Configuration issue at radiusd.conf?

[Matthew Newton]

On 14/05/2021 17:17, Honglak Kim via Freeradius-Users wrote:
> (0) Sent Access-Accept Id 116 from 10.192.2.141:1812 to 10.0.254.3:43509 length 0
> (0)   Juniper-Local-User-Name = "admin"
> (0)   Arista-AVPair = "shell:priv-lvl=15"
> (0)   Arista-AVPair = "shell:roles=network-admin"
> (0)   PaloAlto-Admin-Role = "superuser"
> (0)   PaloAlto-Panorama-Admin-Role = "superuser"
> (0)   PaloAlto-User-Group = "all"
> (0) Finished request

That looks like you're trying to give console access to a switch/router.

The debug output seems correct, in that you're sending back an 
Access-Accept. However you need to carefully read the switch 
documentation. They are usually very picky about what attributes are 
expected. If you send back the wrong ones, or slightly the wrong format, 
it won't work and access will be denied.

Try checking the debug logs on your device, assuming it gives you some, 
to see if it says anything.

Make sure you're not firewalling/filtering responses (e.g. ACLs on the 
switch).

FreeRADIUS seems to be working correctly from what you have sent.

-- 
Matthew