Questions tagged [radius]
For questions about RADIUS, an authentication and accounting service defined by RFC 2865.
75
questions
0
votes
1
answer
17
views
Connecting a hub to my switch bypasses RADIUS/802.1X
I have set up a windows nps server (radius), it works with eap-tls.
In the switch when the authentication is validated the port is passed in vlan 100 and when it is refused it is passed in vlan 101.
...
- 1
0
votes
0
answers
13
views
Cisco WDS, FreeRadius and LEAP
Freeradius got rid of LEAP since some pointrelease of 3.2.x, and I'm stuck configuring Cisco WDS on their Aironet series.
Since forever there was a tweak with LEAP in Cisco configuration like this:
...
- 243
0
votes
1
answer
62
views
Cisco Certificate CA Server and SCEP - adding RADIUS authentication
I am running a CA server on a Cisco ASR1k Router for several years. until now the number of SCEP clients is quite small (below 10) that it is possible to restrict SCEP Downloads by implementing a ACL.
...
- 527
0
votes
1
answer
42
views
MAC Authentication using RADIUS with redundant links to hosts
I am considering using a RADUIS for MAC authentication. But the concern I have is that in my network each host has two links going to two switches (SW-A, SW-B) the link going to (SW-B) is a "...
- 5
0
votes
1
answer
48
views
Single SSID w/PSK to default VLAN, Secondary Auth EAP-TLS to a second VLAN
I'm wondering if the following is possible given the limitations/constraints of RADIUS, CoA, and fundamental limits of 802.11 authentication, etc.
I would like a wireless configuration with a single ...
- 103
0
votes
1
answer
19
views
DOT1X: A practical case for ForceUnauthorized state
I have been working as a Network Engineer for almost 5 years now. I have never encountered a scenario where I would need to configure a Cisco switch port as ForceUnauthorized (DOT1X).
According to the ...
- 261
2
votes
0
answers
338
views
Cisco Access Switches: Monitoring AAA server dead via SNMP?
This is a new setup of Cisco access switches (2960S, 2960X IOS with 15.2(2)E9, but mostly C1000 with IOS 15.2(7)E*), with a Cisco ISE 3.0 as authentication server for 802.1X, config style is to be ...
- 8,826
0
votes
1
answer
118
views
WPA2 Enterprise with Radius and User Password authentication (via Active Directory) - Confidentiality
We are planning to setup WPA2 Enterprise in our Office.
We have Ubiquity APs, a Unifi Controller and want to use Windows Credentials for authentication. We want to use a Linux Radius server (...
- 3
1
vote
1
answer
1k
views
FortiGate & FortiAuthenticator - Mapping users to Groups for VPN using Radius
I need help from you guys since I can't find anything wrong with my setup and it still doesn't work:
I authenticate my Fortigate SSLVPN users against FortiAuthenticator. I want to map some users to a ...
- 147
0
votes
1
answer
70
views
is DIAMETER-EAP Authentication method mutual or one way?
i'm studying the DIAMETER-EAP authentication method and i would like to know if this method can be considered mutual authentication or "one way" authentication.
In my opinion this is one way ...
0
votes
1
answer
295
views
What's the difference between DIAMETER and 802.1X Authentication?
I'm studying the 802.1.X authentication guidelines and the DIAMETER protcol as successor of RADIUS but i can't figure out what are the main difference between pure 802.1X Port-Based Authentication and ...
- 21
0
votes
1
answer
3k
views
Cisco Nexus RADIUS authentication privilege issue
I'm trying to set up RADIUS authentication between a Nexus C93180YC and a Microsoft NPS Server.
The RADIUS server is reachable and I'm able to log in and get permission granted, but the network role ...
- 787
2
votes
1
answer
115
views
Are there other protocols for enforcing AAA besides RADIUS?
I know this is not the ideal question format but I need to lean upon the expertise in this community.
I am looking for a simpler method of implementing AAA (Authentication, Authorization and ...
- 123
0
votes
0
answers
231
views
Cisco ISE VM server and eapol_test(free radius) on same network through VPN
My cisco ISE server is on a remote VM and i have installed free radius tool eapol_test to test EAP-TLS authentication. When i send auth request to eapol_test tool, it times out at the client end and ...
- 13
0
votes
1
answer
2k
views
Cisco 2960 radius configuration
I have multiple cisco switches like Nexus family and IOS family switches and now i am trying to configure centralized authentication so i have install Freeradius and freeIPA (ldap server)
I have ...
- 4,371
1
vote
1
answer
104
views
ISE as RADIUS server or not in EAP-TLS authentication
Does the ISE server act as a RADIUS server to a Switch proxying a supplicant certificate, or does it use some other protocol? This is for EAP-TLS based auth
- 13
2
votes
1
answer
1k
views
Cisco configure RADIUS with local account same time
In LAB i am working on Cisco authentication with freeradius and everything works but i want my cisco switch first lookup in radius and if user didn't find then it go to local database.
currently i ...
- 4,371
0
votes
0
answers
411
views
802.1X MAC auth : Dell N2048 switch returns malformed EAP packet
I'm trying to set up MAC authorization with 802.1X using FreeRADIUS, a Dell N2048 (DN OS6.3.3.9) switch as the authenticator and a Ubuntu machine as the supplicant.
I've followed this guide for ...
- 11
-2
votes
3
answers
74
views
How to implement RADIUS without an AP? [closed]
I have a homework where I have to "implement RADIUS" and use nmap and wireshark to verify it's working and see how are the PDUs that are circulating. The problem is I've been reading about RADIUS and ...
5
votes
1
answer
200
views
Radius EAP-TLS: How to force a local IP per device/certificate?
I have configured my wifi network with a freeradius server using EAP-TLS with a different certificate per device.
I am currently using DHCP pool for each VLAN/subnet in my Cisco router/switch. I'd ...
- 396
1
vote
1
answer
328
views
Connecting networks from different states [closed]
Is it possible to connect 5 networks together using one router as a central component even if the networks aren't close to each other? An example would be 2 networks in Houston and 1 in Dallas Texas, ...
- 13
0
votes
1
answer
58
views
Radius and certificates
I'm trying to understand something. When a client and the radius server start the connection how does things work? Is it always a tls connection and does it use the symmetric encryption after ...
- 313
3
votes
1
answer
2k
views
Juniper Radius Configuration
I'm trying to figure out how to setup radius on a Juniper EX2300. The juniper can reach the server no problem, but when I run the 'test aaa authd-lite user [user] password [password]' command, I get ...
- 140
1
vote
1
answer
353
views
using 802.1x with nic teaming
I am working on a project which is mandatory to have each pc configured with two network interface cards as a nic team.
I want to use 802.1x for authentication with a radius server like cisco ISE.
My ...
- 11
1
vote
2
answers
93
views
802.1X Auth for Clients and Servers
I'm about to introduce 802.1X Authentication to my current network for wifi and wired connections:
My Setup:
I have a Windows Domain Controller and I wanted to use the Network Policy Service for ...
- 11
1
vote
2
answers
604
views
Assigning static IP addresses to dialin PPP users on Cisco IOS
I have a Cisco router running IOS 15.3 serving as a dial-in PPP endpoint for a handful of modems. I am using local authentication and a local IP pool to hand out dynamic IP addresses to the callers; ...
- 181
2
votes
1
answer
95
views
secure authentication over LAN 802.1X
secure authentication over LAN
I have installed FreeRadius Version 3.0.12 server, we debian 9.4.0, and I want to secure my LAN, that means, nobody can connect to the LAN if its MAC address is not ...
3
votes
1
answer
284
views
Cisco Nexus 5548 802.1x Guest-VLAN not available
I'm trying to configure a Cisco Nexus 5548 for 802.1x using MAC Authentication Bypass. I'm finding that there isn't an option to configure the guest VLAN in the event that authentication fails. ...
- 273
3
votes
1
answer
170
views
security benefits of using RADIUS in router authentication - packet tracer
I'm trying to learn how can one protect routers (using Cisco Packet Tracer) and I found out I can set local password to authenticate access to the router privileged and configuration mode. However, I ...
- 35
2
votes
1
answer
831
views
Cisco Mobility Express - supported authentication options
What are the supported authentication options for the ME APs? Do they support only login through local credentials or RADIUS/TACACS+ is also supported?
- 107
1
vote
1
answer
694
views
RADIUS: Accounting is not establishing the session
I'm using Huawei Ne20 and a FreeRadius, the last has already been used to authentication Mikrotik accounts.
I'm getting authentication accept message, but the accounting session is not being ...
3
votes
1
answer
774
views
Port Security Or 802.1X Authentication On Non-Server Network
I have a closed network of 3 switches and 40 computers. 35 of those computers (Windows 7 x64 Professional) need to be plugged into any of the 24 ports on 2 of the switches at any time depending on the ...
- 461
2
votes
1
answer
52
views
Is it possible to back up network devices configs on a RADIUS server (automatically or manual)
My question is about back up on RADIUS server. Is it possible to back up network devices configs on a RADIUS server (automatically or manual)
- 311
3
votes
3
answers
9k
views
802.1x and use Google G Suite Directory as LDAP
Has anyone managed to authenticate yours to the network via 802.1x using Google Directory? I have a case where whole company is using Google Apps and G-Suite with a custom domain and they would like ...
- 33
5
votes
2
answers
3k
views
AAA authentication for all users and a single user for local only?
Is it possible to have AAA for a switch or router, dealing with JunOS, IOS and NXOS. Where all users default to a radius/tacacs server but there is a single user that bypasses the remote auth and uses ...
- 215
1
vote
0
answers
129
views
Fortigate Radius Reply Message
I have setup a Microsoft NPS radius server for my Fortigate firewall and i want to display reason of fail login to the users in Fortigate fail page (for example display "You can not login during this ...
- 111
4
votes
1
answer
121
views
RADIUS accounting Stop messages not being sent
I have a Dell N2000 series switch upon which dot1x authentication and RADIUS accounting are enabled. I have configured RADIUS accounting to send start and stop messages, but I am only seeing Start ...
- 171
4
votes
1
answer
913
views
WPA2 Enterprise with NPS and WLC
I am pretty new to this and am trying to set up WPA2 enterprise where users can connect to the Wifi using their AD credentials (PEAP-MSCHAPv2).
The Cisco WLC has been configured to relay requests ...
0
votes
1
answer
267
views
How do I assign machines to a VLAN based on machine authentication and user authentication using a NPS RADIUS server? [closed]
We have company-issued laptops that users can log into using smart cards. Using the Tunnel-PVT-Groupd-ID RADIUS element, we can assign the machine to a VLAN based on the authenticated user. However, ...
2
votes
1
answer
335
views
WLC HA Pair Ip address when takeover
I have a WLC HA Pair, and every appliance has it's own ip address.
for example: 1.1.1.1 main node and 1.1.1.2 the secondary.
I have an SSID with AAA configured pointing to a NPS server which has the ...
- 95
1
vote
1
answer
3k
views
How to Multiple Radius server in ASA
We have two RADIUS server for SecureID token auth for VPN and i have configure 10.1.1.1 (primary) but don't know how to configure 10.1.1.2 (backup radius)
This is what i have currently
aaa-server ...
- 4,371
2
votes
1
answer
3k
views
IPsec IKEv2 with StrongSwan Cert+EAP not working
I'm trying to setup a Cisco router (881H) to act as a head end for an IPsec IKEv2 VPN. The target setup is meant to be used by StrongSWan clients (currently testing on Android smartphone), and we wish ...
- 69
2
votes
1
answer
5k
views
Assign wireless devices to VLAN by MAC address
Scenario
I have an environment with several hundred wireless devices. I am trying to break down a fairly large network into several VLANs. There are wireless devices in carts (groups of 30) that I ...
- 131
2
votes
1
answer
1k
views
Need help with PPPoE Subscriber Management on a MX80
I've been working with Subscriber Management using DHCP and a FreeRadius server and have been quite successful. Of course, once my company heard that it is possible for customers to bring their public ...
- 275
1
vote
1
answer
3k
views
Cisco 3750 switch not communicating with RADIUS server
I have a Cisco 3750 switch and I want to make it work with PacketFence NAC. I have configured the switch according to their network configuration document here, but the switch is still not ...
- 121
1
vote
2
answers
796
views
No RADIUS Accounting for Particular Server
We have a VoD server that's directly connected to Juniper MX104 BNG. Juniper MX104 is also acting as a BRAS. Right now if any user accesses that VoD server, all the incoming and outgoing traffic is ...
- 31
1
vote
1
answer
991
views
Cisco Radius Authentication with Local Fallback [closed]
We have Radius authentication setup on a number of CISCO devices.
Each device also has a local account.
Is it possible to make it so you can only use the local account when the radius server is ...
- 11
2
votes
1
answer
808
views
Juniper MX Radius server configuration: No authentication-server list configured
On an MX router I have configured a DHCP server and radius server authentication. Unfortunately, it is not working yet. On another MX router I have configured the same configuration and that it ...
- 275
1
vote
2
answers
198
views
Is every Switch capable of Network Access Server?
i am learning about Radius Server and particularly freeRadius. NAS devices are responsible for sending Authentication requests to the Radius Server. NAS devices include like Switch, wireless access ...
- 125
0
votes
1
answer
152
views
How VPNs authenticate a user using RADIUS
I have just had a lecture on VPNs and RADIUS and have a question with regards to authentication. I am aware of protocols such as EAP and PEAP and was wondering how these protocols work alongside ...
- 53