejandro Zuniga]

Hello Folks,

The error msg occurs when a Cisco device receives a Radius VSA that is not cisco. VSA 311 belongs to Microsoft so it might be that you are indeed not using a Cisco radius VSA. The error is not harmful.

https://technet.microsoft.com/en-us/library/cc958030.aspx

RADIUS: Attribute length = 12 (0xC)

RADIUS: Vendor ID = 311 (0x137)<<<<<<<<<<<<<<<<<<<

RADIUS: Vendor string = _

The way to stop seeing the error messages depend on the Cisco device in which you are seeing it, in nexus it is "Logging level user 2".

I hope it helps.

[boekelaar]

doesn't work for 6.0(2)A4(6), bug ?

[ROBERT HOLMES]

I'm seeing this message repeated thousands of times on my Nexus switches as well.  I tried turning off the Remote Access Multilink in NPS (as suggested in another thread), but it had no effect.

Is there another way to stop NPS from sending this?

What level of detail is lost if we set logging level user to "2"?

[lacyk]

in nxos 9.3(10) logging was fixed and is ignoring non-cisco attributes

in nxos 10.4(2)F the message is back

something for cisco to work on, as it is common practice to send attributes for more than one vendor if user works on several platforms