Questions tagged [authentication]

For questions about authentication in a network perspective. For instance, you are troubleshooting an issue with SSH authentication or you are having trouble getting an IPsec tunnel to authenticate properly. Any authentication issues or configurations that are related to network devices.

Filter by
Sorted by
Tagged with
1
vote
1answer
37 views

Cisco 3750G - SSH Diffie Hellman Group 1 SHA1 Error

I recently implemented SSH configuration on my 3750G switch stack. I have -set the domain name -generated the rsa key using 2048 bits -ensured that the vty lines are set to transport input ssh Now ...
2
votes
1answer
24 views

Hp procurve 2510 ssh problem

My app connects to switches via ssh to gather info from them. I can connect to any model except this one. I get the authentication error from the switch yet i can connect via putty with the same ...
1
vote
0answers
22 views

Why have an AP authentication phase as well as an association phase? [duplicate]

Why are there 2 phases? What's the point of the authentication phase? Why can't it be cut down to a single association phase where after the probe response, the mobile station just sends an ...
2
votes
1answer
42 views

secure authentication over LAN 802.1X

secure authentication over LAN I have installed FreeRadius Version 3.0.12 server, we debian 9.4.0, and I want to secure my LAN, that means, nobody can connect to the LAN if its MAC address is not ...
0
votes
0answers
37 views

Allied Telesis AT-FS750 MAC authorization with FreeRadius

It is possible to configure mac based authorization with FreeRadius on AT-FS750? We need block device in our network with unknown MAC address. Or set limited access with specify quest VLAN.
0
votes
1answer
63 views

How to transition an unauthenticated OSPF area to an MD5 authenticated area on a Cisco?

I currently have an existing OSPF area that has neighborships and is exchanging routes, but has no authentication mechanism. Is there a way to transition it to an MD5 authenticated area without ...
1
vote
1answer
41 views

Authenticating WiFi users with NFC tap points [closed]

I have been looking for a solution to a social WiFi issue at my company. We have poor WiFi authentication for customers in stores, but most of the issues stem from captive portal authentication. My ...
3
votes
1answer
61 views

security benefits of using RADIUS in router authentication - packet tracer

I'm trying to learn how can one protect routers (using Cisco Packet Tracer) and I found out I can set local password to authenticate access to the router privileged and configuration mode. However, I ...
0
votes
1answer
59 views

A new version of RIPv2 using different keys for each router

There's a problem in a textbook that is really stumping me. How would you enhance the RIPv2 protocol to provide a (more) secure and scalable schema for distributing the updates? Describe the ...
3
votes
2answers
608 views

IKE phase 1 and phase 2

Was going through the IKE phase 1 and phase 2. I have some questions regarding the same which is bothering me with respect to main mode and quick mode.Please correct me if i go wrong somewhere. Phase ...
2
votes
1answer
176 views

Cisco Mobility Express - supported authentication options

What are the supported authentication options for the ME APs? Do they support only login through local credentials or RADIUS/TACACS+ is also supported?
3
votes
1answer
463 views

Port Security Or 802.1X Authentication On Non-Server Network

I have a closed network of 3 switches and 40 computers. 35 of those computers (Windows 7 x64 Professional) need to be plugged into any of the 24 ports on 2 of the switches at any time depending on the ...
2
votes
0answers
54 views

OSPF peering not forming when authentication is enabled

OSPF peering between two of my routers went down 2 days before. After troubleshooting, I removed the authentication commands from both devices GRE tunnel interfaces ip ospf authentication message-...
5
votes
2answers
1k views

AAA authentication for all users and a single user for local only?

Is it possible to have AAA for a switch or router, dealing with JunOS, IOS and NXOS. Where all users default to a radius/tacacs server but there is a single user that bypasses the remote auth and uses ...
1
vote
1answer
103 views

How to authenticate logins to Ericsson(IPSO) routers without password from shell server

I am very new at networks. I am attempting to automate the health check process of a system network from the main server being a shell OS. I have been successful for some network nodes which are ...
1
vote
1answer
100 views

Authorize IoT devices to connect to a WPA2 network without a password

I have an air quality IoT device that connects to WiFi and report data to the cloud and are planning to install 100+ devices at a customer location. To install a device, the customer has to connect to ...
2
votes
1answer
2k views

IPSec IKEv2 connection failure due to RSA authentication issue

I'm trying to get an IPSec/IKEv2 setup working, which was implement following this I don't understand why, but when a client connects (StrongSwan on Android here), the session is closed because the ...
0
votes
1answer
119 views

How do I assign machines to a VLAN based on machine authentication and user authentication using a NPS RADIUS server? [closed]

We have company-issued laptops that users can log into using smart cards. Using the Tunnel-PVT-Groupd-ID RADIUS element, we can assign the machine to a VLAN based on the authenticated user. However, ...
3
votes
1answer
384 views

Dell N3000 - Use port security for certain ports while Dot1x is globally enabled

I have 3 Dell N3048Ps that are going to connect to printers and computers. The computers will be authenticated through dot1x, but the printers need to be authenticated by mac address. Dot1x has been ...
6
votes
1answer
8k views

How do you configure a TACACS+ tac_plus server on Ubuntu 16.04 that authenticates against Microsoft Active Directory?

How do you configure a TACACS+ tac_plus server on Ubuntu 16.04 that authenticates against Microsoft Active Directory?
1
vote
1answer
705 views

Cisco TACACS authentication config

I'm inheriting a DoD network (completely separated from the Internet). I'm looking at the configs and I'm seeing a bunch of stuff I think isn't needed but I've never used TACACS, just Radius. The ...
1
vote
1answer
2k views

How to Multiple Radius server in ASA

We have two RADIUS server for SecureID token auth for VPN and i have configure 10.1.1.1 (primary) but don't know how to configure 10.1.1.2 (backup radius) This is what i have currently aaa-server ...
1
vote
1answer
115 views

Doubt on handling mutable fields in IP header when computing digest or authentication data

I read RFC 4302, IP Authentication Header, Section 3.3.3, Integrity Check Value Calculation. In page 13, it is mentioned that the fields which are mutable during transit, like TTL or hop count, are ...
2
votes
1answer
73 views

How does IPv6 AH guarranties authentication?

IPv6 Authentication Header uses MD5 hash on the payload, the header, and unchanging fields of the IPv6 header and options to prevent sequence quessing attacks. But all these required information to ...
1
vote
1answer
509 views

Cisco Radius Authentication with Local Fallback

We have Radius authentication setup on a number of CISCO devices. Each device also has a local account. Is it possible to make it so you can only use the local account when the radius server is ...
2
votes
1answer
443 views

Juniper MX Radius server configuration: No authentication-server list configured

On an MX router I have configured a DHCP server and radius server authentication. Unfortunately, it is not working yet. On another MX router I have configured the same configuration and that it ...
-2
votes
1answer
215 views

What does aaa mean?

In the below configuration, what does aaa mean? aaa authentication login CON local aaa authentication login VTY group VTY local aaa authentication dot1x default group DOT1x aaa authorization exec ...
2
votes
1answer
755 views

Cisco IOS public-key auth with privilege 15 and no password

From IOS 15 we can log on Cisco IOS with RSA public key authentication. However we still have to assign a password to the user. If we don't the user can log on without any password (and without the ...
1
vote
1answer
231 views

How does Tacacs server forward the credentials from client to Authentication server?

How does Tacacs server forward the credentials from client to Authentication server? Does a decryption and Encryption of creds takes place? Or is it just a packet forward ? Edit: The authentication ...
2
votes
1answer
1k views

What is null authentication in WLAN and why is it required?

I was reading about the DISCOVERY operation phase for an RSN. There a diagram shows NULL Authentication (Second Part, in the diagram). What is it and what is the use? The image is from the book, ...
1
vote
1answer
555 views

How to force users to authenticate to get IP adress from DHCP?

Can You help me !! I want to force users to authentificate to get IP from DHCP-server (win server) if not they can't get ip @ adress !! even they are connected to network
0
votes
1answer
85 views

How VPNs authenticate a user using RADIUS

I have just had a lecture on VPNs and RADIUS and have a question with regards to authentication. I am aware of protocols such as EAP and PEAP and was wondering how these protocols work alongside ...
3
votes
1answer
681 views

How does NAC or NAP enhance 802.1X?

I'm studying about 802.1X port based authentication and RADIUS, and I came across the terms of NAC (Network Admission Control) and NAP (Network Access Protection). As long as I know NAC tries to unify ...
0
votes
1answer
39 views

Overhead from using one network account

Theoretical question. If using WPA2 Enterprise authentication and radius, would there be adverse effects from say, 300 devices authenticating with the same network account? For example, John, Sam, ...
0
votes
1answer
318 views

CISCO Switch SSH Certificate via TACACS-Server

I'm currently a trainee, and I am assigned to do a task where I have to find out whether it is possible if a switch can get its certificate by contacting the TACACS-Server. To explain what I'm trying ...
0
votes
1answer
74 views

Wifi location based access control

I'd like to know if it is possible to determine a user's location with wi-fi and incorporate that into part of the identification, authentication and authorisation mechanism of the network? This ...
1
vote
3answers
1k views

802.1X authentication not working on Client Machines if connected through Cisco IP phone

I trying to do 802.1x authentication with certificates. I am stuck with a problem client machine which fails to communicate with the RADIUS server (NPS) when I connect it through a Cisco IP phone. ...
1
vote
1answer
529 views

What is happening during CHAP PPP authentication between Cisco routers?

I'm going through the great CBT nuggets series for the CCNA. In the video on WAN protocols Jeremy sets up a PPP connection between two routers using CHAP authentication. On each router he adds a ...
2
votes
1answer
15k views

How do i factory reset a Allied Telesyn AT-9924t?

I have connected to the switch from my Win7 computer with the following equipment. (the blue cable isnt the exact one, but nearly the same) When i restart the switch while connected with Putty or ...
1
vote
2answers
176 views

Is a network connection always a single network address? [closed]

With a figure showing a communication between a network and a server, does that indicate a single network address or can it include multiple network addresses? Is a single network address the same as ...
0
votes
1answer
115 views

Authentication of reverse proxy

Let's say there is an application server that runs multiple web applications. Some of these applications are accessible directly from the Internet, however a specific application requires single-sign-...
6
votes
1answer
3k views

How to view default authentication method for different lines(cty, vty, aux, tty) in IOS?

For example if I enable AAA(aaa new-model) in IOS router with default configuration and try to log in over console line(cty), then there is no authentication. However, if I try to log in over telnet(...
1
vote
0answers
2k views

Comware 7 - User Accounts Close Every 5 Days

A coworker and I recently migrated a core from old Dell switches to two HP 5700 running Comware 7 and IRF. What we have noticed is that every 5 days, the user accounts no longer accept the passwords. ...
7
votes
1answer
2k views

BGP authentication-key-chain vs. authentication-key

I found a neat little behavior on a Juniper box I was working with today. We were migrating from a Cisco ASR to an MX and all of our internet exchange peers that had authentication configured didn't ...
1
vote
0answers
321 views

wpa-aes EAP-peap authentication problem

I'm trying to connect ubiquity NanoStation M2 as Station/Router mode to a hotspot that I believe has WPA/AES security and EAP-PEAP for auth. I have tested the username and password from my laptop and ...
3
votes
1answer
359 views

Per-user network authentication without mac-filtering

I am aware of MAC address filtering available on most wifi access points, but mac filtering doesn't establish a user identity, it only controls access on a device by device basis. One user may have ...
7
votes
4answers
12k views

802.1x on Access VLAN only, not on Voice VLAN

I've successfully configured a Cisco 3750G to perform the authenticator function of the 802.1x process. I have a test Win7 machine as a supplicant and a Windows 2008 server running NPS as the ...
2
votes
0answers
2k views

Two-factor authentication for Wi-Fi?

We have a new requirement to have two-factor authentication for a certain SSIDs in our enterprise. Currently we run PEAP-MSCHAPv2 to pass windows credentials to a RADIUS server (NPS running on a ...
2
votes
3answers
9k views

Sonicwall re-direct to login page

I have the firewall LAN > WAN rule in place to require trusted users before allowing http, https, and dns. This allows redirecting to the login page for user authentication when the user visits http://...
6
votes
2answers
4k views

Does anyone know how to import ssh public key to ASR9K (IOS-XR)?

I am trying to login ASR9001 router using ssh public key authentication. I tried to import my ssh public key to the router but no success. RP/0/RSP0/CPU0:ASR9K-1#crypto key import authentication rsa ...