Reset Search
 

 

Article

New Cisco 3850 MAB authentication fails if more than two attributes are received.

« Go Back

Information

 
TitleNew Cisco 3850 MAB authentication fails if more than two attributes are received.
Symptoms
New Cisco 3850 MAB authentication fails if more than two attributes are received. 
Environment
Cisco 3850
Extreme Control
Cause
Cause unknown
Resolution
Reduce the number of attributes provided to the switch for MAB authentication to at most two total. 

If you must do MAB authentication and RFC 3580 at the same time you will need to modify the gateway RADIUS attributes to use the following: 

Tunnel-Private-Group-Id=%VLAN_ID%:%VLAN_TUNNEL_TAG%
%CUSTOM1%
%CUSTOM2%

Using this schema you will need to define the %CUSTOM1% as the cisco-av-pair attribute in the policy mapping IF the policy mapping would be used for MAB. 

If RFC 3580 CUSTOM1 and CUSTOM2 need to be defined as tunnel-medium-type and tunnel-type attributes.


 
Additional notes

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255