How to set user RADIUS profile to include Cisco vendor-specific DNS servers (primary and secondary)
Originally Published: 2004-03-08
Article Number
Applies To
RADIUS
Cisco VPN 3000 Concentrator
Vendor-Specific Attribute (VSA)
Issue
User does not have (but needs) a Primary DNS set in RADIUS profile
Cisco VPN Concentrator does not work with the Ascend Primary DNS attribute number of 135 set in user profile
Resolution
1. Choose to edit or add Profile
2. From left hand table, choose Vendor-Specific and press button "Add Attribute"
3. In pop-up box, choose Value type to be String Value
4. Enter value: 9 1 "ip:dns-servers=192.168.1.20"
5. Click OK button
If there is a need to enter more than one DNS Server IP address, then separate the IP addresses with space character as shown below:
9 1 "ip:dns-servers=192.168.1.20 192.168.2.21"
As an example, when adding the vendor-specific attribute into the ACE/Server user profile, the Primary DNS should look like the following:
3076 1 "ip:CVPN3000-Primary-DNS=192.168.2.23"
and for the secondary DNS:
3076 1 "ip:CVPN3000-Secondary-DNS=192.168.4.22"
Workaround
for more information.
Related Articles
Secondary RVM not available when Primary down Number of Views For secondary remediator, Maintain All doesn't work after selecting Clear All option Number of Views How to send authentication requests to alternative/secondary IP addresses of the RSA Authentication Manager 8.x server Number of Views SecurID: How to create node secret for clustered web server in RSA Authentication Manager Number of Views Database fails to start with ORA-03113: end-of-file on communication channel error in RSA Identity Governance & Lifecycle Number of Views
Trending Articles
RSA Authentication Manager Upgrade Process RSA Release Notes for RSA Authentication Manager 8.8 RSA RADIUS Server service failed to start in the RSA Authentication Manager 8.1 Operations Console Microsoft Entra ID External MFA - Relying Party Configuration Using OIDC - RSA Ready Implementation Guide RSA Release Notes: Cloud Access Service and RSA Authenticators
Don't see what you're looking for?
