Re: [c-nsp] Cisco ASR 9k and Windows RADIUS server

2016-05-09 Thread Nathan Ward
> On 9/05/2016, at 19:58, Kimaru Mansour wrote: > > So I did some more experimenting with this in the lab and I can confirm > that it is not broken in XR 4.3.2 > I took PCAPs to compare 5.3.2 based Access-req with 4.3.2 based Access-req > and one thing that stands out, is that

Re: [c-nsp] Cisco ASR 9k and Windows RADIUS server

2016-05-09 Thread Kimaru Mansour
So I did some more experimenting with this in the lab and I can confirm that it is not broken in XR 4.3.2 I took PCAPs to compare 5.3.2 based Access-req with 4.3.2 based Access-req and one thing that stands out, is that in the 5.3.2 Access-req the NAS-IPv6-Address attribute is sent out with an

Re: [c-nsp] Cisco ASR 9k and Windows RADIUS server

2016-05-05 Thread David Wilkinson
On 05/05/2016 12:11, Pshem Kowalczyk wrote: Just a suggestion. I've seen something similar with SNMP communities in XR - try prepending all 'special' characters in the secret with a backslash '\' in the configuration. kind regards Pshem I removed the special characters and still getting

Re: [c-nsp] Cisco ASR 9k and Windows RADIUS server

2016-05-05 Thread Pshem Kowalczyk
Just a suggestion. I've seen something similar with SNMP communities in XR - try prepending all 'special' characters in the secret with a backslash '\' in the configuration. kind regards Pshem On Thu, 5 May 2016 at 22:51 David Wilkinson wrote: > On 04/05/2016

Re: [c-nsp] Cisco ASR 9k and Windows RADIUS server

2016-05-05 Thread David Wilkinson
On 04/05/2016 07:37, Ulrik Ivers wrote: Hi David, Has the exact same config, including the shared secret, ever worked? With another RADIUS server? I ask because we had a similar problem getting Radius to work with our ASR 9001 when they were first deployed. Don't remember if we saw any

Re: [c-nsp] Cisco ASR 9k and Windows RADIUS server

2016-05-04 Thread Mick O'Rourke
Working on XR 4.3.2 with Microsoft NPS/Radius here. The only special config required was on the NPS side was an attribute specifying the IOS XR IE task group. Nothing special was required on the XR side - your config looks very similar to what we use. Mick On 4 May 2016 09:31, "David Wilkinson"

Re: [c-nsp] Cisco ASR 9k and Windows RADIUS server

2016-05-04 Thread Kimaru Mansour
Hi, Having same issue myself. Also noticed the malformed packet messages. We in fact placed a FreeRADIUS implementation in front of the Windows Server as a proxy to forward requests between RADIUS client and Windows RADIUS server. Our key is also shorter than 22 chars so that doesn't seem to be

Re: [c-nsp] Cisco ASR 9k and Windows RADIUS server

2016-05-04 Thread Ulrik Ivers
@puck.nether.net Subject: [c-nsp] Cisco ASR 9k and Windows RADIUS server Hi, We have a RADIUS server running on Windows Server 2008. It currently handles the logins for our network devices, a mixture of Cisco IOS, NX-OS and Dell F10 blade switches and this has been working fine. When I went

[c-nsp] Cisco ASR 9k and Windows RADIUS server

2016-05-03 Thread David Wilkinson
Hi, We have a RADIUS server running on Windows Server 2008. It currently handles the logins for our network devices, a mixture of Cisco IOS, NX-OS and Dell F10 blade switches and this has been working fine. When I went to setup our new ASR 9006 routers to the RADIUS server it was failing to