Dell N3024P doesn't send Radius Attribute Service-Type 10

Question

Hi all,   I'm facing an issue where my switch / the endpoint is not sending the correct 'Service-Type' Radius attribute to my radius server. When the endpoint is authenticating, it only sends 'Service-Type' 1 (Login-User) and not 10 (Call-Check). I've globally enabled sending the service-type in the Access-Request message using command: 'radius-server attribute 6 on-for-login-auth' like described on https://dl.dell.com/manuals/all-products/esuprt_ser_stor_net/esuprt_networking/esuprt_net_fxd_prt_swtchs/networking-n3000-series_administrator-guide12_en-us.pdf (P. 938).    Port configuration: description 'NAC ENABLED'spanning-tree portfastswitchport mode generaldot1x port-control mac-baseddot1x reauthenticationdot1x timeout quiet-period 1dot1x timeout tx-period 1dot1x timeout guest-vlan-period 10dot1x max-req 3dot1x mac-auth-bypassauthentication order dot1x mabauthentication priority dot1x mab   The authentication-history log proofs that MAB is working: SWITCH(config-if-Gi1/0/1)#show authentication authentication-history gigabitethernet 1/0/1 Timestamp Interface MAC Address Auth Status Method--------------------- --------- -------------- ------------ --------------Aug 15 2022 11:10:02 Gi1/0/1 4448.C1CF.E52E Unauthorized MAB Aug 15 2022 11:09:40 Gi1/0/1 4448.C1CF.E52E Unauthorized MAB Aug 15 2022 11:09:17 Gi1/0/1 4448.C1CF.E52E Unauthorized MAB   Screenshot of Service-Type that is received on radius server (ClearPass):   Model: Dell N3024P  Firmware: 6.3.2.3.    I want to use the different service types (1 or 10) to differentiate the use of 802.1x or MAB on the radius server.  Why is the access-request not sending 'Service-Type' 10?

DELL-Charles R · Answer

Hello lk2819,

I think this may help you.

Page: 243 - Supported RADIUS Attributes

Dell Networking N-Series N1500, N2000, N3000, and N4000 Switches User’s Configuration Guide Version 6.3.0.0 and Later

https://dell.to/3A1wjG1

lk2819 · Answer

Hi Charles,

Thank you for your answer, I see that Service-Type (10) is not supported on the N3024P.

However, I have a few Dell N3048's and N2048's that do successfully send Service-Type 10 included in the RADIUS Access-Request. Any idea on why this does work on these models?

Working Model: Dell EMC Networking Switch N3048

Firmware version: 6.5.4.17

DELL-Joey C · Answer

Hello @lk2819,

We do not have any idea as it is not provided any information in the guide. Probably if you need further details why it was not supported, I suggest to log a support call ticket to check with engineering.

Networking General

Was this post helpful?