Skip to main content
BarryGhuman
BarryGhuman
New Member
July 5, 2024
Solved

FortiNAC to send the Cisco radius Neat attribute

  • July 5, 2024
  • 1 reply
  • 4504 views

Hi Team, 

 

I am replacing Cisco ISE with FortiNAC. The Cisco ISE is currently configured to profile the Access Points and send a Cisco Neat attribute. This Neat attribute helps the Cisco switch assign a truck role to the port. 

 

In FortiNAC, Network Access > "Configuration" - It does not provide any option to send radius attribute only and VLAN ID is mandatory. 

https://www.cisco.com/c/en/us/support/docs/lan-switching/8021x/116681-config-neat-cise-00.html

 

cisco-avpair = device-traffic-class = Switch

 

I want to check if FortiNAC has a way to sort this situation. 

 

Regards, 

Barry Ghuman 

Best answer by ebilcari

The access value field is just a value that can be used if one of the attributes has the pointer %ACCESS_VALUE% configured. If the default is set to None and only this custom attribute is selected, that will be the only attribute that will end up in the Access-Accept:

neat (1).PNG

 

You can run a packet capture from FNAC CLI to verify the RADIUS responses: 

tcpdump host x.x.x.x and port 1812 -nnv

or if in FNAC version 7.2/4:

execute tcpdump host x.x.x.x and port 1812 -vX

*replace x.x.x.x with the IP of the switch

1 reply

ebilcari
Staff
ebilcari
Staff
July 5, 2024

Yes, it's possible through custom Attribute Groups. You can also check this article that shows a similar setup.

Emirjon
    BarryGhuman
    BarryGhumanAuthor
    New Member
    July 5, 2024

    Hi Team, 

    I think you didn't understand my question. I want to assign only Radius attributes. I don't want to send the mandatory VLAN attribute. 

     

    Regards, 

    Barry Ghuman

     

     

     

    ebilcari
    Staff
    ebilcari
    Staff
    July 8, 2024

    Are you trying to customize the attributes on the RADIUS Access-Accept right?

    Are you having trouble creating the custom attribute group or applying it?

    neat.PNG

    Emirjon
      Terms & ConditionsAccessibility statement