Unsolved

1 Rookie

 • 

4 Posts

1251

May 8th, 2020 11:00

Radius authentication fails on Dell Powerconnect 6248

I am trying to login to TELNET with Dell switches using Freeradius 3 but it fails each time.

Here are the config details:

Image Descriptions

image1 : default image
image2 :


Images currently available on Flash

--------------------------------------------------------------------
unit image1 image2 current-active next-active
--------------------------------------------------------------------

1 2.2.0.3 3.3.18.1 image2 image2
2 3.3.18.1 2.2.0.3 image1 image1

************************

#show authentication methods

Login Authentication Method Lists
---------------------------------
defaultList : none
networkList : local
Radius : radius local

Enable Authentication Method Lists
----------------------------------
enableList : none
RadiusEnable : radius enable

Line Login Method List Enable Method List
------- ----------------- ------------------
Console defaultList enableList
Telnet Radius RadiusEnable
SSH networkList enableList

HTTPS :radius local
HTTP :local
DOT1X :

 

 

show radius-servers

IP address Type Port TimeOut Retran. DeadTime Source IP Prio. Usage
---------------- ----- ----- ------- ------- -------- ------------- ----- ------

10.14.1.196 Auth 1812 15 3 0 10.14.1.252 0 all
10.14.1.196 Acct 1813 N/A N/A N/A N/A N/A N/A
Global values
--------------------------------------------
Number of Configured Authentication Servers.... 1
Number of Configured Accounting Servers........ 1
Number of Named Authentication Server Groups... 1
Number of Named Accounting Server Groups....... 1
Number of Retransmits.......................... 3
Timeout Duration............................... 15
Deadtime....................................... 0
Source IP...................................... 10.14.1.252
RADIUS Accounting Mode......................... Enable
RADIUS Attribute 4 Mode........................ Disable   ------ i have tried enabling this
RADIUS Attribute 4 Value....................... 0.0.0.0 ----- 10.14.1.196

aaa authentication login "Radius" radius local
aaa authentication enable "RadiusEnable" radius enable
ip https authentication radius local
aaa authorization network default radius


aaa accounting network default start-stop group radius
radius-server source-ip 10.14.1.252
radius-server key "radiuskey"
radius-server host auth 10.14.1.196
no msgauth
primary
name "pfsense-radius"
exit
radius-server host acct 10.14.1.196
name "pfsense-radius"
exit
line telnet
login authentication Radius
enable authentication RadiusEnable
password 123456789 encrypted
exit
ip ssh server
management access-list "testprofile"
permit ip-source 10.14.1.196 mask 255.255.255.0 service telnet priority 1
exit

Moderator

 • 

9.5K Posts

May 8th, 2020 16:00

Hi,

Is telnet enabled? Can you try with SSH?

1 Rookie

 • 

4 Posts

May 11th, 2020 07:00

Hi,

Telnet is enabled and i can login using local credentials. Did not try with ssh since that is my main connection to the switch. i will try with ssh and get back to you. However, is there anything related to service type or VSAs that i should be looking into? Because, I'm using Freeradius 3 and i checked the dictionary files on radius and could not find a file for Dell powerconnect.

Thanks,

Moderator

 • 

9.5K Posts

May 11th, 2020 09:00

Is freeradius set for EAP?

1 Rookie

 • 

4 Posts

May 12th, 2020 07:00

Yes Sir, I am using the Freeradius certificates.

1 Rookie

 • 

4 Posts

May 12th, 2020 09:00

Yes, they are on the same subnet. ping is working fine.

Moderator

 • 

9.5K Posts

May 12th, 2020 09:00

Hi,

Are there VLANs configured? Is the freeradius server on the same subnet?

0 events found

No Events found!

Top