Questions tagged [802.1]
IEEE Standard for port-based Network Access Control
31
questions with no upvoted or accepted answers
5
votes
1
answer
2k
views
Multiple Valid Certificates in Windows 7 breaking Wired 802.1x Deployment
I have a Wired 802.1x deployment using TLS machine authentication on Windows 7 (built-in 802.1x supplicant) with the necessary certs (FreeRadius v2.2.3 generated on Linux). Cisco C2960 POE switch is ...
3
votes
0
answers
175
views
Active Directory expired certs causing issues with 802.1x authentication
We are in the process of rolling out 802.1x in our environment. With that said, there are quite a few clients that revert back to an older (expired) certificate which prevents them from ...
3
votes
0
answers
3k
views
Cisco SG300 switch does not send RADIUS messages to server for 802.1x
I want to eventually configure the SG300 to authenticate wired clients with 802.1x and Microsoft NPS (RADIUS). I am currently testing this setup using a single port (Port 7) on my SG300, a test ...
2
votes
0
answers
2k
views
802.1x dynamic vlan assignment not assigning VLAN
I recently dived into 802.1x authentication with dynamic vlan assigment.
My current set up contains of:
- A client
- A SG220 cisco switch (the supplicant)
- A freeradius (authenticator) ...
2
votes
0
answers
5k
views
Single Sign On 802.1x Wireless - saying “Connecting to <SSID>”, hangs for 10 seconds, fails with “Unable to connect to <SSID>, Logging on…”.
We are implementing WiFi on Windows 7 machines in our corporate environment. Machines should be able to log into the domain by WiFi as the Machine (Pre-Logon), and as the User (Post-Logon). We have ...
2
votes
0
answers
383
views
Macs to work on 802.1X wired network
We are in the process on 802.1X for all our wired clients. We are using NPS on Server 2008R2 as our Radius server. All our windows clients authenticate using just a computer certificate issued by our ...
2
votes
0
answers
890
views
Windows 7 / Windows Vista won't connect to 802.1x RADIUS Server
I've deployed Radius and have no problems connecting with TTLS, PEAP, or MD5 using linux, mac, and windows xp. For Windows 7 and Vista, I'm never prompted with the dialog box to enter username & ...
1
vote
0
answers
1k
views
802.1x - automatic fallback from EAP-TLS to EAP-PEAP for Windows 10 clients?
802.1x authentication is enabled on our switch access ports and wireless APs. RADIUS requests are sent to a Server 2012R2 NPS server.
This NPS server has two network policies configured:
...
1
vote
0
answers
700
views
802.1x Wifi with NPS Server, using EAP-PEAP and a certificate for Authentication
I don't know if what I am trying to do is possible but here we go.
I have a bunch of iPad's that I am going to supervise before they go on to my network. The iPad's will connect to the wifi via 802....
1
vote
0
answers
2k
views
Bridge 802.1x traffic between eth0<->eth1, IP NAT eth0<->eth2
Summary:
Given a Linux system (Ubuntu 16.04) with 3 physical ethernet interfaces:
eth0: WAN
eth1: EAPoL authenticator
eth2: Client LAN
I am attempting to configure this:
Bridge br0: eth0<->eth1
...
1
vote
0
answers
572
views
Same VLAN for LAN only and Internet users on 802.1x network with pfSense as gateway
I am creating an ISP for a student residence. The LAN is already there and working, with several CISCO switches. I want to provide Internet by a secured and automatic way to those who pay for it (...
1
vote
1
answer
1k
views
802.1x Login Window profile fails because it "can't prompt for missing properties"
I'm trying to configure a TTLS 802.1x Login Window profile on OS X 10.10.1 Yosemite.
The profile has been installed (via MDM) and the login window now shows (above the username/password input boxes) ...
1
vote
0
answers
438
views
Using airport extreme as an AP with true bridge mode (forwarding 802.1x auth)
So here is my setup. I have a Router (Fortigate) 4 airport Extreme, and a radius/ldap server on a distant server.
I want my user to authenticate with the radius or LDAP server, and be able to create ...
1
vote
0
answers
86
views
802.11n router supporting 802.11n as WAN connection?
I have an existing 802.11n WLAN router with an Ethernet connection as its upstream WAN connection (router A). I would like to get another 802.11n WLAN router (router B) and have it use router A as ...
1
vote
0
answers
2k
views
Windows 7 802.1x wired authentication to domain with single sign on
I'm doing some research here regarding possible implementations of 802.1x wired authentication with single sign on - domain username/password is used for 802.1x authentication.
Initially user is ...
1
vote
2
answers
897
views
Can a device (WAP or switch) be configured as an 802.1x supplicant?
We are looking at implementing 802.1x on a wired/wireless network. What I am looking for is a device that can act as a supplicant and once authenticated on the network, is able to pass traffic from ...
1
vote
0
answers
263
views
How to Implementing wired 802.1x in Win2k3 R2 and Windows XP SP3 Client
I just add this .ldf filesMicrosoft AD Extenstions that MS suggest for extending Windows Server 2003 GP to support 802.1x security policy over Wired. both file successfully installed, but I cannot ...
1
vote
1
answer
435
views
HP/3com 9552 802.11n AP won't let some clients connect
I splurged and bought an HP/3com 9552 802.11a/b/g/n access point. Like most enterprise-grade access points, it has very fine-grained configuration options.
I'm pretty sure I've configured it ...
0
votes
0
answers
66
views
Capturing in monitor mode reports 0 packet for tshark
MacOS 13.4.1
I'm trying to capture 802.11 management packets with a real 802.11 headers (not just Ethernet header) with tshark. So trying to use
% sudo tshark -i wifi0 -I -L
Data link ...
0
votes
1
answer
508
views
Can a Linux box be configured with IEEE 802.1x while grabbing the info from a Windows box?
A managed Windows device can join the wired network of my corporate company, while a personal Linux one can't.
As far as I understand, this is possible thanks to IEEE 802.1x standard.
Looking at the ...
0
votes
1
answer
14k
views
Vlan manager does not automatically disable macs
I want to implement a client infrastructure where the devices connect to the network in different vlan.
I installed a freeradius server connected to our Active Directory. I have enabled the switches ...
0
votes
0
answers
542
views
Can NPS, RADIUS, and 802.1x Assign Multiple VLANs To A Single User?
I will be using Network Policy Server (NPS) with a RADIUS server to assign each user to a VLAN when they successfully authenticate to the network using 802.1x. In Active Directory Directory Services (...
0
votes
1
answer
69
views
Will an IIS SelfSSL certificate still be valid when the signing server is replaced?
Will my 10 year valid self-signed certificate, that is using a common name not resembling any hostname, still be valid/trusted by others in the AD, after the signing server is replaced in maybe a few ...
0
votes
1
answer
2k
views
freeradius gives "no shared cipher" for windows 10 client
I have a working configuration of 802.1X authentification on my switch. The radius server is a freeradius instance with EAP-TLS configured. Everything works fine on linux (and android devices), but ...
0
votes
0
answers
381
views
RADIUS Server for unauthorized device control using 802.1x
I have a closed network for security cameras. I want only for authorized cameras to be able to connect to the Network Switch. If the Switch supports 802.1x authentication, and so do the cameras, could ...
0
votes
1
answer
80
views
Yosemite 10.10.5 Clock drifts while asleep
We have a cart of Macbook Pros with Yosemite 10.10.5 installed on them. Our school network uses 802.1x for authentication to the WiFi, but when these laptops are put in their carts and left to sit ...
0
votes
0
answers
121
views
Protocol used between a RADIUS client and a computer?
I can't find documentation about the protocol used when a computer wants to reach a network with 802.1x.
RADIUS client (switch, access point) use UDP/1812-1813 to communicate with RADIUS server.
How ...
0
votes
1
answer
547
views
Issues with IAS authentication
after changing domain (child.domain.net --> domain.net), our Windows 7 clients are no longer able to authenticate to the IAS server (802.1x switch port won't allow them onto the network). Clients, IAS ...
0
votes
0
answers
779
views
Is there any way by which I can capture the wifi probe requests without using monitor mode?
For some reason, keeping the wifi interface in monitor mode on my machine is crashing it(its a raspberry pi, I'm assuming its crashing because of the amount of traffic being intercepted, but lets not ...
0
votes
2
answers
2k
views
Setting variable depending on NAS-IP-Address in Freeradius
The setup
We currently have a Freeradius server used to authenticate our Wifi users against our Active Directory server. The link between Freeradius and the Active Directory is done by Winbind.
In ...
-1
votes
1
answer
362
views
"Dynamic" access point and port authentication
Here is the context of the question:
I have multiple switches with port-authentication (MAC based or 802.1X). Each switch are connected with a trunk port statically configured. One vlan for ...