Instant On - Wired

 View Only
  • 1.  Aruba Instant On 1930 - Radius Management Authentication

    Posted 03-12-2022 08:15 PM
    After upgrading my aruba Instant On 1930 24G 4SFP/SFP+ Switch JL682A to version 2.5.0.42. I have enabled Radius Admin Authentication but am unable to get the login to succeed. Does anyone know the Radius Attributes required to authenticate

    ------------------------------
    Harrison
    ------------------------------


  • 2.  RE: Aruba Instant On 1930 - Radius Management Authentication

    Posted 03-15-2022 07:07 PM
    Hi Harrison,

    I've emailed my team about this concern, and they're looking into it. Once I have more information, I will share it in the thread here.

    ------------------------------
    Aruba Instant On Communications
    ------------------------------



  • 3.  RE: Aruba Instant On 1930 - Radius Management Authentication

    Posted 03-21-2022 11:38 AM
    Hello

    I have the same problem. There seems to be a RADIUS login for management purpose, but there's lack of docs about, especially RADIUS attributes that need to be passed to the supplicant

    ------------------------------
    Paolo Vasinton
    ------------------------------



  • 4.  RE: Aruba Instant On 1930 - Radius Management Authentication

    Posted 03-22-2022 07:45 PM
    Can you check to see if the RADIUS service attributes are configured? 

    These are the RADIUS attributes:

    Service-Type=6 (Administrative)  -- read/write access

    Service-Type=7 (NAS prompt) --- read-only access



    ------------------------------
    Aruba Instant On Communications
    ------------------------------



  • 5.  RE: Aruba Instant On 1930 - Radius Management Authentication

    Posted 03-23-2022 07:08 AM

    Hello, perfect, thanks, it's working now:

    in Microsoft NPS use Auth method PAP, SPAP and Service-Type (others) administrative



    ------------------------------
    Paolo Vasinton
    ------------------------------



  • 6.  RE: Aruba Instant On 1930 - Radius Management Authentication

    Posted 03-24-2022 09:15 PM
    That's great news! Thank you for updating us on this.

    ------------------------------
    Aruba Instant On Communications
    ------------------------------



  • 7.  RE: Aruba Instant On 1930 - Radius Management Authentication

    Posted 21 days ago
    There is nothing in the admin/user guide saying you can login to management using RADIUS.

    Is there a configuration guide on this on the requirements

    Our switches are in Local mode.
    We are required by some clients to have 2FA on these switches and we run with the 1930 & 1960's
    There are NO IP restrictions either which would allow us to secure them. Since we can limit only hosts IP's with 2FA to access https.

    @JM52 Where did you get your information from?
    @Dark345 Can you share how you got this working since there is a lack of documentation?



    ------------------------------
    Vaughn
    ------------------------------



  • 8.  RE: Aruba Instant On 1930 - Radius Management Authentication

    Posted 21 days ago
    hello, it's true that docs is missing radius setup, but you can follow @JM52 instructions, she is the community manager and probably got the info from internal engineers.

    I've managed to get the radius login system working by passing Service-Type (others) administrative to supplicants.

    See this screenshot for Microsoft NPS:



    ​​​

    ------------------------------
    Paolo Vasinton
    ------------------------------



  • 9.  RE: Aruba Instant On 1930 - Radius Management Authentication

    Posted 16 days ago

    To Enable RADIUS Management authentication, please log in to the Web GUI navigate to security -> Radius configuration, and enable the same.

    Please find the below screenshot,

     

    We will shortly share the updated document for the same.

     





    ------------------------------
    Aruba Instant On Communications
    ------------------------------