Questions tagged [authentication]

For questions about authentication in a network perspective. For instance, you are troubleshooting an issue with SSH authentication or you are having trouble getting an IPsec tunnel to authenticate properly. Any authentication issues or configurations that are related to network devices.

Filter by
Sorted by
Tagged with
0
votes
0answers
14 views

AES Encryption/Router Configuration [closed]

I am not sure if this is the right place to ask this question, if it is not, let me know. I was looking for the AES encryption key used on my router for my WPA2-Personal connection. I looked at the ...
0
votes
0answers
19 views

Cisco ISE VM server and eapol_test(free radius) on same network through VPN

My cisco ISE server is on a remote VM and i have installed free radius tool eapol_test to test EAP-TLS authentication. When i send auth request to eapol_test tool, it times out at the client end and ...
0
votes
1answer
118 views

Cisco 2960 radius configuration

I have multiple cisco switches like Nexus family and IOS family switches and now i am trying to configure centralized authentication so i have install Freeradius and freeIPA (ldap server) I have ...
0
votes
0answers
13 views

Using FreeRadius as client with ISE Radius server for EAP-TLS authentication

I want to perform load testing on the ise server and am using freeradius as NAS (access point) server to perform EAP-TLS cert based authentication on a physical device. Will this work?
1
vote
1answer
50 views

ISE as RADIUS server or not in EAP-TLS authentication

Does the ISE server act as a RADIUS server to a Switch proxying a supplicant certificate, or does it use some other protocol? This is for EAP-TLS based auth
2
votes
1answer
51 views

Cisco configure RADIUS with local account same time

In LAB i am working on Cisco authentication with freeradius and everything works but i want my cisco switch first lookup in radius and if user didn't find then it go to local database. currently i ...
0
votes
1answer
25 views

WebAuth With RADIUS For Switch Web Portal

I have a Cisco IE4000 running IOS 15.2. I am trying to login with my RADIUS credentials to the web portal for the switch. Currently the RADIUS is configured for successful login to Console and SSL but ...
2
votes
2answers
376 views

Cisco 3750G - SSH Diffie Hellman Group 1 SHA1 Error

I recently implemented SSH configuration on my 3750G switch stack. I have -set the domain name -generated the rsa key using 2048 bits -ensured that the vty lines are set to transport input ssh Now ...
3
votes
1answer
45 views

Hp procurve 2510 ssh problem

My app connects to switches via ssh to gather info from them. I can connect to any model except this one. I get the authentication error from the switch yet i can connect via putty with the same ...
2
votes
1answer
48 views

secure authentication over LAN 802.1X

secure authentication over LAN I have installed FreeRadius Version 3.0.12 server, we debian 9.4.0, and I want to secure my LAN, that means, nobody can connect to the LAN if its MAC address is not ...
0
votes
1answer
64 views

How to transition an unauthenticated OSPF area to an MD5 authenticated area on a Cisco?

I currently have an existing OSPF area that has neighborships and is exchanging routes, but has no authentication mechanism. Is there a way to transition it to an MD5 authenticated area without ...
1
vote
1answer
65 views

Authenticating WiFi users with NFC tap points [closed]

I have been looking for a solution to a social WiFi issue at my company. We have poor WiFi authentication for customers in stores, but most of the issues stem from captive portal authentication. My ...
3
votes
1answer
77 views

security benefits of using RADIUS in router authentication - packet tracer

I'm trying to learn how can one protect routers (using Cisco Packet Tracer) and I found out I can set local password to authenticate access to the router privileged and configuration mode. However, I ...
0
votes
1answer
67 views

A new version of RIPv2 using different keys for each router

There's a problem in a textbook that is really stumping me. How would you enhance the RIPv2 protocol to provide a (more) secure and scalable schema for distributing the updates? Describe the ...
4
votes
2answers
1k views

IKE phase 1 and phase 2

Was going through the IKE phase 1 and phase 2. I have some questions regarding the same which is bothering me with respect to main mode and quick mode.Please correct me if i go wrong somewhere. Phase ...
2
votes
1answer
366 views

Cisco Mobility Express - supported authentication options

What are the supported authentication options for the ME APs? Do they support only login through local credentials or RADIUS/TACACS+ is also supported?
3
votes
1answer
564 views

Port Security Or 802.1X Authentication On Non-Server Network

I have a closed network of 3 switches and 40 computers. 35 of those computers (Windows 7 x64 Professional) need to be plugged into any of the 24 ports on 2 of the switches at any time depending on the ...
2
votes
0answers
60 views

OSPF peering not forming when authentication is enabled

OSPF peering between two of my routers went down 2 days before. After troubleshooting, I removed the authentication commands from both devices GRE tunnel interfaces ip ospf authentication message-...
5
votes
2answers
2k views

AAA authentication for all users and a single user for local only?

Is it possible to have AAA for a switch or router, dealing with JunOS, IOS and NXOS. Where all users default to a radius/tacacs server but there is a single user that bypasses the remote auth and uses ...
1
vote
1answer
134 views

How to authenticate logins to Ericsson(IPSO) routers without password from shell server

I am very new at networks. I am attempting to automate the health check process of a system network from the main server being a shell OS. I have been successful for some network nodes which are ...
1
vote
1answer
159 views

Authorize IoT devices to connect to a WPA2 network without a password

I have an air quality IoT device that connects to WiFi and report data to the cloud and are planning to install 100+ devices at a customer location. To install a device, the customer has to connect to ...
2
votes
1answer
3k views

IPSec IKEv2 connection failure due to RSA authentication issue

I'm trying to get an IPSec/IKEv2 setup working, which was implement following this I don't understand why, but when a client connects (StrongSwan on Android here), the session is closed because the ...
0
votes
1answer
148 views

How do I assign machines to a VLAN based on machine authentication and user authentication using a NPS RADIUS server? [closed]

We have company-issued laptops that users can log into using smart cards. Using the Tunnel-PVT-Groupd-ID RADIUS element, we can assign the machine to a VLAN based on the authenticated user. However, ...
4
votes
1answer
533 views

Dell N3000 - Use port security for certain ports while Dot1x is globally enabled

I have 3 Dell N3048Ps that are going to connect to printers and computers. The computers will be authenticated through dot1x, but the printers need to be authenticated by mac address. Dot1x has been ...
6
votes
1answer
10k views

How do you configure a TACACS+ tac_plus server on Ubuntu 16.04 that authenticates against Microsoft Active Directory?

How do you configure a TACACS+ tac_plus server on Ubuntu 16.04 that authenticates against Microsoft Active Directory?
1
vote
1answer
890 views

Cisco TACACS authentication config

I'm inheriting a DoD network (completely separated from the Internet). I'm looking at the configs and I'm seeing a bunch of stuff I think isn't needed but I've never used TACACS, just Radius. The ...
1
vote
1answer
2k views

How to Multiple Radius server in ASA

We have two RADIUS server for SecureID token auth for VPN and i have configure 10.1.1.1 (primary) but don't know how to configure 10.1.1.2 (backup radius) This is what i have currently aaa-server ...
1
vote
1answer
123 views

Doubt on handling mutable fields in IP header when computing digest or authentication data

I read RFC 4302, IP Authentication Header, Section 3.3.3, Integrity Check Value Calculation. In page 13, it is mentioned that the fields which are mutable during transit, like TTL or hop count, are ...
2
votes
1answer
98 views

How does IPv6 AH guarranties authentication?

IPv6 Authentication Header uses MD5 hash on the payload, the header, and unchanging fields of the IPv6 header and options to prevent sequence quessing attacks. But all these required information to ...
1
vote
1answer
595 views

Cisco Radius Authentication with Local Fallback [closed]

We have Radius authentication setup on a number of CISCO devices. Each device also has a local account. Is it possible to make it so you can only use the local account when the radius server is ...
2
votes
1answer
531 views

Juniper MX Radius server configuration: No authentication-server list configured

On an MX router I have configured a DHCP server and radius server authentication. Unfortunately, it is not working yet. On another MX router I have configured the same configuration and that it ...
-2
votes
1answer
230 views

What does aaa mean?

In the below configuration, what does aaa mean? aaa authentication login CON local aaa authentication login VTY group VTY local aaa authentication dot1x default group DOT1x aaa authorization exec ...
2
votes
1answer
860 views

Cisco IOS public-key auth with privilege 15 and no password

From IOS 15 we can log on Cisco IOS with RSA public key authentication. However we still have to assign a password to the user. If we don't the user can log on without any password (and without the ...
1
vote
1answer
289 views

How does Tacacs server forward the credentials from client to Authentication server?

How does Tacacs server forward the credentials from client to Authentication server? Does a decryption and Encryption of creds takes place? Or is it just a packet forward ? Edit: The authentication ...
2
votes
1answer
1k views

What is null authentication in WLAN and why is it required?

I was reading about the DISCOVERY operation phase for an RSN. There a diagram shows NULL Authentication (Second Part, in the diagram). What is it and what is the use? The image is from the book, ...
1
vote
1answer
856 views

How to force users to authenticate to get IP adress from DHCP?

Can You help me !! I want to force users to authentificate to get IP from DHCP-server (win server) if not they can't get ip @ adress !! even they are connected to network
0
votes
1answer
96 views

How VPNs authenticate a user using RADIUS

I have just had a lecture on VPNs and RADIUS and have a question with regards to authentication. I am aware of protocols such as EAP and PEAP and was wondering how these protocols work alongside ...
3
votes
1answer
804 views

How does NAC or NAP enhance 802.1X?

I'm studying about 802.1X port based authentication and RADIUS, and I came across the terms of NAC (Network Admission Control) and NAP (Network Access Protection). As long as I know NAC tries to unify ...
0
votes
1answer
62 views

Overhead from using one network account

Theoretical question. If using WPA2 Enterprise authentication and radius, would there be adverse effects from say, 300 devices authenticating with the same network account? For example, John, Sam, ...
0
votes
1answer
385 views

CISCO Switch SSH Certificate via TACACS-Server

I'm currently a trainee, and I am assigned to do a task where I have to find out whether it is possible if a switch can get its certificate by contacting the TACACS-Server. To explain what I'm trying ...
0
votes
1answer
79 views

Wifi location based access control

I'd like to know if it is possible to determine a user's location with wi-fi and incorporate that into part of the identification, authentication and authorisation mechanism of the network? This ...
1
vote
3answers
1k views

802.1X authentication not working on Client Machines if connected through Cisco IP phone

I trying to do 802.1x authentication with certificates. I am stuck with a problem client machine which fails to communicate with the RADIUS server (NPS) when I connect it through a Cisco IP phone. ...
1
vote
1answer
569 views

What is happening during CHAP PPP authentication between Cisco routers?

I'm going through the great CBT nuggets series for the CCNA. In the video on WAN protocols Jeremy sets up a PPP connection between two routers using CHAP authentication. On each router he adds a ...
2
votes
2answers
18k views

How do i factory reset a Allied Telesyn AT-9924t?

I have connected to the switch from my Win7 computer with the following equipment. (the blue cable isnt the exact one, but nearly the same) When i restart the switch while connected with Putty or ...
1
vote
2answers
185 views

Is a network connection always a single network address? [closed]

With a figure showing a communication between a network and a server, does that indicate a single network address or can it include multiple network addresses? Is a single network address the same as ...
0
votes
1answer
121 views

Authentication of reverse proxy

Let's say there is an application server that runs multiple web applications. Some of these applications are accessible directly from the Internet, however a specific application requires single-sign-...
6
votes
1answer
3k views

How to view default authentication method for different lines(cty, vty, aux, tty) in IOS?

For example if I enable AAA(aaa new-model) in IOS router with default configuration and try to log in over console line(cty), then there is no authentication. However, if I try to log in over telnet(...
1
vote
0answers
2k views

Comware 7 - User Accounts Close Every 5 Days

A coworker and I recently migrated a core from old Dell switches to two HP 5700 running Comware 7 and IRF. What we have noticed is that every 5 days, the user accounts no longer accept the passwords. ...
7
votes
1answer
2k views

BGP authentication-key-chain vs. authentication-key

I found a neat little behavior on a Juniper box I was working with today. We were migrating from a Cisco ASR to an MX and all of our internet exchange peers that had authentication configured didn't ...
1
vote
0answers
349 views

wpa-aes EAP-peap authentication problem

I'm trying to connect ubiquity NanoStation M2 as Station/Router mode to a hotspot that I believe has WPA/AES security and EAP-PEAP for auth. I have tested the username and password from my laptop and ...