Freeradius and CISCO Switch Access (SSH)

markieparkie

Hi all,

Has anyone got freeradius on the pfsense box working with providing authentication to the devices?

I have the freeradius working, but its not putting me straight into priv 15.

If I use the Cisco-AVPAir attrib then I get the service stopping or not starting and the error /usr/local/etc/raddb/users[1]: Parse error (check) for entry Cisco-AVPair: Invalid attribute name in the logs.

I have the following aaa setup also but its currently only giving my priv level 1 if using a user without any extra parameters:

aaa authentication login default group radius local
aaa authorization exec default group radius if-authenticated

Thanks…

markieparkie

Hi all,

Has none had this issue at all or do people on this platform tend to not use freeradius package for their switch admin?

Thanks..

markieparkie

Hi,

Still having this issue.. Has anyone fixed this or is it addressed in a newer release? Currently running: 2.3.2_Release

Thanks.