Questions tagged [authentication]

For questions about authentication in a network perspective. For instance, you are troubleshooting an issue with SSH authentication or you are having trouble getting an IPsec tunnel to authenticate properly. Any authentication issues or configurations that are related to network devices.

Filter by
Sorted by
Tagged with
0
votes
1answer
24 views

What's the difference between DIAMETER and 802.1X Authentication?

I'm studying the 802.1.X authentication guidelines and the DIAMETER protcol as successor of RADIUS but i can't figure out what are the main difference between pure 802.1X Port-Based Authentication and ...
1
vote
0answers
5 views

5g authentication method for IoT [closed]

While i was studying authentication methods in 5g i bumped into 3 authentication methods that seems to be the most important ones: 5G-AKA,EAP-AKA,EAP-TLS. Which one of these three could be more ...
1
vote
0answers
18 views

Zigbee authentication protocol [closed]

I'm writing a Thesis on IoT networks and authentication protocols, I've found this technology called Zigbee that seems to be really interesting but i can't find anything about which authentication ...
0
votes
1answer
66 views

Can't log in after admin password change

I reset my admin password with below command: #Set system login user admin authentication encrypted-password <new password> But now i can't login to my device, what can be the reason?
0
votes
1answer
44 views

Cisco Nexus RADIUS authentication privilege issue

I'm trying to set up RADIUS authentication between a Nexus C93180YC and a Microsoft NPS Server. The RADIUS server is reachable and I'm able to log in and get permission granted, but the network role ...
0
votes
1answer
189 views

Cisco ISE migration to Azure cloud

I would like to if any one has migrated Cisco ISE to Azure. Any challenges faced, how migration planis done. Currently using ISE with Administration Persona - 2 VMs Monitoring Persona - 2 VM's ...
0
votes
1answer
42 views

IPSEC Authentication Header Query

I was going through the RFC 4302, to understand the AH Header. In sec 2.2, Payload Length, it says: This 8-bit field specifies the length of AH in 32-bit words (4-byte units), minus "2". I am ...
0
votes
0answers
31 views

Cisco ISE VM server and eapol_test(free radius) on same network through VPN

My cisco ISE server is on a remote VM and i have installed free radius tool eapol_test to test EAP-TLS authentication. When i send auth request to eapol_test tool, it times out at the client end and ...
0
votes
1answer
223 views

Cisco 2960 radius configuration

I have multiple cisco switches like Nexus family and IOS family switches and now i am trying to configure centralized authentication so i have install Freeradius and freeIPA (ldap server) I have ...
0
votes
0answers
16 views

Using FreeRadius as client with ISE Radius server for EAP-TLS authentication

I want to perform load testing on the ise server and am using freeradius as NAS (access point) server to perform EAP-TLS cert based authentication on a physical device. Will this work?
1
vote
1answer
56 views

ISE as RADIUS server or not in EAP-TLS authentication

Does the ISE server act as a RADIUS server to a Switch proxying a supplicant certificate, or does it use some other protocol? This is for EAP-TLS based auth
2
votes
1answer
99 views

Cisco configure RADIUS with local account same time

In LAB i am working on Cisco authentication with freeradius and everything works but i want my cisco switch first lookup in radius and if user didn't find then it go to local database. currently i ...
0
votes
1answer
34 views

WebAuth With RADIUS For Switch Web Portal

I have a Cisco IE4000 running IOS 15.2. I am trying to login with my RADIUS credentials to the web portal for the switch. Currently the RADIUS is configured for successful login to Console and SSL but ...
2
votes
2answers
585 views

Cisco 3750G - SSH Diffie Hellman Group 1 SHA1 Error

I recently implemented SSH configuration on my 3750G switch stack. I have -set the domain name -generated the rsa key using 2048 bits -ensured that the vty lines are set to transport input ssh Now ...
3
votes
1answer
55 views

Hp procurve 2510 ssh problem

My app connects to switches via ssh to gather info from them. I can connect to any model except this one. I get the authentication error from the switch yet i can connect via putty with the same ...
2
votes
1answer
50 views

secure authentication over LAN 802.1X

secure authentication over LAN I have installed FreeRadius Version 3.0.12 server, we debian 9.4.0, and I want to secure my LAN, that means, nobody can connect to the LAN if its MAC address is not ...
0
votes
1answer
64 views

How to transition an unauthenticated OSPF area to an MD5 authenticated area on a Cisco?

I currently have an existing OSPF area that has neighborships and is exchanging routes, but has no authentication mechanism. Is there a way to transition it to an MD5 authenticated area without ...
1
vote
1answer
74 views

Authenticating WiFi users with NFC tap points [closed]

I have been looking for a solution to a social WiFi issue at my company. We have poor WiFi authentication for customers in stores, but most of the issues stem from captive portal authentication. My ...
3
votes
1answer
84 views

security benefits of using RADIUS in router authentication - packet tracer

I'm trying to learn how can one protect routers (using Cisco Packet Tracer) and I found out I can set local password to authenticate access to the router privileged and configuration mode. However, I ...
0
votes
1answer
68 views

A new version of RIPv2 using different keys for each router

There's a problem in a textbook that is really stumping me. How would you enhance the RIPv2 protocol to provide a (more) secure and scalable schema for distributing the updates? Describe the ...
4
votes
2answers
1k views

IKE phase 1 and phase 2

Was going through the IKE phase 1 and phase 2. I have some questions regarding the same which is bothering me with respect to main mode and quick mode.Please correct me if i go wrong somewhere. Phase ...
2
votes
1answer
419 views

Cisco Mobility Express - supported authentication options

What are the supported authentication options for the ME APs? Do they support only login through local credentials or RADIUS/TACACS+ is also supported?
3
votes
1answer
599 views

Port Security Or 802.1X Authentication On Non-Server Network

I have a closed network of 3 switches and 40 computers. 35 of those computers (Windows 7 x64 Professional) need to be plugged into any of the 24 ports on 2 of the switches at any time depending on the ...
2
votes
0answers
61 views

OSPF peering not forming when authentication is enabled

OSPF peering between two of my routers went down 2 days before. After troubleshooting, I removed the authentication commands from both devices GRE tunnel interfaces ip ospf authentication message-...
5
votes
2answers
2k views

AAA authentication for all users and a single user for local only?

Is it possible to have AAA for a switch or router, dealing with JunOS, IOS and NXOS. Where all users default to a radius/tacacs server but there is a single user that bypasses the remote auth and uses ...
1
vote
1answer
138 views

How to authenticate logins to Ericsson(IPSO) routers without password from shell server

I am very new at networks. I am attempting to automate the health check process of a system network from the main server being a shell OS. I have been successful for some network nodes which are ...
1
vote
1answer
175 views

Authorize IoT devices to connect to a WPA2 network without a password

I have an air quality IoT device that connects to WiFi and report data to the cloud and are planning to install 100+ devices at a customer location. To install a device, the customer has to connect to ...
2
votes
1answer
3k views

IPSec IKEv2 connection failure due to RSA authentication issue

I'm trying to get an IPSec/IKEv2 setup working, which was implement following this I don't understand why, but when a client connects (StrongSwan on Android here), the session is closed because the ...
0
votes
1answer
157 views

How do I assign machines to a VLAN based on machine authentication and user authentication using a NPS RADIUS server? [closed]

We have company-issued laptops that users can log into using smart cards. Using the Tunnel-PVT-Groupd-ID RADIUS element, we can assign the machine to a VLAN based on the authenticated user. However, ...
4
votes
1answer
552 views

Dell N3000 - Use port security for certain ports while Dot1x is globally enabled

I have 3 Dell N3048Ps that are going to connect to printers and computers. The computers will be authenticated through dot1x, but the printers need to be authenticated by mac address. Dot1x has been ...
6
votes
1answer
11k views

How do you configure a TACACS+ tac_plus server on Ubuntu 16.04 that authenticates against Microsoft Active Directory?

How do you configure a TACACS+ tac_plus server on Ubuntu 16.04 that authenticates against Microsoft Active Directory?
1
vote
1answer
953 views

Cisco TACACS authentication config

I'm inheriting a DoD network (completely separated from the Internet). I'm looking at the configs and I'm seeing a bunch of stuff I think isn't needed but I've never used TACACS, just Radius. The ...
1
vote
1answer
2k views

How to Multiple Radius server in ASA

We have two RADIUS server for SecureID token auth for VPN and i have configure 10.1.1.1 (primary) but don't know how to configure 10.1.1.2 (backup radius) This is what i have currently aaa-server ...
1
vote
1answer
125 views

Doubt on handling mutable fields in IP header when computing digest or authentication data

I read RFC 4302, IP Authentication Header, Section 3.3.3, Integrity Check Value Calculation. In page 13, it is mentioned that the fields which are mutable during transit, like TTL or hop count, are ...
2
votes
1answer
102 views

How does IPv6 AH guarranties authentication?

IPv6 Authentication Header uses MD5 hash on the payload, the header, and unchanging fields of the IPv6 header and options to prevent sequence quessing attacks. But all these required information to ...
1
vote
1answer
615 views

Cisco Radius Authentication with Local Fallback [closed]

We have Radius authentication setup on a number of CISCO devices. Each device also has a local account. Is it possible to make it so you can only use the local account when the radius server is ...
2
votes
1answer
546 views

Juniper MX Radius server configuration: No authentication-server list configured

On an MX router I have configured a DHCP server and radius server authentication. Unfortunately, it is not working yet. On another MX router I have configured the same configuration and that it ...
-2
votes
1answer
232 views

What does aaa mean?

In the below configuration, what does aaa mean? aaa authentication login CON local aaa authentication login VTY group VTY local aaa authentication dot1x default group DOT1x aaa authorization exec ...
2
votes
1answer
893 views

Cisco IOS public-key auth with privilege 15 and no password

From IOS 15 we can log on Cisco IOS with RSA public key authentication. However we still have to assign a password to the user. If we don't the user can log on without any password (and without the ...
1
vote
1answer
305 views

How does Tacacs server forward the credentials from client to Authentication server?

How does Tacacs server forward the credentials from client to Authentication server? Does a decryption and Encryption of creds takes place? Or is it just a packet forward ? Edit: The authentication ...
2
votes
1answer
2k views

What is null authentication in WLAN and why is it required?

I was reading about the DISCOVERY operation phase for an RSN. There a diagram shows NULL Authentication (Second Part, in the diagram). What is it and what is the use? The image is from the book, ...
1
vote
1answer
932 views

How to force users to authenticate to get IP adress from DHCP?

Can You help me !! I want to force users to authentificate to get IP from DHCP-server (win server) if not they can't get ip @ adress !! even they are connected to network
0
votes
1answer
99 views

How VPNs authenticate a user using RADIUS

I have just had a lecture on VPNs and RADIUS and have a question with regards to authentication. I am aware of protocols such as EAP and PEAP and was wondering how these protocols work alongside ...
3
votes
1answer
836 views

How does NAC or NAP enhance 802.1X?

I'm studying about 802.1X port based authentication and RADIUS, and I came across the terms of NAC (Network Admission Control) and NAP (Network Access Protection). As long as I know NAC tries to unify ...
0
votes
1answer
65 views

Overhead from using one network account

Theoretical question. If using WPA2 Enterprise authentication and radius, would there be adverse effects from say, 300 devices authenticating with the same network account? For example, John, Sam, ...
0
votes
1answer
418 views

CISCO Switch SSH Certificate via TACACS-Server

I'm currently a trainee, and I am assigned to do a task where I have to find out whether it is possible if a switch can get its certificate by contacting the TACACS-Server. To explain what I'm trying ...
0
votes
1answer
80 views

Wifi location based access control

I'd like to know if it is possible to determine a user's location with wi-fi and incorporate that into part of the identification, authentication and authorisation mechanism of the network? This ...
1
vote
3answers
1k views

802.1X authentication not working on Client Machines if connected through Cisco IP phone

I trying to do 802.1x authentication with certificates. I am stuck with a problem client machine which fails to communicate with the RADIUS server (NPS) when I connect it through a Cisco IP phone. ...
1
vote
1answer
571 views

What is happening during CHAP PPP authentication between Cisco routers?

I'm going through the great CBT nuggets series for the CCNA. In the video on WAN protocols Jeremy sets up a PPP connection between two routers using CHAP authentication. On each router he adds a ...
2
votes
2answers
19k views

How do i factory reset a Allied Telesyn AT-9924t?

I have connected to the switch from my Win7 computer with the following equipment. (the blue cable isnt the exact one, but nearly the same) When i restart the switch while connected with Putty or ...