Questions tagged [radius]

For questions about RADIUS, an authentication and accounting service defined by RFC 2865.

Filter by
Sorted by
Tagged with
10
votes
1answer
2k views

Using RADIUS to restrict SSID on Cisco Aironet

I would like to use my RADIUS server to restrict access to configured SSID on a per user basis. According to the documentation linked above i add the following attribute to a test user: ospite-5vh ...
8
votes
3answers
11k views

Regarding Dot1X dynamic VLAN assignment

Situation: I am trying to get 802.1X working for me. I want RADIUS server to dynamically assign VLANs to ports based on RADIUS reply attribute for particular user. I have an HP E2620 switch and a ...
8
votes
1answer
736 views

Cisco IPv6 BNG Radius Attributes

I am trying to push out IPv6 unnumbered to an interface via radius. I am trying to do it in a similar fashion to how you would for IPv4: Cisco-AVPair += "ip:vrf-id=vrf-name", Cisco-AVPair += "ip:ip-...
6
votes
1answer
3k views

Cisco + FreeRADIUS: Exec 15 level privilege mode

I have two routers: Cisco ISR 2921 with IOS version 15.0(1r)M9 and a Cisco C2600 which is an old guy with IOS 12.0(7)XK1. I have this set up on a FreeRADIUS server: router-admin MD5-Password := "&...
6
votes
2answers
1k views

Configure radius server via GUI in Cisco WLC

My boss asked me to create a lobby administration for user authentication in a certain Virtual LAN. So I googled for it, and I found out that RADIUS server will work for this. And I've reached this ...
6
votes
1answer
1k views

Cisco 3750 802.1x — Invalid Eapol packet length

Having a tough time here getting EAP-TLS to work. I am converting from a EAP-PEAP solution to EAP-TLS and have done the steps required for PKI so as to be not a certificate issue. (server and client ...
5
votes
2answers
27k views

What's the difference between RADIUS and 802.1X Port-Based Authentication?

As long as I know RADIUS is a type of authentication protocol, where for example if someone wants to use a switch, it first of all needs to enter his/her credentials, and properly authenticate himself/...
5
votes
2answers
1k views

AAA authentication for all users and a single user for local only?

Is it possible to have AAA for a switch or router, dealing with JunOS, IOS and NXOS. Where all users default to a radius/tacacs server but there is a single user that bypasses the remote auth and uses ...
5
votes
2answers
3k views

Configure Cisco Aironet 1600 AP with RADIUS and multiple VLANs

I have a little problem to realize a AP solution on a small office environment. At first I do not have any skills in configuring Cisco Access Points ;) I have the following environment: A small ...
5
votes
1answer
100 views

Radius EAP-TLS: How to force a local IP per device/certificate?

I have configured my wifi network with a freeradius server using EAP-TLS with a different certificate per device. I am currently using DHCP pool for each VLAN/subnet in my Cisco router/switch. I'd ...
4
votes
3answers
6k views

PPPoE - How does it reach the Radius Server?

Hi guys I have a couple of questions related to PPPoE. When an ISP provides a service and they use a Radius Server for Authentication how does the client router know where to send the Authentication ...
4
votes
1answer
2k views

RADIUS authentication

I am configuring RADIUS authentication on my switches but it does not work and I don't know why. My configuration is pretty straightforward : aaa new-model aaa group server radius RADIUS-ACTIF ...
4
votes
1answer
75 views

RADIUS accounting Stop messages not being sent

I have a Dell N2000 series switch upon which dot1x authentication and RADIUS accounting are enabled. I have configured RADIUS accounting to send start and stop messages, but I am only seeing Start ...
4
votes
1answer
1k views

EAP packets generated for plain MAC-based authentication

I wanted to implement trivial MAC-based authentication on some Cisco SG300 (small-business) switches. The client doesn't ask for auth but I simply want the client's MAC address to be authenticated, ...
4
votes
1answer
1k views

VLAN assignment based on mac-address or RADIUS attribute

I'd like to know how to assign someone's client device to a different VLAN based on MAC address of that device.What kind of hardware/software would make this solution possible (if possible at all)? ...
4
votes
1answer
755 views

Cisco ISR L2TP VPN local vs radius authentication problem

I currently have a cisco 1841 router configured to authenticate users against a Windows NPS server. The strange thing is that when using local authentication the VPN connects first time every time. I ...
4
votes
2answers
5k views

RADIUS VLAN Assignment with Cisco ISE

I am trying to install Cisco ISE 2.1 to be used as a RADIUS server with 802.1x on my switches. I want to dynamically assign a VLAN based to a user who connects on the switch port. The problem is that,...
3
votes
1answer
524 views

Port Security Or 802.1X Authentication On Non-Server Network

I have a closed network of 3 switches and 40 computers. 35 of those computers (Windows 7 x64 Professional) need to be plugged into any of the 24 ports on 2 of the switches at any time depending on the ...
3
votes
2answers
285 views

Manage Wifi clients

We have 20 location and about 150 laptop clients, each location has Cisco WLC 5508. Right now everyone is using same password which is individually configured on all WLCs. Is there any management ...
3
votes
1answer
134 views

Juniper Radius Configuration

I'm trying to figure out how to setup radius on a Juniper EX2300. The juniper can reach the server no problem, but when I run the 'test aaa authd-lite user [user] password [password]' command, I get ...
3
votes
1answer
72 views

security benefits of using RADIUS in router authentication - packet tracer

I'm trying to learn how can one protect routers (using Cisco Packet Tracer) and I found out I can set local password to authenticate access to the router privileged and configuration mode. However, I ...
3
votes
1answer
113 views

Cisco Nexus 5548 802.1x Guest-VLAN not available

I'm trying to configure a Cisco Nexus 5548 for 802.1x using MAC Authentication Bypass. I'm finding that there isn't an option to configure the guest VLAN in the event that authentication fails. ...
3
votes
3answers
4k views

802.1x and use Google G Suite Directory as LDAP

Has anyone managed to authenticate yours to the network via 802.1x using Google Directory? I have a case where whole company is using Google Apps and G-Suite with a custom domain and they would like ...
3
votes
1answer
476 views

WPA2 Enterprise with NPS and WLC

I am pretty new to this and am trying to set up WPA2 enterprise where users can connect to the Wifi using their AD credentials (PEAP-MSCHAPv2). The Cisco WLC has been configured to relay requests ...
2
votes
1answer
40 views

Is it possible to back up network devices configs on a RADIUS server (automatically or manual)

My question is about back up on RADIUS server. Is it possible to back up network devices configs on a RADIUS server (automatically or manual)
2
votes
1answer
47 views

secure authentication over LAN 802.1X

secure authentication over LAN I have installed FreeRadius Version 3.0.12 server, we debian 9.4.0, and I want to secure my LAN, that means, nobody can connect to the LAN if its MAC address is not ...
2
votes
1answer
257 views

WLC HA Pair Ip address when takeover

I have a WLC HA Pair, and every appliance has it's own ip address. for example: 1.1.1.1 main node and 1.1.1.2 the secondary. I have an SSID with AAA configured pointing to a NPS server which has the ...
2
votes
1answer
770 views

Need help with PPPoE Subscriber Management on a MX80

I've been working with Subscriber Management using DHCP and a FreeRadius server and have been quite successful. Of course, once my company heard that it is possible for customers to bring their public ...
2
votes
1answer
503 views

Juniper MX Radius server configuration: No authentication-server list configured

On an MX router I have configured a DHCP server and radius server authentication. Unfortunately, it is not working yet. On another MX router I have configured the same configuration and that it ...
2
votes
2answers
5k views

RADIUS PAP vs MSCHAPv2

What is the difference between PAP and MSCHAPv2 authentication? Looking at picking a RADIUS protocol for authentication with Microsoft NPS and trying to understand to pros / cons for PAP and MSCHAPv2....
2
votes
1answer
688 views

Does 802.1X Multiple Hosts mode only work for access points or even through another switch?

802.1X Multiple Hosts mode is usually used when an access point acts as a supplicant and authenticates to the switch, then allows further hosts by bridging it to the wireless network. My question is ...
2
votes
1answer
434 views

OpenLDAP VS Active Directory as a back-end DB?

I'm working on a project and I need to make the clients authenticate themselves by using 802.1x, I'm using RADIUS as an Authentication Server, my question is what is the best choice as a back-end ...
2
votes
1answer
35 views

Cisco configure RADIUS with local account same time

In LAB i am working on Cisco authentication with freeradius and everything works but i want my cisco switch first lookup in radius and if user didn't find then it go to local database. currently i ...
2
votes
1answer
309 views

Cisco Mobility Express - supported authentication options

What are the supported authentication options for the ME APs? Do they support only login through local credentials or RADIUS/TACACS+ is also supported?
2
votes
1answer
3k views

Assign wireless devices to VLAN by MAC address

Scenario I have an environment with several hundred wireless devices. I am trying to break down a fairly large network into several VLANs. There are wireless devices in carts (groups of 30) that I ...
2
votes
1answer
154 views

RouterOS - creating user only with access to tools [closed]

I have 3 different networks and I'd like users from network A to be able to wake up pc network B (ofc with certain password) so I guess it could be good idea to allow them to use WOL capabilities ...
2
votes
0answers
2k views

IPsec IKEv2 with StrongSwan Cert+EAP not working

I'm trying to setup a Cisco router (881H) to act as a head end for an IPsec IKEv2 VPN. The target setup is meant to be used by StrongSWan clients (currently testing on Android smartphone), and we wish ...
1
vote
2answers
120 views

Assigning static IP addresses to dialin PPP users on Cisco IOS

I have a Cisco router running IOS 15.3 serving as a dial-in PPP endpoint for a handful of modems. I am using local authentication and a local IP pool to hand out dynamic IP addresses to the callers; ...
1
vote
1answer
57 views

Connecting networks from different states [closed]

Is it possible to connect 5 networks together using one router as a central component even if the networks aren't close to each other? An example would be 2 networks in Houston and 1 in Dallas Texas, ...
1
vote
1answer
54 views

using 802.1x with nic teaming

I am working on a project which is mandatory to have each pc configured with two network interface cards as a nic team. I want to use 802.1x for authentication with a radius server like cisco ISE. My ...
1
vote
1answer
3k views

RADIUS test works but actual logon fails

Let me start by putting my issue into one sentence: I have a Catalyst 4507 and I can't log onto it using RADIUS even though the configuration is the same as a Catalyst 3850 which is working and ...
1
vote
2answers
483 views

Fiber Network Bandwidth Control without Radius/PPPoE (Service Provider-Limit Client Bandwidth)

I have been reading and watching some information regarding fiber networks and their deployment. One interesting point that was raised was that in a fiber network generally a DHCP server is used for ...
1
vote
2answers
75 views

802.1X Auth for Clients and Servers

I'm about to introduce 802.1X Authentication to my current network for wifi and wired connections: My Setup: I have a Windows Domain Controller and I wanted to use the Network Policy Service for ...
1
vote
1answer
2k views

How to Multiple Radius server in ASA

We have two RADIUS server for SecureID token auth for VPN and i have configure 10.1.1.1 (primary) but don't know how to configure 10.1.1.2 (backup radius) This is what i have currently aaa-server ...
1
vote
2answers
393 views

No RADIUS Accounting for Particular Server

We have a VoD server that's directly connected to Juniper MX104 BNG. Juniper MX104 is also acting as a BRAS. Right now if any user accesses that VoD server, all the incoming and outgoing traffic is ...
1
vote
1answer
259 views

RADIUS: Accounting is not establishing the session

I'm using Huawei Ne20 and a FreeRadius, the last has already been used to authentication Mikrotik accounts. I'm getting authentication accept message, but the accounting session is not being ...
1
vote
1answer
2k views

Cisco 3750 switch not communicating with RADIUS server

I have a Cisco 3750 switch and I want to make it work with PacketFence NAC. I have configured the switch according to their network configuration document here, but the switch is still not ...
1
vote
2answers
112 views

Is every Switch capable of Network Access Server?

i am learning about Radius Server and particularly freeRadius. NAS devices are responsible for sending Authentication requests to the Radius Server. NAS devices include like Switch, wireless access ...
1
vote
3answers
1k views

cisco ssh key authorization level via radius

Related to Authenticate ssh key via Cisco ACS (TACACS+) Given a working ssh public key config: ip ssh pubkey-chain username admin key-string <ssh-pub-key> exit exit I have only been ...
1
vote
1answer
341 views

Apply ACL to block some users to have not access to Radius server?

I want to block the users of sub network to have not access to the server Radius ? I tried one like this but it doesn't work.