topic Problem Radius attibutes HP procurve and H3C Switchs in Security e-Series

Problem Radius attibutes HP procurve and H3C Switchs

Candema1 — Mon, 13 Feb 2017 10:37:27 GMT

Hello, I have a pb to configure the switch HP procurve 2610 and 2600 and switch H3C 5130 and A3600 and S3600 on the radius, I can not get different rights on the switch. Either I have admin rights or the login window closes as soon as I have the connection to the switch. Would you have the Radius attributes for these models and the setting of the radius SVP?

Excuse for my english language.

My Configuration HP Procurve:

hostname "ProCurve Switch 2610-24"
ip default-gateway x.x.x.x
snmp-server community "public" Unrestricted
vlan 1
   name "DEFAULT_VLAN"
   untagged 1-28
   ip address x.x.x.x x.x.x.x
   exit
radius-server host x.x.x.x acct-port 1646 auth-port 1645 key "xxxxxx"
radius-server key "xxxxxx"
aaa authentication num-attempts 10
aaa authentication console enable radius local
aaa authentication telnet login radius local
aaa authentication telnet enable radius local
aaa authentication ssh login radius local
aaa authentication ssh enable radius local
aaa authentication port-access eap-radius authorized
aaa authentication login privilege-mode
aaa port-access authenticator active
ip ssh
no dhcp config-file-update
password manager
password operator

Thanks for your help

Best regards

Mathieu

Re: Problem Radius attibutes HP procurve and H3C Switchs

TerjeAFK — Mon, 13 Feb 2017 11:14:12 GMT

These attributes work for us.

For Procurve operator:

Type                             Name                 Value
Radius:Hewlett-Packard-Enterprise HPE-Privilege-Level  5
Radius:IETF                       Service-Type         NAS-Prompt-User (7)

For Procurve manager:

Type                                Name                Value
Radius:Hewlett-Packard-Enterprise   HPE-Privilege-Level  0
Radius:IETF                         Service-Type         Administrative-User (6)

For Comware manager:

Type Name Value
Radius:Cisco Cisco-AVPair shell:roles=network-admin

Re: Problem Radius attibutes HP procurve and H3C Switchs

Candema1 — Mon, 13 Feb 2017 11:38:31 GMT

Thank you but I did not find Hewlett-Packard-Entreprise, HPE-Privilege-Level and IEFF Service Type: Nas Propt-User in my server NPS.

I have cisco, vendor specific or other but not hp

Thank you

Re: Problem Radius attibutes HP procurve and H3C Switchs

Candema1 — Mon, 13 Feb 2017 16:35:47 GMT

Please,

I can not configure the H3C switches, I can not find the HP or H3Com attributes in my NPS server

Thanks for your help.

Mathieu

Re: Problem Radius attibutes HP procurve and H3C Switchs

TerjeAFK — Tue, 14 Feb 2017 12:24:36 GMT

Have a look at this link if you're using NPS (we use Aruba CLearPass):

https://abouthpnetworking.com/2014/03/16/comware7-radius-based-rbac-user-role-assignment/

Re: Problem Radius attibutes HP procurve and H3C Switchs

Candema1 — Tue, 14 Feb 2017 15:16:09 GMT

Hello,

This solution works with H3C 5130 models but does not work with H3C 5500 models that must have VSA 010600000003 for administrators, and 010600000001 for operators parameters. It also does not work for models H3C S3600 and H3C A3600.

thanks