Reset Search
 

 

Article

Extreme Control - RADIUS Client Authentication "Reject Reason: RADIUS client not standards-compliant. Missing attributes: NAS Port"

« Go Back

Information

 
TitleExtreme Control - RADIUS Client Authentication "Reject Reason: RADIUS client not standards-compliant. Missing attributes: NAS Port"
Symptoms
  • A RADIUS request is rejected.
  • The RADIUS request is rejected due to a missing attribute "NAS Port".
  • The radius.log on the Control appliance may log the following similar event:
2020-01-13 23:13:09,256 INFO [com.enterasys.tesNb.server.aaaapi.NacAAAServerRequestProcessor]
(EacAAARequestHandler (Client: 127.0.0.1:56427):) NAC AAA Response [ID:1732, Command: Reject
User(0x23), Version: NAC Version 6.2.0(10), Reject Reason: RADIUS client not standards-compliant.
Missing attributes: NAS Port
  • The switch originating the request is SNMP managed.
Environment
  • Extreme Control (NAC)
  • All Software Releases
  • "NAS Port" Attribute
Cause
Switch misconfiguration.

Extreme Control indicates an incoming RADIUS request is missing the "NAS Port" attribute if the switch originating the request is SNMP managed by Extreme Management Center and Extreme Control. This is by design.
Resolution
The "Switch Type" needs to be set to "Layer 2 RADIUS Only" versus the default "Layer 2 Out-Of-Band".

To set the Switch Type appropriately:
 
QUICKPATH: Control -> Access Control -> Engines -> Engine Groups -> Switches -> Edit
  1. Log into XMC.
  2. Click Control.
  3. Click Access Control.
  4. Click Engines -> Engine Groups.
  5. Select the appropriate Control appliance.
  6. Click Switches.
  7. Select the appropriate switches to modify, either individually or as a group.
  8. Click Edit.
  9. Select "Layer 2 RADIUS Only" under "Switch Type".
  10. Click Save.
  11. Enforce.
Additional notes
An alternative workaround is to set the switch to <Ping Only> within Extreme Management Center and Enforcing the change. This will bypass the additional SNMP "Layer 2 Out-Of-Band" functions and revert to "Layer 2 RADIUS Only" processing behavior.

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255