[RADIUS] Switch administration using SSH

Innoiris7 — Fri, 23 Dec 2011 08:33:44 GMT

Hi,

I want to use LDAP accounts to administrate switches (3COM and H3C)

It works fine when I use telnet.

I just need to push RADIUS attribute Login-Service (ID 15) with Telnet value (ID 0)

Now, I want to use SSH (for security reasons )

RADIUS have to push RADIUS attribute Login-Service (ID 15) with SSH value (ID 50)

SSH value doesn't exist in RADIUS IETF dictionary for Login-Service attribute.

I can't create SSH value because this dictionary is protected on Cisco ACS. (dictionary based on RADIUS RFC http://tools.ietf.org/html/rfc2865#section-5.15 and SSH value doesn't exist)

Can we use another RADIUS attribute ?

Thanks,

Patrick

Re: [RADIUS] Switch administration using SSH

Edu_b0 — Mon, 28 Dec 2015 19:01:17 GMT

Hi,

Use:

attribute 15 check-mode loose

in your radius scheme.

Best regards.

Edwin

rey64 — Fri, 20 May 2016 12:22:28 GMT

Hi,

Try "Login-Service == 50".