Reset Search
 

 

Article

MSCHAPv2 management login authentication requests from VMware Horizon are not treated as management login requests

« Go Back

Information

 
TitleMSCHAPv2 management login authentication requests from VMware Horizon are not treated as management login requests
Symptoms
Management requests from VMware Horizon fails. 
Only MSCHAPV2 management requests fails with the below error message, PAP management requests will pass so can be a workaround. 
DEBUG [com.enterasys.tesNb.server.aaaapi.NacAAAServerRequestProcessor] (EacAAARequestHandler (Client: 127.0.0.1:xxxxx):) processRequest: rejecting request because: RADIUS client not standards-compliant. Missing attributes: End-System MAC Address

 
Environment
  • ExtremeControl (NAC)
  • Less than 8.4.3
  • ExtremeManagementCenter
  • Management login
  • VMware Horizon
Cause
Management login request is determined by the presence of either one
  1.  Service-Type as login in the Radius request
  2.  NAS-port-Type as Virtual in the Radius request
  3.  PAP authentication request with no calling station ID in the Radius request

So this is functioning as designed, the request from the VMware Horizon does not have either one of the above, it is a MSCHAPv2 request and without calling station id attribute. 
Resolution
Enhancements are made via net0039615 so the absence of missing calling station ID will be treated as management login.

Although this enhancement is done in 8.4.0 would advise to upgrade to 8.4.3 where a critical fix is posted in it, tentative release of 8.4.3 third week of April





 
Additional notes
The other Critical CR net0059483

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255