Questions tagged [radius]

For questions about RADIUS, an authentication and accounting service defined by RFC 2865.

Filter by
Sorted by
Tagged with
2 votes
0 answers
54 views

Cisco Access Switches: Monitoring AAA server dead via SNMP?

This is a new setup of Cisco access switches (2960S, 2960X IOS with 15.2(2)E9, but mostly C1000 with IOS 15.2(7)E*), with a Cisco ISE 3.0 as authentication server for 802.1X, config style is to be ...
user avatar
0 votes
0 answers
154 views

Unable to connect to VPN on ASA after software update to 9.12(4)37 due to "vpn-simultaneous-connections"

We have updated our Cisco ASA 5512-X from 9.12(4)7 to 9.12(4)37, which we use as a VPN gateway utilizing SSL VPN via Cisco AnyConnect client. After a routine software update, no user is able to ...
user avatar
0 votes
1 answer
41 views

WPA2 Enterprise with Radius and User Password authentication (via Active Directory) - Confidentiality

We are planning to setup WPA2 Enterprise in our Office. We have Ubiquity APs, a Unifi Controller and want to use Windows Credentials for authentication. We want to use a Linux Radius server (...
user avatar
  • 3
1 vote
1 answer
531 views

FortiGate & FortiAuthenticator - Mapping users to Groups for VPN using Radius

I need help from you guys since I can't find anything wrong with my setup and it still doesn't work: I authenticate my Fortigate SSLVPN users against FortiAuthenticator. I want to map some users to a ...
user avatar
0 votes
1 answer
39 views

is DIAMETER-EAP Authentication method mutual or one way?

i'm studying the DIAMETER-EAP authentication method and i would like to know if this method can be considered mutual authentication or "one way" authentication. In my opinion this is one way ...
user avatar
0 votes
1 answer
178 views

What's the difference between DIAMETER and 802.1X Authentication?

I'm studying the 802.1.X authentication guidelines and the DIAMETER protcol as successor of RADIUS but i can't figure out what are the main difference between pure 802.1X Port-Based Authentication and ...
user avatar
  • 21
0 votes
1 answer
2k views

Cisco Nexus RADIUS authentication privilege issue

I'm trying to set up RADIUS authentication between a Nexus C93180YC and a Microsoft NPS Server. The RADIUS server is reachable and I'm able to log in and get permission granted, but the network role ...
user avatar
  • 767
2 votes
1 answer
109 views

Are there other protocols for enforcing AAA besides RADIUS?

I know this is not the ideal question format but I need to lean upon the expertise in this community. I am looking for a simpler method of implementing AAA (Authentication, Authorization and ...
user avatar
0 votes
0 answers
146 views

Cisco ISE VM server and eapol_test(free radius) on same network through VPN

My cisco ISE server is on a remote VM and i have installed free radius tool eapol_test to test EAP-TLS authentication. When i send auth request to eapol_test tool, it times out at the client end and ...
user avatar
0 votes
1 answer
1k views

Cisco 2960 radius configuration

I have multiple cisco switches like Nexus family and IOS family switches and now i am trying to configure centralized authentication so i have install Freeradius and freeIPA (ldap server) I have ...
user avatar
  • 4,227
1 vote
1 answer
73 views

ISE as RADIUS server or not in EAP-TLS authentication

Does the ISE server act as a RADIUS server to a Switch proxying a supplicant certificate, or does it use some other protocol? This is for EAP-TLS based auth
user avatar
2 votes
1 answer
751 views

Cisco configure RADIUS with local account same time

In LAB i am working on Cisco authentication with freeradius and everything works but i want my cisco switch first lookup in radius and if user didn't find then it go to local database. currently i ...
user avatar
  • 4,227
0 votes
0 answers
299 views

802.1X MAC auth : Dell N2048 switch returns malformed EAP packet

I'm trying to set up MAC authorization with 802.1X using FreeRADIUS, a Dell N2048 (DN OS6.3.3.9) switch as the authenticator and a Ubuntu machine as the supplicant. I've followed this guide for ...
user avatar
  • 11
-2 votes
3 answers
54 views

How to implement RADIUS without an AP? [closed]

I have a homework where I have to "implement RADIUS" and use nmap and wireshark to verify it's working and see how are the PDUs that are circulating. The problem is I've been reading about RADIUS and ...
user avatar
5 votes
1 answer
155 views

Radius EAP-TLS: How to force a local IP per device/certificate?

I have configured my wifi network with a freeradius server using EAP-TLS with a different certificate per device. I am currently using DHCP pool for each VLAN/subnet in my Cisco router/switch. I'd ...
user avatar
  • 386
1 vote
1 answer
245 views

Connecting networks from different states [closed]

Is it possible to connect 5 networks together using one router as a central component even if the networks aren't close to each other? An example would be 2 networks in Houston and 1 in Dallas Texas, ...
user avatar
0 votes
1 answer
56 views

Radius and certificates

I'm trying to understand something. When a client and the radius server start the connection how does things work? Is it always a tls connection and does it use the symmetric encryption after ...
user avatar
  • 313
3 votes
1 answer
1k views

Juniper Radius Configuration

I'm trying to figure out how to setup radius on a Juniper EX2300. The juniper can reach the server no problem, but when I run the 'test aaa authd-lite user [user] password [password]' command, I get ...
user avatar
1 vote
1 answer
209 views

using 802.1x with nic teaming

I am working on a project which is mandatory to have each pc configured with two network interface cards as a nic team. I want to use 802.1x for authentication with a radius server like cisco ISE. My ...
user avatar
1 vote
2 answers
85 views

802.1X Auth for Clients and Servers

I'm about to introduce 802.1X Authentication to my current network for wifi and wired connections: My Setup: I have a Windows Domain Controller and I wanted to use the Network Policy Service for ...
user avatar
  • 11
1 vote
2 answers
486 views

Assigning static IP addresses to dialin PPP users on Cisco IOS

I have a Cisco router running IOS 15.3 serving as a dial-in PPP endpoint for a handful of modems. I am using local authentication and a local IP pool to hand out dynamic IP addresses to the callers; ...
user avatar
  • 181
2 votes
1 answer
77 views

secure authentication over LAN 802.1X

secure authentication over LAN I have installed FreeRadius Version 3.0.12 server, we debian 9.4.0, and I want to secure my LAN, that means, nobody can connect to the LAN if its MAC address is not ...
user avatar
3 votes
1 answer
237 views

Cisco Nexus 5548 802.1x Guest-VLAN not available

I'm trying to configure a Cisco Nexus 5548 for 802.1x using MAC Authentication Bypass. I'm finding that there isn't an option to configure the guest VLAN in the event that authentication fails. ...
user avatar
3 votes
1 answer
119 views

security benefits of using RADIUS in router authentication - packet tracer

I'm trying to learn how can one protect routers (using Cisco Packet Tracer) and I found out I can set local password to authenticate access to the router privileged and configuration mode. However, I ...
user avatar
  • 35
2 votes
1 answer
658 views

Cisco Mobility Express - supported authentication options

What are the supported authentication options for the ME APs? Do they support only login through local credentials or RADIUS/TACACS+ is also supported?
user avatar
1 vote
1 answer
500 views

RADIUS: Accounting is not establishing the session

I'm using Huawei Ne20 and a FreeRadius, the last has already been used to authentication Mikrotik accounts. I'm getting authentication accept message, but the accounting session is not being ...
user avatar
  • 883
3 votes
1 answer
702 views

Port Security Or 802.1X Authentication On Non-Server Network

I have a closed network of 3 switches and 40 computers. 35 of those computers (Windows 7 x64 Professional) need to be plugged into any of the 24 ports on 2 of the switches at any time depending on the ...
user avatar
  • 389
2 votes
1 answer
47 views

Is it possible to back up network devices configs on a RADIUS server (automatically or manual)

My question is about back up on RADIUS server. Is it possible to back up network devices configs on a RADIUS server (automatically or manual)
user avatar
  • 311
3 votes
3 answers
8k views

802.1x and use Google G Suite Directory as LDAP

Has anyone managed to authenticate yours to the network via 802.1x using Google Directory? I have a case where whole company is using Google Apps and G-Suite with a custom domain and they would like ...
user avatar
  • 33
5 votes
2 answers
3k views

AAA authentication for all users and a single user for local only?

Is it possible to have AAA for a switch or router, dealing with JunOS, IOS and NXOS. Where all users default to a radius/tacacs server but there is a single user that bypasses the remote auth and uses ...
user avatar
  • 215
1 vote
0 answers
96 views

Fortigate Radius Reply Message

I have setup a Microsoft NPS radius server for my Fortigate firewall and i want to display reason of fail login to the users in Fortigate fail page (for example display "You can not login during this ...
user avatar
  • 111
4 votes
1 answer
104 views

RADIUS accounting Stop messages not being sent

I have a Dell N2000 series switch upon which dot1x authentication and RADIUS accounting are enabled. I have configured RADIUS accounting to send start and stop messages, but I am only seeing Start ...
user avatar
4 votes
1 answer
847 views

WPA2 Enterprise with NPS and WLC

I am pretty new to this and am trying to set up WPA2 enterprise where users can connect to the Wifi using their AD credentials (PEAP-MSCHAPv2). The Cisco WLC has been configured to relay requests ...
user avatar
0 votes
1 answer
214 views

How do I assign machines to a VLAN based on machine authentication and user authentication using a NPS RADIUS server? [closed]

We have company-issued laptops that users can log into using smart cards. Using the Tunnel-PVT-Groupd-ID RADIUS element, we can assign the machine to a VLAN based on the authenticated user. However, ...
user avatar
2 votes
1 answer
313 views

WLC HA Pair Ip address when takeover

I have a WLC HA Pair, and every appliance has it's own ip address. for example: 1.1.1.1 main node and 1.1.1.2 the secondary. I have an SSID with AAA configured pointing to a NPS server which has the ...
user avatar
1 vote
1 answer
3k views

How to Multiple Radius server in ASA

We have two RADIUS server for SecureID token auth for VPN and i have configure 10.1.1.1 (primary) but don't know how to configure 10.1.1.2 (backup radius) This is what i have currently aaa-server ...
user avatar
  • 4,227
2 votes
0 answers
2k views

IPsec IKEv2 with StrongSwan Cert+EAP not working

I'm trying to setup a Cisco router (881H) to act as a head end for an IPsec IKEv2 VPN. The target setup is meant to be used by StrongSWan clients (currently testing on Android smartphone), and we wish ...
user avatar
  • 61
2 votes
1 answer
5k views

Assign wireless devices to VLAN by MAC address

Scenario I have an environment with several hundred wireless devices. I am trying to break down a fairly large network into several VLANs. There are wireless devices in carts (groups of 30) that I ...
user avatar
  • 131
2 votes
1 answer
1k views

Need help with PPPoE Subscriber Management on a MX80

I've been working with Subscriber Management using DHCP and a FreeRadius server and have been quite successful. Of course, once my company heard that it is possible for customers to bring their public ...
user avatar
  • 275
1 vote
1 answer
3k views

Cisco 3750 switch not communicating with RADIUS server

I have a Cisco 3750 switch and I want to make it work with PacketFence NAC. I have configured the switch according to their network configuration document here, but the switch is still not ...
user avatar
1 vote
2 answers
714 views

No RADIUS Accounting for Particular Server

We have a VoD server that's directly connected to Juniper MX104 BNG. Juniper MX104 is also acting as a BRAS. Right now if any user accesses that VoD server, all the incoming and outgoing traffic is ...
user avatar
1 vote
1 answer
832 views

Cisco Radius Authentication with Local Fallback [closed]

We have Radius authentication setup on a number of CISCO devices. Each device also has a local account. Is it possible to make it so you can only use the local account when the radius server is ...
user avatar
2 votes
1 answer
714 views

Juniper MX Radius server configuration: No authentication-server list configured

On an MX router I have configured a DHCP server and radius server authentication. Unfortunately, it is not working yet. On another MX router I have configured the same configuration and that it ...
user avatar
  • 275
1 vote
2 answers
152 views

Is every Switch capable of Network Access Server?

i am learning about Radius Server and particularly freeRadius. NAS devices are responsible for sending Authentication requests to the Radius Server. NAS devices include like Switch, wireless access ...
user avatar
0 votes
1 answer
139 views

How VPNs authenticate a user using RADIUS

I have just had a lecture on VPNs and RADIUS and have a question with regards to authentication. I am aware of protocols such as EAP and PEAP and was wondering how these protocols work alongside ...
user avatar
  • 53
1 vote
1 answer
5k views

RADIUS test works but actual logon fails

Let me start by putting my issue into one sentence: I have a Catalyst 4507 and I can't log onto it using RADIUS even though the configuration is the same as a Catalyst 3850 which is working and ...
user avatar
  • 1,125
9 votes
2 answers
40k views

What's the difference between RADIUS and 802.1X Port-Based Authentication?

As long as I know RADIUS is a type of authentication protocol, where for example if someone wants to use a switch, it first of all needs to enter his/her credentials, and properly authenticate himself/...
user avatar
  • 193
4 votes
1 answer
1k views

Cisco ISR L2TP VPN local vs radius authentication problem

I currently have a cisco 1841 router configured to authenticate users against a Windows NPS server. The strange thing is that when using local authentication the VPN connects first time every time. I ...
user avatar
  • 181
3 votes
2 answers
10k views

RADIUS PAP vs MSCHAPv2

What is the difference between PAP and MSCHAPv2 authentication? Looking at picking a RADIUS protocol for authentication with Microsoft NPS and trying to understand to pros / cons for PAP and MSCHAPv2....
user avatar
1 vote
3 answers
2k views

cisco ssh key authorization level via radius

Related to Authenticate ssh key via Cisco ACS (TACACS+) Given a working ssh public key config: ip ssh pubkey-chain username admin key-string <ssh-pub-key> exit exit I have only been ...
user avatar
  • 151