Comware

 View Only

  • 1.  Comware 7 radius user login using Cisco ISE not working.

    Posted Dec 01, 2025 09:28 AM

    Hi!

    Anyone using Cisco ISE for Comware 7 radius admin login?

    My radius configuration looks ok on the switch and the request is reaching Cisco ISE but I am getting error with authorization error -> Could not find selected Authorization Profiles.

    I have tried different settings but nothing worked so far.

    Access Type = ACCESS_ACCEPT
    Service-Type = 6
    H3C-User-Group = network-admin

    Access Type = ACCESS_ACCEPT
    Service-Type = 6
    cisco-av-pair = "shell:roles=\"network-admin\""

    Also tried few more but nothing worked so far.

    If someone can help with this.

    Thanks



    -------------------------------------------


  • 2.  RE: Comware 7 radius user login using Cisco ISE not working.

    Posted Dec 01, 2025 03:32 PM

    I think you can better choice for TACACS+ but RADIUS is also possible off course.

    Radius Enforcement:

    Type: Radius:H3C

    Name: H3c-Exec-Privilege

    Value = Manage (3)

    3=admin

    0=readonly

    Example is based on Comware 5



    ------------------------------
    Marcel Koedijk | MVP Expert 2024 | ACEP | ACMP | ACCP | ACDP | Ekahau ECSE | Not an HPE Employee | Opinions are my own
    ------------------------------



  • 3.  RE: Comware 7 radius user login using Cisco ISE not working.

    Posted Dec 01, 2025 04:03 PM
    Edited by capricorn80 Dec 01, 2025 04:04 PM

    I dont have Tacas license

    I tried this but still getting error.

    Access Type = ACCESS_ACCEPT
    H3C-Exec-Privilege = 3

    This the error I can see on Cisco ISE

    15011    Authorization Policy not configured
     15019    Could not find selected Authorization Profiles

    Returned RADIUS Access-Reject

    -------------------------------------------

    Original Message


  • 4.  RE: Comware 7 radius user login using Cisco ISE not working.

    Posted Dec 01, 2025 06:10 PM
    Seems like you missed the authentication policy? Sadly can't help you on the Cisco ICE configuration.

    C2-Vertrouwelijk




    Original Message


  • 5.  RE: Comware 7 radius user login using Cisco ISE not working.

    Posted Dec 02, 2025 02:04 AM

    The authentication policy is working fine. Its the authorization policy that is not working fine.

    -------------------------------------------

    Original Message


Related Content