Questions tagged [authentication]

For questions about authentication in a network perspective. For instance, you are troubleshooting an issue with SSH authentication or you are having trouble getting an IPsec tunnel to authenticate properly. Any authentication issues or configurations that are related to network devices.

Filter by
Sorted by
Tagged with
0
votes
1answer
28 views

BGP Authentication Key-Chain Between Cisco IOS XE L3 Switch (c9300-24S) and Juniper MX480 Router

Need to create a BGP authentication keychain between Cisco and Juniper devices. Need assistance with config commands for Cisco 9300-24S.
0
votes
1answer
23 views

Authentication of devices and gateway in OpenMTC

I'm studying fog-cloud-iot systems and I bumped into OpenMTC. In order to understand better how their systems work, I would like to know how the authentication between edge devices and gateway and ...
5
votes
2answers
981 views

Do I need to re-authenticate every time I switch a access point?

I have multiple Access Points on the same network with a Radius server for authentication. When I switch from one AP to another, do I have to go through the complete re-authentication processes each ...
0
votes
1answer
34 views

What's the difference between DIAMETER and 802.1X Authentication?

I'm studying the 802.1.X authentication guidelines and the DIAMETER protcol as successor of RADIUS but i can't figure out what are the main difference between pure 802.1X Port-Based Authentication and ...
1
vote
0answers
11 views

5g authentication method for IoT [closed]

While i was studying authentication methods in 5g i bumped into 3 authentication methods that seems to be the most important ones: 5G-AKA,EAP-AKA,EAP-TLS. Which one of these three could be more ...
1
vote
0answers
18 views

Zigbee authentication protocol [closed]

I'm writing a Thesis on IoT networks and authentication protocols, I've found this technology called Zigbee that seems to be really interesting but i can't find anything about which authentication ...
0
votes
1answer
84 views

Can't log in after admin password change

I reset my admin password with below command: #Set system login user admin authentication encrypted-password <new password> But now i can't login to my device, what can be the reason?
0
votes
1answer
120 views

Cisco Nexus RADIUS authentication privilege issue

I'm trying to set up RADIUS authentication between a Nexus C93180YC and a Microsoft NPS Server. The RADIUS server is reachable and I'm able to log in and get permission granted, but the network role ...
0
votes
1answer
428 views

Cisco ISE migration to Azure cloud

I would like to if any one has migrated Cisco ISE to Azure. Any challenges faced, how migration planis done. Currently using ISE with Administration Persona - 2 VMs Monitoring Persona - 2 VM's ...
0
votes
1answer
43 views

IPSEC Authentication Header Query

I was going through the RFC 4302, to understand the AH Header. In sec 2.2, Payload Length, it says: This 8-bit field specifies the length of AH in 32-bit words (4-byte units), minus "2". I am ...
0
votes
0answers
41 views

Cisco ISE VM server and eapol_test(free radius) on same network through VPN

My cisco ISE server is on a remote VM and i have installed free radius tool eapol_test to test EAP-TLS authentication. When i send auth request to eapol_test tool, it times out at the client end and ...
0
votes
1answer
278 views

Cisco 2960 radius configuration

I have multiple cisco switches like Nexus family and IOS family switches and now i am trying to configure centralized authentication so i have install Freeradius and freeIPA (ldap server) I have ...
0
votes
0answers
16 views

Using FreeRadius as client with ISE Radius server for EAP-TLS authentication

I want to perform load testing on the ise server and am using freeradius as NAS (access point) server to perform EAP-TLS cert based authentication on a physical device. Will this work?
1
vote
1answer
56 views

ISE as RADIUS server or not in EAP-TLS authentication

Does the ISE server act as a RADIUS server to a Switch proxying a supplicant certificate, or does it use some other protocol? This is for EAP-TLS based auth
2
votes
1answer
140 views

Cisco configure RADIUS with local account same time

In LAB i am working on Cisco authentication with freeradius and everything works but i want my cisco switch first lookup in radius and if user didn't find then it go to local database. currently i ...
0
votes
1answer
42 views

WebAuth With RADIUS For Switch Web Portal

I have a Cisco IE4000 running IOS 15.2. I am trying to login with my RADIUS credentials to the web portal for the switch. Currently the RADIUS is configured for successful login to Console and SSL but ...
2
votes
2answers
766 views

Cisco 3750G - SSH Diffie Hellman Group 1 SHA1 Error

I recently implemented SSH configuration on my 3750G switch stack. I have -set the domain name -generated the rsa key using 2048 bits -ensured that the vty lines are set to transport input ssh Now ...
3
votes
1answer
67 views

Hp procurve 2510 ssh problem

My app connects to switches via ssh to gather info from them. I can connect to any model except this one. I get the authentication error from the switch yet i can connect via putty with the same ...
2
votes
1answer
53 views

secure authentication over LAN 802.1X

secure authentication over LAN I have installed FreeRadius Version 3.0.12 server, we debian 9.4.0, and I want to secure my LAN, that means, nobody can connect to the LAN if its MAC address is not ...
0
votes
1answer
65 views

How to transition an unauthenticated OSPF area to an MD5 authenticated area on a Cisco?

I currently have an existing OSPF area that has neighborships and is exchanging routes, but has no authentication mechanism. Is there a way to transition it to an MD5 authenticated area without ...
1
vote
1answer
76 views

Authenticating WiFi users with NFC tap points [closed]

I have been looking for a solution to a social WiFi issue at my company. We have poor WiFi authentication for customers in stores, but most of the issues stem from captive portal authentication. My ...
3
votes
1answer
85 views

security benefits of using RADIUS in router authentication - packet tracer

I'm trying to learn how can one protect routers (using Cisco Packet Tracer) and I found out I can set local password to authenticate access to the router privileged and configuration mode. However, I ...
0
votes
1answer
69 views

A new version of RIPv2 using different keys for each router

There's a problem in a textbook that is really stumping me. How would you enhance the RIPv2 protocol to provide a (more) secure and scalable schema for distributing the updates? Describe the ...
4
votes
2answers
1k views

IKE phase 1 and phase 2

Was going through the IKE phase 1 and phase 2. I have some questions regarding the same which is bothering me with respect to main mode and quick mode.Please correct me if i go wrong somewhere. Phase ...
2
votes
1answer
440 views

Cisco Mobility Express - supported authentication options

What are the supported authentication options for the ME APs? Do they support only login through local credentials or RADIUS/TACACS+ is also supported?
3
votes
1answer
615 views

Port Security Or 802.1X Authentication On Non-Server Network

I have a closed network of 3 switches and 40 computers. 35 of those computers (Windows 7 x64 Professional) need to be plugged into any of the 24 ports on 2 of the switches at any time depending on the ...
2
votes
0answers
61 views

OSPF peering not forming when authentication is enabled

OSPF peering between two of my routers went down 2 days before. After troubleshooting, I removed the authentication commands from both devices GRE tunnel interfaces ip ospf authentication message-...
5
votes
2answers
2k views

AAA authentication for all users and a single user for local only?

Is it possible to have AAA for a switch or router, dealing with JunOS, IOS and NXOS. Where all users default to a radius/tacacs server but there is a single user that bypasses the remote auth and uses ...
1
vote
1answer
145 views

How to authenticate logins to Ericsson(IPSO) routers without password from shell server

I am very new at networks. I am attempting to automate the health check process of a system network from the main server being a shell OS. I have been successful for some network nodes which are ...
1
vote
1answer
177 views

Authorize IoT devices to connect to a WPA2 network without a password

I have an air quality IoT device that connects to WiFi and report data to the cloud and are planning to install 100+ devices at a customer location. To install a device, the customer has to connect to ...
2
votes
1answer
4k views

IPSec IKEv2 connection failure due to RSA authentication issue

I'm trying to get an IPSec/IKEv2 setup working, which was implement following this I don't understand why, but when a client connects (StrongSwan on Android here), the session is closed because the ...
0
votes
1answer
159 views

How do I assign machines to a VLAN based on machine authentication and user authentication using a NPS RADIUS server? [closed]

We have company-issued laptops that users can log into using smart cards. Using the Tunnel-PVT-Groupd-ID RADIUS element, we can assign the machine to a VLAN based on the authenticated user. However, ...
4
votes
1answer
556 views

Dell N3000 - Use port security for certain ports while Dot1x is globally enabled

I have 3 Dell N3048Ps that are going to connect to printers and computers. The computers will be authenticated through dot1x, but the printers need to be authenticated by mac address. Dot1x has been ...
6
votes
1answer
12k views

How do you configure a TACACS+ tac_plus server on Ubuntu 16.04 that authenticates against Microsoft Active Directory?

How do you configure a TACACS+ tac_plus server on Ubuntu 16.04 that authenticates against Microsoft Active Directory?
1
vote
1answer
987 views

Cisco TACACS authentication config

I'm inheriting a DoD network (completely separated from the Internet). I'm looking at the configs and I'm seeing a bunch of stuff I think isn't needed but I've never used TACACS, just Radius. The ...
1
vote
1answer
2k views

How to Multiple Radius server in ASA

We have two RADIUS server for SecureID token auth for VPN and i have configure 10.1.1.1 (primary) but don't know how to configure 10.1.1.2 (backup radius) This is what i have currently aaa-server ...
1
vote
1answer
126 views

Doubt on handling mutable fields in IP header when computing digest or authentication data

I read RFC 4302, IP Authentication Header, Section 3.3.3, Integrity Check Value Calculation. In page 13, it is mentioned that the fields which are mutable during transit, like TTL or hop count, are ...
2
votes
1answer
102 views

How does IPv6 AH guarranties authentication?

IPv6 Authentication Header uses MD5 hash on the payload, the header, and unchanging fields of the IPv6 header and options to prevent sequence quessing attacks. But all these required information to ...
1
vote
1answer
631 views

Cisco Radius Authentication with Local Fallback [closed]

We have Radius authentication setup on a number of CISCO devices. Each device also has a local account. Is it possible to make it so you can only use the local account when the radius server is ...
2
votes
1answer
561 views

Juniper MX Radius server configuration: No authentication-server list configured

On an MX router I have configured a DHCP server and radius server authentication. Unfortunately, it is not working yet. On another MX router I have configured the same configuration and that it ...
-2
votes
1answer
232 views

What does aaa mean?

In the below configuration, what does aaa mean? aaa authentication login CON local aaa authentication login VTY group VTY local aaa authentication dot1x default group DOT1x aaa authorization exec ...
2
votes
1answer
912 views

Cisco IOS public-key auth with privilege 15 and no password

From IOS 15 we can log on Cisco IOS with RSA public key authentication. However we still have to assign a password to the user. If we don't the user can log on without any password (and without the ...
1
vote
1answer
311 views

How does Tacacs server forward the credentials from client to Authentication server?

How does Tacacs server forward the credentials from client to Authentication server? Does a decryption and Encryption of creds takes place? Or is it just a packet forward ? Edit: The authentication ...
2
votes
1answer
2k views

What is null authentication in WLAN and why is it required?

I was reading about the DISCOVERY operation phase for an RSN. There a diagram shows NULL Authentication (Second Part, in the diagram). What is it and what is the use? The image is from the book, ...
1
vote
1answer
976 views

How to force users to authenticate to get IP adress from DHCP?

Can You help me !! I want to force users to authentificate to get IP from DHCP-server (win server) if not they can't get ip @ adress !! even they are connected to network
0
votes
1answer
99 views

How VPNs authenticate a user using RADIUS

I have just had a lecture on VPNs and RADIUS and have a question with regards to authentication. I am aware of protocols such as EAP and PEAP and was wondering how these protocols work alongside ...
3
votes
1answer
849 views

How does NAC or NAP enhance 802.1X?

I'm studying about 802.1X port based authentication and RADIUS, and I came across the terms of NAC (Network Admission Control) and NAP (Network Access Protection). As long as I know NAC tries to unify ...
0
votes
1answer
65 views

Overhead from using one network account

Theoretical question. If using WPA2 Enterprise authentication and radius, would there be adverse effects from say, 300 devices authenticating with the same network account? For example, John, Sam, ...
0
votes
1answer
440 views

CISCO Switch SSH Certificate via TACACS-Server

I'm currently a trainee, and I am assigned to do a task where I have to find out whether it is possible if a switch can get its certificate by contacting the TACACS-Server. To explain what I'm trying ...
0
votes
1answer
82 views

Wifi location based access control

I'd like to know if it is possible to determine a user's location with wi-fi and incorporate that into part of the identification, authentication and authorisation mechanism of the network? This ...