Cisco ACS for RADIUS Auth to SA-700

[DougR_]

Does any one have experience with Cisco ACS handeling RADIUS auth?

We are seeing the Cisco ACS reuturn an Auth-OK, but the SA still marks it as failed Auth. It works fine with the SBR or other Auth methods.

[DougR_]

In digging through this I want to see the Debug Logging - the log is not in ASCII, what can be used to view the Debug Log from the SA?

[DougR_]

The only difference I can find in the two Access-Accept responses is the Attribute Value Pairs returned. The SBR only returns session-timeout(27) the Cisco ACS always returns a long Class(25) value along with any other values we set. Is it possible the IVE has a problem with certain vlaues for a class, maybe too large of a value or a format?

[DougR_ · Accepted solution]

The problem seems to be with the configuration of the Cisco ACS. When the device is removed from groups the Auth works well. Another reason to use the SBR

[michael.saw_]

Is there a solution for MAG with ACS?

Is there a kb link to share?