RADIUS does not pray attribute filling 4 (NAS-IP-Address)

I'm trying to get a Cisco 3120 G configured for RADIUS authentication.  I have a lot of other IOS devices with identical configuration of work lines, however, it gives me a hard time.  The strategy of the RADIUS server is configured by NAS-IP-Address.  The configuration of the AAA and RADIUS is as follows:

AAA new-model
AAA authentication login default local radius group
AAA authorization exec default local radius group

host 10.x.x.x auth-port 1645 1646 RADIUS server acct-port
Server RADIUS ports source-1645-1646
Server RADIUS button 7 XXXXXXXXXXXXXX

See the Flash following debugging information:

indrc3120a #.
000284: 8 Feb 14:05:15.447 PST: RADIUS: Pick NAS IP for you = 0x5992EF4 = 0 cfg_addr = 0.0.0.0 tableid
000285: 8 Feb 14:05:15.447 PST: RADIUS: ustruct sharecount = 1
000286: Feb 8 14:05:15.447 PST: RADIUS: success radius_port_info() = 1 radius_nas_port = 1
000287: Feb 8 14:05:15.447 PST: RADIUS (00000000): send 10.x.x.x:1645 id 1645/8, len 84 access request
000288: Feb 8 14:05:15.447 PST: RADIUS: authenticator 12 5th 7th DF 01 B5 F1 D8 - 40 07 09 76 88 C1 A4 C5
000289: 8 Feb 14:05:15.447 PST: RADIUS: NAS-IP-Address [4] 6 0.0.0.0
000290: 8 Feb 14:05:15.447 PST: RADIUS: NAS-Port [5] 6 2
000291: Feb 8 14:05:15.447 PST: RADIUS: NAS-Port-Type [61] 6 virtual [5]
000292: 8 Feb 14:05:15.447 PST: RADIUS: username [1] 13 "admin_user '.
000293: 8 Feb 14:05:15.447 PST: RADIUS: Calling-Station-Id [31] 15 "10.y.y.y".
000294: 8 Feb 14:05:15.447 PST: RADIUS: User-Password [2] 18 *.
000295: 8 Feb 14:05:15.505 PST: RADIUS: receipt id 1645/8 10.x.x.x:1645, Access-Reject, len 20
000296: 8 Feb 14:05:15.505 PST: RADIUS: authenticator 4th EC 8F AB BB 8th F9 BB - 13 67 56 A3 5F F9 99 94
000297: Feb 8 14:05:15.505 PST: RADIUS: saved the data of permission for the user 5992EF4 to 0

Note the NAS-IP-Address populated as 0.0.0.0 attribute

Another switch with an identical Setup returns the following:

tritc3120a #.
350554: 8 Feb 14:11:00.916 PST: RADIUS / ENCODE (000155BC): ask "" user name: ".
350555: 8 Feb 14:11:10.605 PST: RADIUS / ENCODE (000155BC): ask "" password: ".
350556: 8 Feb 14:11:14.480 PST: RADIUS/ENCODE (000155BC): orig. component type = EXEC
350557: 8 Feb 14:11:14.480 PST: RADIUS: AAA Attr not supported: interface [170] 4
350558: 8 Feb 14:11:14.480 PST: RADIUS: 74 74 [tt]
350559: 8 Feb 14:11:14.480 PST: RADIUS / ENCODE (000155BC): down the type of service, "radius attribute 6 sur-pour-login-auth server" is disabled
350560: 8 Feb 14:11:14.480 PST: RADIUS (000155BC): Config NAS IP: 0.0.0.0
350561: 8 Feb 14:11:14.480 PST: RADIUS / ENCODE (000155BC): acct_session_id: 87482
350562: 8 Feb 14:11:14.480 PST: RADIUS (000155BC): send
350563: 8 Feb 14:11:14.480 PST: RADIUS/ENCODE: Best 10.x.x.x address IP Local to the 10.y.y.y Radius Server
350564: 8 Feb 14:11:14.480 PST: RADIUS (000155BC): send 10.y.y.y:1645 id 1645/222, len 90 access request
350565: 8 Feb 14:11:14.480 PST: RADIUS: authenticator 5F B1 17 DF 72 4B 3D - B6 D8 5 85 66 B9 8 d 7 c A6
350566: 8 Feb 14:11:14.480 PST: RADIUS: username [1] 13 "admin_user '.
350567: 8 Feb 14:11:14.480 PST: RADIUS: User-Password [2] 18 *.
350568: 8 Feb 14:11:14.480 PST: RADIUS: NAS-Port [5] 6 2
350569: 8 Feb 14:11:14.480 PST: RADIUS: NAS-Port-Id [87] 6 'tty2 '.
350570: 8 Feb 14:11:14.480 PST: RADIUS: NAS-Port-Type [61] 6 virtual [5]
350571: 8 Feb 14:11:14.480 PST: RADIUS: Calling-Station-Id [31] 15 "10.z.z.z".
350572: 8 Feb 14:11:14.480 PST: RADIUS: NAS-IP-Address [4] 6 1.2.3.4
350573: 8 Feb 14:11:14.556 PST: RADIUS: receipt id 1645/222 10.y.y.y:1645, Access-Accept, len 83
350574: 8 Feb 14:11:14.556 PST: RADIUS: authenticator 24 D9 F9 E2 BB A3 66 F6 - 73 E8 5 42 8 A5 17 DA
350575: 8 Feb 14:11:14.556 PST: RADIUS: Type of Service [6] 6 Administrative [6]
350576: 8 Feb 14:11:14.556 PST: RADIUS: [25] in class 32
350577: 8 Feb 14:11:14.556 PST: RADIUS: 59 B1 6 06 00 00 01 37 00 01 0a 1st DC 18 01 CB C7 B8 D7 82 CA E2 00 00 00 00 00 00 00 0b [Ym7]
350578: 8 Feb 14:11:14.556 PST: RADIUS: seller, Cisco [26] 25
350579: 8 Feb 14:11:14.556 PST: RADIUS: Cisco-AVpair [1] 19 "shell: priv-lvl = 15.
350580: 8 Feb 14:11:14.556 PST: RADIUS (000155BC): receipt of id 1645/222

Note that in the above example, the NAS-IP-Address is feeding properly (I just the changed for security reasons)

If anyone has any advice, it would be greatly appreciated.  Does the switch need a restart? Blow RADIUS server process?

Thank you

CSCdx27019">."

Seems to be a bug,

CSCdx27019    Pkt sent by CSS access RADIUS request contains no information NAS

The feature of Cisco ACS NAR (restricted access network) with RADIUS does not work with CSS. This is because the radius NAS-IP-Address attribute is set to 0.0.0.0 in the Radius authentication request.

Rgds, jousset

Note the useful messages

Tags: Cisco Security

Similar Questions

  • In Outlook Express, when I type in the first letter of an e-mail address that is in my contacts, the dropdown does not close when I click the right address.

    Original title:

    Under XP, when I type in the first letter of an e-mail address that is in my contacts, the dropdown does not close when I click the right address. What a nuisance! Also, when I go to create a new e-mail message, an address of my contacts appears in no particular place, making it impossible to complete the message.

    Hello

    I suggest you turn off Auto complete and then check if you face the same problem.

    a. open Outlook Express.

    b. click on Tools.

    c. click on Options.

    d. click the send tab.

    e. uncheck the e-mail address automatically complete when composing box.

    f. click OK.

    Turn Auto complete and test again to see if the behavior is better. To activate it again, follow the same steps as above, but put a check mark in the box.

  • RADIUS does not not on Cisco ACS SE v4.1 (1)

    Hello

    I have a CiscoSecure ACS version 4.1 (1) build 23.

    I can't configure the Cisco ACS for granular control of access router. I have a Netopia Router that is configured to use RADIUS to authenticate remotely for a telnet connection. The router sends the request to access the Cisco ACS SE RADIUS and a sniff on the side of the ACS shows the application of GBA, but I see no response from the ACS. RADIUS authentication to work with a Windows 2003 server.

    I configured an AAA client and a user of the ACS and use the default group. I use IETF RADIUS. Should what attributes I configure. In Windows, I use Service Type framed and Framed-Protocol PPP. This does not work with the Cisco ACS SE. Nothing shows up in the newspapers. It shouldn't be so difficult, but for some reason I can't make it work.

    Thanks for any help.

    Jutta Kullmann

    Jutta,

    Good to know it works very well. Please mark this thread as solved so other can benefit from.

    Kind regards

    ~ JG

  • How to set Contrl CT does not Null attributes by command OMBPLUS

    Hi experts,
    How to establish the "not null attributes" static control of OMBPlus flow or flags.
    Also how to define the indicators of primary key for the STREAM or STATIC controlled CT of scoreboard operator that sits in a mapping model.

    Kind regards
    CIPI

    Published by: Iancu, Ciprian on March 31, 2011 06:45

    Hi CIPI

    The properties are defined in the attribute as follows (imagine a SEX attribute group INOUTGRP1 in the CUSTOMER table operator in LOAD_CUSTOMER mapping);

    OMBALTER MAPPING VALUES CHANGE ATTRIBUTE 'CUSTOMER_GENDER' OF THE GROUP 'INOUTGRP1' OPERATOR 'CUSTOMER' DEFINE the PROPERTIES (CONTROL_FLOW, CONTROL_STATIC) "LOAD_CUSTOMER" ("true", "false")

    TP resolve PK/UK/FK keys use the clause "CHANGE KEYS_READONLY" to reference the key within the operator;

    OMBALTER MAPPING VALUES CHANGE KEYS_READONLY 'PK_CUST' OPERATOR 'CUSTOMER' DEFINE the PROPERTIES (CONTROL_FLOW, CONTROL_STATIC) "LOAD_CUSTOMER" ("true", "false")

    See you soon
    David

  • The Apple showing in the page settings of ICloud ID does not go and watch my old email address that does not exist as an Apple ID.

    ID showing in the page settings of ICloud Apple won't and watch my old email address that does not exist in the Apple continues to him I identification code is required to sign in this old apple ID, but when I try to reset the password of the site Web of Apple tells me that this 'old' email address is not a piece of identification If that makes sense. I tried to disconnect from ICloud, but always keep asking the password sign to find my Ipad.

    I know my good Apple ID and password and have checked the details on Apple's site that shows the Ipad on the list of devices.

    The Ipad will connect has WiFi and I took it at John Lewis today where I bought it and they think that the problem is being caused by this problem of ID.

    Another that take it to the Apple store, anyone have any suggestions please?

    Welcome to the Apple community.

    If you are unable to remember your password, security issues, do not have access to your address of rescue or are unable to reset your password for any reason, your only option is to contact the Support of Apple ID, to speak to an operator you should explain that your problem is related to your Apple ID This way you can be attributed to the assistance, even if you do not have an AppleCare plan.

    You will need to be patient with the process and to be ready to prove without doubt that the account belongs to you. Do not expect access to be restored immediately and if you are not the owner of the Apple ID saved to the device the account will not be reset.

  • Checkout (registration - Buy) does not take into account billing or delivery address

    No matter what I I can not seem to get my order form to capture the billing/shipping address. I tried everything I can think of. If I change the code to capture personal addresses, it works fine. It captures also all custom fields, I created. But the most basic and important shipping/billing are a no go. I use a bcgurus model that had a bunch of extra code in it but I tried to just replace it with a form that just asked for bases and it still does not.

    I use the tags right AFAIK: IE; ShippingAddress, BillingAddress etc.

    Link to the site of the shop I'm building.

    Here is the code:

    Change the fiddle - JSFiddle

    Post edited by: Liam Dilley - Put code in jsfiddle

    It does not appear in the order either. Does not have a Bill, or anywhere else.

  • Skinning-Border Radius does not not in IE8 / IE7

    Hello

    Jdev Version: 11.1.1.5.

    I drew my command button with border-radius. The curved edges are not appear in Internet Explorer 7 / 8.

    IE9, chrome and firefox that make them properly.

    my CSS code...

    af|commandButton.testButton
    {
        background-color: Black;
        color: White;    
        width: 85px;
        height: 30px;
        font-family: Calibri;
        font-size: larger;
        border-radius: 10px;
        behavior: url(PIE.htc);    
    }
    

    I had line num # 10 http://css3pie.com/about/

    But no luck. Can someone help me?

    Thank you

    SAIF.

    Question: have you installed PIE on EI?

    Or have you just copied line 10?

    You need to install the extension of the PIE and hope it works, see in road & #8211; CSS3 PIE: decorations of CSS3 for IE

    Timo.

  • In CS4 the pencil tool does not maintain a fill when establishing?

    Ai CS4, how can I get the fill color to keep filling when I draw with the pencil tool? The fill color disappears and by default, no fill every time I draw with the pencil tool so I'm unable to see what I drew. CS1 has failed in this way that he kept the fillings or assigned previously.

    It seems that two things have changed in CS4. Double-click the pencil tool, and check the box that says new filling lines of pencil. Then make a new rectangle filled with the color you want and Option (Alt) - drag - upward left most box in the graphic Styles Panel to set a new default for this document. Finally, in the appearance Panel flyout make new Art has basic appearance is selected.

  • predictive typing / story does not come to the top in the address bar

    I was used to typing a few letters in the address bar and history and suggestions would appear. Now I have to enter each web address I want to go to-I don't know why the predictive and suggestions suddenly stopped working - I have not modified the settings. I checked in preferences/privacy and it is set to remember the story and think history and bookmarks. I saw a similar question here who suggested watching the add-on of the AVG, but I don't have that. Predictive typing was very helpful - I wish that it had not gone! Can you please help?

    Please tell me how to turn on predictive text

  • WRT310N does not automatically update the Internet DYNDNS IP address

    Does anyone know if the WRT310N send period updates internet IP DYNDNS address or it sends only when IP address changes.  I can send an update manually, but the newspaper of the DYNDNS host don't watch no updates other than sen manually those.  Thank you.

    It will send the update only when the IP Internet of the DYNDNS address has changed and it should do it automatically... If you're like most DynDNS.com customers, you have a dynamic IP address that changes periodically (monthly, weekly or even daily).

  • My Windows 7 PC does not access the internet and the IP Address of the local router

    My desktop PC gets internet access. She also cannot access my router (via IP address), although it shows a connection to the router in the network and sharing (correct network name) Center. The administration of the router shows in turn as connected desktop pc.

    I tried the following:
    -Restart the PC several times - no change
    -Reset my cable modem and router - no change
    -try to connect by using a wifi adapter - no connection
    -Try the windows network diagnostics - first "DNS server is not responding", now "broadband modem is known of connectivity issues.
    -use the same cable and port on the router with my laptop (also windows 7)-internet access works
    -internet access with my laptop via wifi - works
    -internet access with my mobile android (wifi) - works
    -check the settings of the router (my laptop has access) - everything is OK

    The problem must be in the system Windows 7 from my desktop PC.

    I hope you can help!

    P.S. I rebooted in "safe mode with network" and now got access to the internet. I just read about a problem with McAfee products and now running McAfee Virtual technician to see if it helps.

    P.P.S. McAfee virtual technician several questions and some of them, now, I have access to the internet (yay!), now upgrade from McAfee and hoping for the best.

    PPPS problem solved.
    Solution (was http://service.mcafee.com/FAQDocument.aspx?id=TS101446):
    -Restart the computer in safe mode with networking
    -go to mvt.mcafee.com and install McAfee Virtual Technician
    -run and repair
    -Restart
    -updating McAfee
    -run again the MVT (no problem found)

    You have McAfee? McAfee has been updated at the same time as the last batch of updates from Windows 7 and this is the cause of problems of internet connection for most, if not all, users of McAfee.

    See the communication from this "criticism" - McAfee

    Some customers may experience a loss of network connectivity and/or errors in McAfee Security Center after a recent update

    You should make the fix McAfee, if necessary. There are corresponding communications for their enterprise products.

    I had to run the removal of McAfee Development tool a few times before and it caused a problem with the license if the PC was not connected to the internet during the abduction. Due cat of McAfee support reset their files in order to allow the relocation-reactivation. Here is their link cat - McAfee - media contains the link to the cat

  • My Favorites icon when muse my site is saved in Favorites does not match the favorite icon to the address bar. How can I fix it?

    Hello! I have a bit of mystery on my hands. Recently, I bought a Muse model site and there corresponding favicon and favorite icons. I've updated the favicon on the model site on the master pages in the Page preferences and not for the life of figure me out how to update the Favorites icon. Initially I thought that setting the favicon would automatically do an icon of the Favorites, but is no longer, I think that this is the case. Someone knows how to fix this problem or where you load the favorite icon?

    I know there must be a way to match them. See below. In the address bar it has the favicon updated dove logo that I added. In Favorites, I get the logo that came with the model site?

    Screen Shot 2015-09-22 at 7.21.33 PM.pngScreen Shot 2015-09-22 at 7.11.13 PM.png


    I have the same problem on some of my sites created from scratch.

    Here is the favicon for this site address bar. The favicon is a symbol of white doctor or Caduceus on a teal background

    Screen Shot 2015-09-23 at 11.02.43 AM.png

    But it's the image/icon that appears in the Favorites.

    Screen Shot 2015-09-23 at 11.02.25 AM.png

    (™ wesite is what I renamed the site in the Favorites bar). The image is always blue-green, but there the image of generic clock on it. I do not load this image of the clock in my site anywhere. In fact, it appears as theIcon for many sites on my favorites page.

    Screen Shot 2015-09-22 at 7.11.08 PM.png

    Here is a link to the site home | Lewis E Sellers MD care & vein vascular

    Can you please help me solve this mystery. How to make icons match?

    Thank you!

    Rachel

    Favorites icons do not use the favorite icon. It's something called apple touch icons. If you look at any website that have the icon and look at the source code for it, you'll see that it uses Apple Touch icons.

    If you look at the source code for those who have the icons you will see code like this in thesection:

  • Why a strange alphabet does not appear when I type in an address box. Integration is slow and hesitant and numbers and letters are often repeated on their own?

    I use the new Sierra, but the problem predates this.

    Whenever I am typing a command or an address, a strange alphabet appears with blue letters and numbers below. The stalls, insertion and numbers and letters and then repeat on their own. I can't get out.

    This problem comes and goes, no real reason for when it happens.

    It happens when I type in the Web addresses, etc., and when I type the commands of the operating system.

    Can you give more information on mac hardware.

    You can download and run the latest version 3.0.5 of Etrecheck (etrecheck.com)

    and post it here please.

  • ZTE a219a does not connect crashes upward on obtaining IP address

    I have a linksys router. I rebooted the router and the ZTE. I disabled my firewall. I don't know what else to try. He just hangs up on obtaining IP address...

    I upgraded the version of the firmware on my linksys router and that did the trick. My router is a few years old.

  • Satellite A60-202 after bad BIOS updated the PC does not work

    Hello

    After a very bad my BIOS update, my PC doesn't work and doesn't turn on.
    What to do now?
    It is Toshiba Satellite A60-202 with 512 MB of memory and 40 GB of HD.
    model PSA60E-OLP06TFR SA60-202

    Thank you

    Yves

    HI Yves,

    Unfortunately, if the BIOS update procedure does not work (or fill), then it is likely that the BIOS in the CMOS chip had been corrupt and without it, you will not be able to boot your laptop to fix the problem.

    It will be necessary to bring (or send) your laptop to a repairer authorized to have reflashed BIOS.

    Kind regards

Maybe you are looking for

  • iMac stayed 12 days

    This sounds like a silly question. I've been away from home for 12 days and I came back and realized that I never shut down my computer. Its brand new and I don't want something bad to happen to her... For that your stay on this long, it can damage t

  • Is this a bug or what?

    Please find the joint VI, its fairly simple function, but its behavior is unexpected.

  • sercurity Windows Update error code 80072F78 failure help under attack

    I cannot download the updates of windows important sercurity, 11 updates, windows vista 6 windows defender 1 office 2007 4, displays error code 80072F78, cannot find a solution need help my computor get daily attacks.

  • Palvilion dv6-7138us memory upgrade

    Hello, I have problems finding the maximum memory a dv6-7138us support. If anyone knows this as the maximum amount of memory I can install or maybe a link to the news. Also did anyone knows no improvement with a faster memory or it is simply better t

  • SDHC card freezes computer when it is placed in a SD reader, running Vista

    I bought a Sandisk SDHC 4G card for my phone. When I try to open the map it freezes the computer window. If I try to start windows with the card in it does not work. Is it possible for me to update my also computers SD card reader to read SDHC?