topic Re: Authetication SSH Switch HPE 5130 with RADIUS and MFA Microsoft in Switching and Routing

Authetication SSH Switch HPE 5130 with RADIUS and MFA Microsoft

ClaytonEduardo — Wed, 03 Mar 2021 17:20:34 GMT

Good morning everyone,

I already have on my network with switches HPE 5130 and 5900 authentication ssh via radius (Windows Server 2012), however, I'm needing to make work the authentication with Microsoft MFA, for windows and Linux is already working, however, when I log on via ssh appears the banner of the switch but soon in the sequence my session is closed.

Re: Authetication SSH Switch HPE 5130 with RADIUS and MFA Microsoft

akg7 — Wed, 03 Mar 2021 20:06:29 GMT

Hello,

Are you getting any error message when ssh session get closed?

Can you confirm the authentication mode and default user role from config?

Thanks!

Re: Authetication SSH Switch HPE 5130 with RADIUS and MFA Microsoft

ClaytonEduardo — Thu, 04 Mar 2021 03:35:36 GMT

Hi,

No error messages, just close.

In Line VTY 0 the authentication mode is scheme and user role is network-operator.

Thanks.

Re: Authetication SSH Switch HPE 5130 with RADIUS and MFA Microsoft

akg7 — Fri, 05 Mar 2021 01:46:06 GMT

Hello,

Can you try to add like below:

ssh server enable

local-user operator
authorization-attribute user-role level-3
service-type ssh

user-interface vty 0 4
authentication-mode scheme
user-role network-operator

Thanks!

Re: Authetication SSH Switch HPE 5130 with RADIUS and MFA Microsoft

ClaytonEduardo — Thu, 25 Mar 2021 12:04:29 GMT

Hi, Sorry for the delay, so, using your last solution i had the same problem....But i was able to resolve this issue with the command below:

role default-role enable network-admin

In this way, i have acces with Network Admin and the MFA Microsoft worked, but if I want access Network operator I put the command below:

role default-role enable network-operator

PS.: In the RADIUS Server no changes where needed.

Thanks for your help.