10 votes
Accepted

What's the difference between RADIUS and 802.1X Port-Based Authentication?

That's a lot of questions, so let's take them one by one. What exactly is 802.1X Port-Based Authentication? From Wikipedia : IEEE 802.1X is an IEEE Standard for port-based Network Access Control ...
hertitu's user avatar
  • 2,648
7 votes

Is it possible to back up network devices configs on a RADIUS server (automatically or manual)

Radius is a networking protocol, aimed at Authentication, Authorization, and Accounting. It is not designed to backup configurations. Now a device that can act as a Radius server may be able to ...
JFL's user avatar
  • 19.6k
5 votes
Accepted

Cisco IPv6 BNG Radius Attributes

Have a look @ http://blog.ipspace.net/2011/09/ipv6-mplsvpn-6vpe-with-pppoe-and-radius.html Is this what you are trying to achieve? They confirm that: Cisco-AVPair += "ip:vrf-id=vrf-name", Cisco-...
psniffer's user avatar
  • 480
5 votes
Accepted

Port Security Or 802.1X Authentication On Non-Server Network

The 2910al supports 802.1X port security as authenticator, using RADIUS over EAP or PEAP. Depending on your exact goals, an additional router is not required but you do need a RADIUS server. Check the ...
Zac67's user avatar
  • 84.4k
5 votes
Accepted

AAA authentication for all users and a single user for local only?

Here's a generic example of a Cisco device. The localadmin user can only use the console port, unless tacacs is not available, in which case the user can login remotely. username localadmin password ...
Ron Trunk's user avatar
  • 67.5k
4 votes

secure authentication over LAN 802.1X

There are many variables to consider when configuring LAN Authentication, but here is a page from the HP manual on configuring 802.1x, and here is one from the Freeradius Wiki. These two links ...
Ron Trunk's user avatar
  • 67.5k
4 votes
Accepted

Connecting networks from different states

It is possible, although it is generally not considered a good practice. WAN providers used to use different protocols for WAN circuits (frame-relay, HDLC, PoS, etc.), so a router was needed to ...
Ron Trunk's user avatar
  • 67.5k
4 votes
Accepted

Cisco 2960 radius configuration

This line: aaa authorization exec default local Doesn't allow you to start a shell (Exec) with Radius credentials. You should change it to: aaa authorization exec default group radius local
Ron Trunk's user avatar
  • 67.5k
3 votes
Accepted

RADIUS accounting Stop messages not being sent

The answer was to use dot1x port-control mac-based on each port that you want authenticated.
Jacob Degeling's user avatar
3 votes
Accepted

RADIUS test works but actual logon fails

The mistake/oversight in my config is here: aaa authentication login default local group radius Using the radius keyword at the end instead of the explicit name of the RADIUS group defined elsewhere ...
Todd Wilcox's user avatar
  • 1,135
3 votes
Accepted

WLC HA Pair Ip address when takeover

I see you put the tag of aironet, so that I assume you are using Cisco WLC. I used to manage this kind of WLC HA and I can be sure that both WLCs share the same IP address (here is 1.1.1.1) as long ...
Hung Tran's user avatar
  • 3,754
3 votes

Assigning static IP addresses to dialin PPP users on Cisco IOS

Actually this is relatively easy. Yes, you need AAA, but you don't need an external server. aaa authentication ppp default local aaa authorization network default local aaa attribute list Static-1.2....
Salrissa Jenkins's user avatar
3 votes

using 802.1x with nic teaming

LACP and 802.1X don't mix. Unless there are vendor-specific extensions allowing that(?) you can't use them simultaneously on a port. Link aggregation is normally used between switches or towards ...
Zac67's user avatar
  • 84.4k
3 votes
Accepted

Radius EAP-TLS: How to force a local IP per device/certificate?

IP addresses are assigned by a DHCP server. Simply add reservations based on MAC addresses to your DHCP server.
Zac67's user avatar
  • 84.4k
3 votes

What's the difference between DIAMETER and 802.1X Authentication?

802.1X provides client-side/front-end port-level authentication (between suplicant and authenticator). RADIUS and Diameter provide back-end authentication (between authenticator and authentication ...
Zac67's user avatar
  • 84.4k
3 votes
Accepted

MAC Authentication using RADIUS with redundant links to hosts

Before we get to the radius part, a comment about this: And since the these links going to both switches are having the same MAC Be sure to understand how your host handles MAC addresses when ...
Marc 'netztier' Luethi's user avatar
2 votes
Accepted

Cisco ISR L2TP VPN local vs radius authentication problem

I found the problem. I did not think this would be it so I overlooked it multiple times but after trying it, it worked. I feel so silly now. On the virtual template 1 I changed ppp authentication ms-...
pieterk's user avatar
  • 181
2 votes
Accepted

Fiber Network Bandwidth Control without Radius/PPPoE (Service Provider-Limit Client Bandwidth)

Many switches (smart ones) can do bandwidth limiting on a per-port basis - this is a robust, distributed method of limiting BW from a provider perspective for port-connected clients. Since most ...
Ecnerwal's user avatar
  • 2,746
2 votes

Juniper MX Radius server configuration: No authentication-server list configured

Mar 2 15:36:55.369155 authd_create_application_specific_radius_server: No authentication-server list configured It seems you missed radius server in "profile local-kpn". Try following configuration :...
Yahya's user avatar
  • 21
2 votes

Need help with PPPoE Subscriber Management on a MX80

You will need Framed-IP-Address for sure. According to the configuration which you are using I am not sure what other parameters you will need to configure. In order to use PAP/CHAP authentication ...
Stefan Stoyanov's user avatar
2 votes
Accepted

How to Multiple Radius server in ASA

You can add the second server to the "SecureID" Server Group as well: aaa-server SecureID (inside) host 10.1.1.2 key ***** authentication-port 1812 accounting-port 1813 Because both AAA Server in ...
scherard's user avatar
  • 164
2 votes

AAA authentication for all users and a single user for local only?

This worked for me on a Cisco Catalyst 3850 running IOS 15.2 (you need to configure the rest of the AAA system, this is just the line where the magic happens): aaa authentication login default local ...
Todd Wilcox's user avatar
  • 1,135
2 votes
Accepted

security benefits of using RADIUS in router authentication - packet tracer

There are two main benefits: Convenience, which for managing large numbers of networking equipment means that everything is up-to-date and not missed. Single point of reference which can be instantly ...
jonathanjo's user avatar
  • 16.2k
2 votes

Assigning static IP addresses to dialin PPP users on Cisco IOS

No. The only way to set the address per user is with AAA (radius/tacacs) There used to be ways to pin an address per line, but it's never been possible by user. – Ricky Beam I believe Ricky Beam's ...
Juffo-Wup's user avatar
  • 181
2 votes

Juniper Radius Configuration

I ended up figuring out what my issue was. I didn't have a remote user setup under [system login]. Once i create that and specified the permissions level i was able to get radius to work just fine. ...
DragonFist616's user avatar
2 votes
Accepted

Radius and certificates

When a client and the radius server start the connection how does things work? The communication between the EAP supplicant (i.e. client in your question) and the RADIUS server is configured to use ...
YLearn's user avatar
  • 27.3k
2 votes

How to implement RADIUS without an AP?

The problem is I've been reading about RADIUS and RADIUSFree server and stuff, but every implementation says you need an AP that supports RADIUS to use it. You must be misinterpreting what you are ...
YLearn's user avatar
  • 27.3k
2 votes
Accepted

Cisco configure RADIUS with local account same time

It's not possible to do that. You would have to set different authentication methods for different interfaces. Something like VTY 0-4 use RADIUS, VTY 5-15 use local accounts. Normally, you'd use ...
Jesse P.'s user avatar
  • 4,690
2 votes
Accepted

Are there other protocols for enforcing AAA besides RADIUS?

Are there other protocols for enforcing AAA besides RADIUS? ... I am looking for a simpler method of implementing AAA (Authentication, Authorization and Accounting) for approximately 20 users on an ...
YLearn's user avatar
  • 27.3k

Only top scored, non community-wiki answers of a minimum length are eligible