Help for RADIUS on HP 2920

[metnet]

Hi Guys,

i'm tried to authenticate admin users against our NPS server in order to get exec 6 (manager) privileges. I tried all the possible configuration but i can login just with operator privileges and then going in enable mode.

if i configure the switch add: aaa authentication login privilege-mode

i can't login.

Could you suggest me something?

Thanks

[TerjeAFK]

We use another Radius service (Aruba ClearPass), and we use the following return values to allow admin logon to HP switches:

Radius:HP       HP-Privilege-Level   = 0
Radius:IETF    Service-Type               = Administrative-User (6)

Hope that helps you.

[metnet]

Thanks for your reply.  But we have to use NPS

[EricAtHP]

I have attached a config of a switch that is setup for privelege login and screenshots of an NPS policy for both admin and operator login. In general, here are the switch commands:

radius-server host 10.1.1.97 encrypted-key "GuOS+YVuixEJB7jaDRMFZ54f+afDKtxSeRqiJAACpjE="

aaa authentication login privilege-mode
aaa authentication console login peap-mschapv2 local
aaa authentication telnet login peap-mschapv2
aaa authentication telnet enable peap-mschapv2
aaa authentication web login peap-mschapv2
aaa authentication web enable peap-mschapv2
aaa authentication ssh login peap-mschapv2
aaa authentication ssh enable peap-mschapv2