Radius authentication error.

[hanwucisco]

I have radius configured to authentication a cisco switch. The ACS is V5.3.  The login worked fine, but the enable doesn’t work. It came back saying “

22056 Subject not found in the   applicable identity store(s).

Any idea?

Thanks,

Han

[Federico Ziliotto · Accepted solution]

Hi Han,

A first hint would be to check if the authentication protocol you are using (PAP, CHAP, MS-CHAPv1/2, etc.) is compatible with the database configured on ACS:

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2.1/User_Guide/Overvw.html#wpxref846

This table is from the ACS 4.2.1 configuration guide, but it is generally true for all types of databases and ACS versions.

Regards,

Fede

--

If  this helps you and/or answers your question please mark the question as  "answered" and/or rate it, so other users can easily find it.