Questions tagged [radius]

For questions about RADIUS, an authentication and accounting service defined by RFC 2865.

Filter by
Sorted by
Tagged with
10
votes
1answer
2k views

Using RADIUS to restrict SSID on Cisco Aironet

I would like to use my RADIUS server to restrict access to configured SSID on a per user basis. According to the documentation linked above i add the following attribute to a test user: ospite-5vh ...
8
votes
3answers
12k views

Regarding Dot1X dynamic VLAN assignment

Situation: I am trying to get 802.1X working for me. I want RADIUS server to dynamically assign VLANs to ports based on RADIUS reply attribute for particular user. I have an HP E2620 switch and a ...
8
votes
1answer
813 views

Cisco IPv6 BNG Radius Attributes

I am trying to push out IPv6 unnumbered to an interface via radius. I am trying to do it in a similar fashion to how you would for IPv4: Cisco-AVPair += "ip:vrf-id=vrf-name", Cisco-AVPair += "ip:ip-...
6
votes
1answer
3k views

Cisco + FreeRADIUS: Exec 15 level privilege mode

I have two routers: Cisco ISR 2921 with IOS version 15.0(1r)M9 and a Cisco C2600 which is an old guy with IOS 12.0(7)XK1. I have this set up on a FreeRADIUS server: router-admin MD5-Password := "&...
6
votes
2answers
1k views

Configure radius server via GUI in Cisco WLC

My boss asked me to create a lobby administration for user authentication in a certain Virtual LAN. So I googled for it, and I found out that RADIUS server will work for this. And I've reached this ...
6
votes
1answer
1k views

Cisco 3750 802.1x — Invalid Eapol packet length

Having a tough time here getting EAP-TLS to work. I am converting from a EAP-PEAP solution to EAP-TLS and have done the steps required for PKI so as to be not a certificate issue. (server and client ...
5
votes
2answers
31k views

What's the difference between RADIUS and 802.1X Port-Based Authentication?

As long as I know RADIUS is a type of authentication protocol, where for example if someone wants to use a switch, it first of all needs to enter his/her credentials, and properly authenticate himself/...
5
votes
2answers
2k views

AAA authentication for all users and a single user for local only?

Is it possible to have AAA for a switch or router, dealing with JunOS, IOS and NXOS. Where all users default to a radius/tacacs server but there is a single user that bypasses the remote auth and uses ...
5
votes
2answers
3k views

Configure Cisco Aironet 1600 AP with RADIUS and multiple VLANs

I have a little problem to realize a AP solution on a small office environment. At first I do not have any skills in configuring Cisco Access Points ;) I have the following environment: A small ...
5
votes
1answer
124 views

Radius EAP-TLS: How to force a local IP per device/certificate?

I have configured my wifi network with a freeradius server using EAP-TLS with a different certificate per device. I am currently using DHCP pool for each VLAN/subnet in my Cisco router/switch. I'd ...
4
votes
3answers
7k views

PPPoE - How does it reach the Radius Server?

Hi guys I have a couple of questions related to PPPoE. When an ISP provides a service and they use a Radius Server for Authentication how does the client router know where to send the Authentication ...
4
votes
1answer
2k views

RADIUS authentication

I am configuring RADIUS authentication on my switches but it does not work and I don't know why. My configuration is pretty straightforward : aaa new-model aaa group server radius RADIUS-ACTIF ...
4
votes
1answer
93 views

RADIUS accounting Stop messages not being sent

I have a Dell N2000 series switch upon which dot1x authentication and RADIUS accounting are enabled. I have configured RADIUS accounting to send start and stop messages, but I am only seeing Start ...
4
votes
1answer
1k views

EAP packets generated for plain MAC-based authentication

I wanted to implement trivial MAC-based authentication on some Cisco SG300 (small-business) switches. The client doesn't ask for auth but I simply want the client's MAC address to be authenticated, ...
4
votes
1answer
1k views

VLAN assignment based on mac-address or RADIUS attribute

I'd like to know how to assign someone's client device to a different VLAN based on MAC address of that device.What kind of hardware/software would make this solution possible (if possible at all)? ...
4
votes
1answer
610 views

WPA2 Enterprise with NPS and WLC

I am pretty new to this and am trying to set up WPA2 enterprise where users can connect to the Wifi using their AD credentials (PEAP-MSCHAPv2). The Cisco WLC has been configured to relay requests ...
4
votes
1answer
866 views

Cisco ISR L2TP VPN local vs radius authentication problem

I currently have a cisco 1841 router configured to authenticate users against a Windows NPS server. The strange thing is that when using local authentication the VPN connects first time every time. I ...
4
votes
2answers
5k views

RADIUS VLAN Assignment with Cisco ISE

I am trying to install Cisco ISE 2.1 to be used as a RADIUS server with 802.1x on my switches. I want to dynamically assign a VLAN based to a user who connects on the switch port. The problem is that,...
3
votes
1answer
597 views

Port Security Or 802.1X Authentication On Non-Server Network

I have a closed network of 3 switches and 40 computers. 35 of those computers (Windows 7 x64 Professional) need to be plugged into any of the 24 ports on 2 of the switches at any time depending on the ...
3
votes
2answers
295 views

Manage Wifi clients

We have 20 location and about 150 laptop clients, each location has Cisco WLC 5508. Right now everyone is using same password which is individually configured on all WLCs. Is there any management ...
3
votes
1answer
306 views

Juniper Radius Configuration

I'm trying to figure out how to setup radius on a Juniper EX2300. The juniper can reach the server no problem, but when I run the 'test aaa authd-lite user [user] password [password]' command, I get ...
3
votes
1answer
84 views

security benefits of using RADIUS in router authentication - packet tracer

I'm trying to learn how can one protect routers (using Cisco Packet Tracer) and I found out I can set local password to authenticate access to the router privileged and configuration mode. However, I ...
3
votes
1answer
152 views

Cisco Nexus 5548 802.1x Guest-VLAN not available

I'm trying to configure a Cisco Nexus 5548 for 802.1x using MAC Authentication Bypass. I'm finding that there isn't an option to configure the guest VLAN in the event that authentication fails. ...
3
votes
3answers
6k views

802.1x and use Google G Suite Directory as LDAP

Has anyone managed to authenticate yours to the network via 802.1x using Google Directory? I have a case where whole company is using Google Apps and G-Suite with a custom domain and they would like ...
2
votes
1answer
41 views

Is it possible to back up network devices configs on a RADIUS server (automatically or manual)

My question is about back up on RADIUS server. Is it possible to back up network devices configs on a RADIUS server (automatically or manual)
2
votes
1answer
50 views

secure authentication over LAN 802.1X

secure authentication over LAN I have installed FreeRadius Version 3.0.12 server, we debian 9.4.0, and I want to secure my LAN, that means, nobody can connect to the LAN if its MAC address is not ...
2
votes
1answer
275 views

WLC HA Pair Ip address when takeover

I have a WLC HA Pair, and every appliance has it's own ip address. for example: 1.1.1.1 main node and 1.1.1.2 the secondary. I have an SSID with AAA configured pointing to a NPS server which has the ...
2
votes
1answer
98 views

Are there other protocols for enforcing AAA besides RADIUS?

I know this is not the ideal question format but I need to lean upon the expertise in this community. I am looking for a simpler method of implementing AAA (Authentication, Authorization and ...
2
votes
1answer
97 views

Cisco configure RADIUS with local account same time

In LAB i am working on Cisco authentication with freeradius and everything works but i want my cisco switch first lookup in radius and if user didn't find then it go to local database. currently i ...
2
votes
1answer
879 views

Need help with PPPoE Subscriber Management on a MX80

I've been working with Subscriber Management using DHCP and a FreeRadius server and have been quite successful. Of course, once my company heard that it is possible for customers to bring their public ...
2
votes
1answer
545 views

Juniper MX Radius server configuration: No authentication-server list configured

On an MX router I have configured a DHCP server and radius server authentication. Unfortunately, it is not working yet. On another MX router I have configured the same configuration and that it ...
2
votes
2answers
7k views

RADIUS PAP vs MSCHAPv2

What is the difference between PAP and MSCHAPv2 authentication? Looking at picking a RADIUS protocol for authentication with Microsoft NPS and trying to understand to pros / cons for PAP and MSCHAPv2....
2
votes
1answer
712 views

Does 802.1X Multiple Hosts mode only work for access points or even through another switch?

802.1X Multiple Hosts mode is usually used when an access point acts as a supplicant and authenticates to the switch, then allows further hosts by bridging it to the wireless network. My question is ...
2
votes
1answer
457 views

OpenLDAP VS Active Directory as a back-end DB?

I'm working on a project and I need to make the clients authenticate themselves by using 802.1x, I'm using RADIUS as an Authentication Server, my question is what is the best choice as a back-end ...
2
votes
1answer
417 views

Cisco Mobility Express - supported authentication options

What are the supported authentication options for the ME APs? Do they support only login through local credentials or RADIUS/TACACS+ is also supported?
2
votes
1answer
4k views

Assign wireless devices to VLAN by MAC address

Scenario I have an environment with several hundred wireless devices. I am trying to break down a fairly large network into several VLANs. There are wireless devices in carts (groups of 30) that I ...
2
votes
1answer
158 views

RouterOS - creating user only with access to tools [closed]

I have 3 different networks and I'd like users from network A to be able to wake up pc network B (ofc with certain password) so I guess it could be good idea to allow them to use WOL capabilities ...
2
votes
0answers
2k views

IPsec IKEv2 with StrongSwan Cert+EAP not working

I'm trying to setup a Cisco router (881H) to act as a head end for an IPsec IKEv2 VPN. The target setup is meant to be used by StrongSWan clients (currently testing on Android smartphone), and we wish ...
1
vote
2answers
227 views

Assigning static IP addresses to dialin PPP users on Cisco IOS

I have a Cisco router running IOS 15.3 serving as a dial-in PPP endpoint for a handful of modems. I am using local authentication and a local IP pool to hand out dynamic IP addresses to the callers; ...
1
vote
1answer
89 views

Connecting networks from different states [closed]

Is it possible to connect 5 networks together using one router as a central component even if the networks aren't close to each other? An example would be 2 networks in Houston and 1 in Dallas Texas, ...
1
vote
1answer
95 views

using 802.1x with nic teaming

I am working on a project which is mandatory to have each pc configured with two network interface cards as a nic team. I want to use 802.1x for authentication with a radius server like cisco ISE. My ...
1
vote
1answer
4k views

RADIUS test works but actual logon fails

Let me start by putting my issue into one sentence: I have a Catalyst 4507 and I can't log onto it using RADIUS even though the configuration is the same as a Catalyst 3850 which is working and ...
1
vote
2answers
500 views

Fiber Network Bandwidth Control without Radius/PPPoE (Service Provider-Limit Client Bandwidth)

I have been reading and watching some information regarding fiber networks and their deployment. One interesting point that was raised was that in a fiber network generally a DHCP server is used for ...
1
vote
2answers
79 views

802.1X Auth for Clients and Servers

I'm about to introduce 802.1X Authentication to my current network for wifi and wired connections: My Setup: I have a Windows Domain Controller and I wanted to use the Network Policy Service for ...
1
vote
1answer
2k views

How to Multiple Radius server in ASA

We have two RADIUS server for SecureID token auth for VPN and i have configure 10.1.1.1 (primary) but don't know how to configure 10.1.1.2 (backup radius) This is what i have currently aaa-server ...
1
vote
2answers
497 views

No RADIUS Accounting for Particular Server

We have a VoD server that's directly connected to Juniper MX104 BNG. Juniper MX104 is also acting as a BRAS. Right now if any user accesses that VoD server, all the incoming and outgoing traffic is ...
1
vote
1answer
56 views

ISE as RADIUS server or not in EAP-TLS authentication

Does the ISE server act as a RADIUS server to a Switch proxying a supplicant certificate, or does it use some other protocol? This is for EAP-TLS based auth
1
vote
1answer
322 views

RADIUS: Accounting is not establishing the session

I'm using Huawei Ne20 and a FreeRadius, the last has already been used to authentication Mikrotik accounts. I'm getting authentication accept message, but the accounting session is not being ...
1
vote
1answer
2k views

Cisco 3750 switch not communicating with RADIUS server

I have a Cisco 3750 switch and I want to make it work with PacketFence NAC. I have configured the switch according to their network configuration document here, but the switch is still not ...
1
vote
2answers
120 views

Is every Switch capable of Network Access Server?

i am learning about Radius Server and particularly freeRadius. NAS devices are responsible for sending Authentication requests to the Radius Server. NAS devices include like Switch, wireless access ...