Re: IAS/RADIUS with Cisco devices

From: Karl Levinson [x y] mvp (levinson_k@excite.com)
Date: 11/27/02 

From: "Karl Levinson [x y] mvp" <levinson_k@excite.com>
Date: Wed, 27 Nov 2002 16:56:28 -0500

"Andy Spencer" <thespencers@ieee.org> wrote in message
news:o_GdnWkVxYF_s3igXTWc3g@comcast.com...
> Anyone been able to make this work?? With a sniffer I can see the request
> from the Cisco switch, but don't see a response from the AD server. IAS
is
> enabled, and listening on port 1812 but nothing ever appears in the log.

I'm not sure exactly what you're trying to do, but I don't see why it
shouldn't work. AFAIK, IAS should be interchangable with any other RADIUS
server.

If you're trying to use RADIUS to authenticate access [like management
access] to the Cisco switch, try these links:

http://groups.google.com/groups?q=ias+radius+cisco+author:x+author:y&hl=en&l
r=&ie=UTF-8&oe=UTF-8&selm=e2dnh0%23FCHA.1420%40cpimsnntpa03&rnum=2

I don't think there's too much configuration you can do to IAS, so you may
need to search Cisco support resources for help. If you've got a sniffer
and are not seeing any requests reach the IAS server, I wouldn't think the
problem would be in IAS.

Relevant Pages

  • IAS/RADIUS with Cisco devices
    ... With a sniffer I can see the request ... from the Cisco switch, but don't see a response from the AD server. ...
    (microsoft.public.win2000.security)
  • RE: check group membership in Connection Request Policy
    ... The access request does not contain a valid user password, ... Authentication is done at the VPN3000, ... So what data does the VPN3000 send to the IAS? ... a custom IAS extension would be really a solution. ...
    (microsoft.public.internet.radius)
  • RE: check group membership in Connection Request Policy
    ... The access request does not contain a valid user password, ... We already do 802.1x authentication with our Enterasys switches, ... IAS is not able to do authentication, since digital certificates are used on ... I am intereseted in your custom IAS extension. ...
    (microsoft.public.internet.radius)
  • RE: check group membership in Connection Request Policy
    ... IAS is not able to do authentication, since digital certificates are used on ... the request is matched against a CRP (based on certain rules a CRP ... I am intereseted in your custom IAS extension. ...
    (microsoft.public.internet.radius)
  • IAS-proxy and adding attributes part 2
    ... Access-Request when it passes the IAS and proxies it to ... intercept the request, Add additional attributes, before ... Does it require programming or extra dll- ... And if i would want to use the extension dll. ...
    (microsoft.public.internet.radius)