Questions tagged [802.1]

IEEE Standard for port-based Network Access Control

31 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5 votes
1 answer
2k views

Multiple Valid Certificates in Windows 7 breaking Wired 802.1x Deployment

I have a Wired 802.1x deployment using TLS machine authentication on Windows 7 (built-in 802.1x supplicant) with the necessary certs (FreeRadius v2.2.3 generated on Linux). Cisco C2960 POE switch is ...
Jude_Quintana's user avatar
3 votes
0 answers
175 views

Active Directory expired certs causing issues with 802.1x authentication

We are in the process of rolling out 802.1x in our environment. With that said, there are quite a few clients that revert back to an older (expired) certificate which prevents them from ...
wam6187's user avatar
  • 31
3 votes
0 answers
3k views

Cisco SG300 switch does not send RADIUS messages to server for 802.1x

I want to eventually configure the SG300 to authenticate wired clients with 802.1x and Microsoft NPS (RADIUS). I am currently testing this setup using a single port (Port 7) on my SG300, a test ...
Christopher Pope's user avatar
2 votes
0 answers
2k views

802.1x dynamic vlan assignment not assigning VLAN

I recently dived into 802.1x authentication with dynamic vlan assigment. My current set up contains of: - A client - A SG220 cisco switch (the supplicant) - A freeradius (authenticator) ...
martijn's user avatar
  • 21
2 votes
0 answers
5k views

Single Sign On 802.1x Wireless - saying “Connecting to <SSID>”, hangs for 10 seconds, fails with “Unable to connect to <SSID>, Logging on…”.

We are implementing WiFi on Windows 7 machines in our corporate environment. Machines should be able to log into the domain by WiFi as the Machine (Pre-Logon), and as the User (Post-Logon). We have ...
Phaedrus's user avatar
  • 157
2 votes
0 answers
383 views

Macs to work on 802.1X wired network

We are in the process on 802.1X for all our wired clients. We are using NPS on Server 2008R2 as our Radius server. All our windows clients authenticate using just a computer certificate issued by our ...
NickDa's user avatar
  • 99
2 votes
0 answers
890 views

Windows 7 / Windows Vista won't connect to 802.1x RADIUS Server

I've deployed Radius and have no problems connecting with TTLS, PEAP, or MD5 using linux, mac, and windows xp. For Windows 7 and Vista, I'm never prompted with the dialog box to enter username & ...
Calvin Froedge's user avatar
1 vote
0 answers
1k views

802.1x - automatic fallback from EAP-TLS to EAP-PEAP for Windows 10 clients?

802.1x authentication is enabled on our switch access ports and wireless APs. RADIUS requests are sent to a Server 2012R2 NPS server. This NPS server has two network policies configured: ...
AdamR's user avatar
  • 51
1 vote
0 answers
700 views

802.1x Wifi with NPS Server, using EAP-PEAP and a certificate for Authentication

I don't know if what I am trying to do is possible but here we go. I have a bunch of iPad's that I am going to supervise before they go on to my network. The iPad's will connect to the wifi via 802....
tyelford's user avatar
  • 255
1 vote
0 answers
2k views

Bridge 802.1x traffic between eth0<->eth1, IP NAT eth0<->eth2

Summary: Given a Linux system (Ubuntu 16.04) with 3 physical ethernet interfaces: eth0: WAN eth1: EAPoL authenticator eth2: Client LAN I am attempting to configure this: Bridge br0: eth0<->eth1 ...
RandomUser's user avatar
1 vote
0 answers
572 views

Same VLAN for LAN only and Internet users on 802.1x network with pfSense as gateway

I am creating an ISP for a student residence. The LAN is already there and working, with several CISCO switches. I want to provide Internet by a secured and automatic way to those who pay for it (...
qschulz's user avatar
  • 111
1 vote
1 answer
1k views

802.1x Login Window profile fails because it "can't prompt for missing properties"

I'm trying to configure a TTLS 802.1x Login Window profile on OS X 10.10.1 Yosemite. The profile has been installed (via MDM) and the login window now shows (above the username/password input boxes) ...
eggyal's user avatar
  • 412
1 vote
0 answers
438 views

Using airport extreme as an AP with true bridge mode (forwarding 802.1x auth)

So here is my setup. I have a Router (Fortigate) 4 airport Extreme, and a radius/ldap server on a distant server. I want my user to authenticate with the radius or LDAP server, and be able to create ...
Xarouma's user avatar
  • 53
1 vote
0 answers
86 views

802.11n router supporting 802.11n as WAN connection?

I have an existing 802.11n WLAN router with an Ethernet connection as its upstream WAN connection (router A). I would like to get another 802.11n WLAN router (router B) and have it use router A as ...
noctonura's user avatar
  • 463
1 vote
0 answers
2k views

Windows 7 802.1x wired authentication to domain with single sign on

I'm doing some research here regarding possible implementations of 802.1x wired authentication with single sign on - domain username/password is used for 802.1x authentication. Initially user is ...
Vieplis's user avatar
  • 43
1 vote
2 answers
897 views

Can a device (WAP or switch) be configured as an 802.1x supplicant?

We are looking at implementing 802.1x on a wired/wireless network. What I am looking for is a device that can act as a supplicant and once authenticated on the network, is able to pass traffic from ...
Allan Ross's user avatar
1 vote
0 answers
263 views

How to Implementing wired 802.1x in Win2k3 R2 and Windows XP SP3 Client

I just add this .ldf filesMicrosoft AD Extenstions that MS suggest for extending Windows Server 2003 GP to support 802.1x security policy over Wired. both file successfully installed, but I cannot ...
user19049's user avatar
  • 497
1 vote
1 answer
435 views

HP/3com 9552 802.11n AP won't let some clients connect

I splurged and bought an HP/3com 9552 802.11a/b/g/n access point. Like most enterprise-grade access points, it has very fine-grained configuration options. I'm pretty sure I've configured it ...
Barry Brown's user avatar
  • 2,522
0 votes
0 answers
66 views

Capturing in monitor mode reports 0 packet for tshark

MacOS 13.4.1 I'm trying to capture 802.11 management packets with a real 802.11 headers (not just Ethernet header) with tshark. So trying to use % sudo tshark -i wifi0 -I -L Data link ...
Some Name's user avatar
  • 143
0 votes
1 answer
508 views

Can a Linux box be configured with IEEE 802.1x while grabbing the info from a Windows box?

A managed Windows device can join the wired network of my corporate company, while a personal Linux one can't. As far as I understand, this is possible thanks to IEEE 802.1x standard. Looking at the ...
Patrick Allaert's user avatar
0 votes
1 answer
14k views

Vlan manager does not automatically disable macs

I want to implement a client infrastructure where the devices connect to the network in different vlan. I installed a freeradius server connected to our Active Directory. I have enabled the switches ...
yoga84's user avatar
  • 1
0 votes
0 answers
542 views

Can NPS, RADIUS, and 802.1x Assign Multiple VLANs To A Single User?

I will be using Network Policy Server (NPS) with a RADIUS server to assign each user to a VLAN when they successfully authenticate to the network using 802.1x. In Active Directory Directory Services (...
Bill Vallance's user avatar
0 votes
1 answer
69 views

Will an IIS SelfSSL certificate still be valid when the signing server is replaced?

Will my 10 year valid self-signed certificate, that is using a common name not resembling any hostname, still be valid/trusted by others in the AD, after the signing server is replaced in maybe a few ...
nomad's user avatar
  • 1
0 votes
1 answer
2k views

freeradius gives "no shared cipher" for windows 10 client

I have a working configuration of 802.1X authentification on my switch. The radius server is a freeradius instance with EAP-TLS configured. Everything works fine on linux (and android devices), but ...
Alexander Sergeyev's user avatar
0 votes
0 answers
381 views

RADIUS Server for unauthorized device control using 802.1x

I have a closed network for security cameras. I want only for authorized cameras to be able to connect to the Network Switch. If the Switch supports 802.1x authentication, and so do the cameras, could ...
HelloExchangers's user avatar
0 votes
1 answer
80 views

Yosemite 10.10.5 Clock drifts while asleep

We have a cart of Macbook Pros with Yosemite 10.10.5 installed on them. Our school network uses 802.1x for authentication to the WiFi, but when these laptops are put in their carts and left to sit ...
Matt Fogleman's user avatar
0 votes
0 answers
121 views

Protocol used between a RADIUS client and a computer?

I can't find documentation about the protocol used when a computer wants to reach a network with 802.1x. RADIUS client (switch, access point) use UDP/1812-1813 to communicate with RADIUS server. How ...
setenforce 1's user avatar
  • 1,390
0 votes
1 answer
547 views

Issues with IAS authentication

after changing domain (child.domain.net --> domain.net), our Windows 7 clients are no longer able to authenticate to the IAS server (802.1x switch port won't allow them onto the network). Clients, IAS ...
SiMe's user avatar
  • 11
0 votes
0 answers
779 views

Is there any way by which I can capture the wifi probe requests without using monitor mode?

For some reason, keeping the wifi interface in monitor mode on my machine is crashing it(its a raspberry pi, I'm assuming its crashing because of the amount of traffic being intercepted, but lets not ...
user3465593's user avatar
0 votes
2 answers
2k views

Setting variable depending on NAS-IP-Address in Freeradius

The setup We currently have a Freeradius server used to authenticate our Wifi users against our Active Directory server. The link between Freeradius and the Active Directory is done by Winbind. In ...
Antoine Benkemoun's user avatar
-1 votes
1 answer
362 views

"Dynamic" access point and port authentication

Here is the context of the question: I have multiple switches with port-authentication (MAC based or 802.1X). Each switch are connected with a trunk port statically configured. One vlan for ...
gapz's user avatar
  • 101