IEEE Standard for port-based Network Access Control

learn more… | top users | synonyms

-1
votes
1answer
23 views

“Dynamic” access point and port authentication

Here is the context of the question: I have multiple switches with port-authentication (MAC based or 802.1X). Each switch are connected with a trunk port statically configured. One vlan for ...
0
votes
0answers
35 views

How to handle 802.1x authentication system with incompatible clients devices?

I would like to split my wired network into multiple VLANs. In order to do that, I think I will use dot1x authentication on my Cisco Switchs (2960S and 2960G) RADIUS will be handle through NPS on my ...
1
vote
1answer
12 views

802.1X port-based wired NAP Enforcement

I'm learning about NAP enforcement in Windows Server 2008 R2. I am unable to grasp how to enforce NAP based on port. I understand that 802.1x wired NAP Enforcement uses switches to decide whether ...
1
vote
0answers
43 views

Cisco SG300 switch does not send RADIUS messages to server for 802.1x

I want to eventually configure the SG300 to authenticate wired clients with 802.1x and Microsoft NPS (RADIUS). I am currently testing this setup using a single port (Port 7) on my SG300, a test ...
0
votes
1answer
203 views

Configure FreeRADIUS with Active Driectory allow specific group of users to authenticate

In order to authenticate WiFi clients I use a FreeRADIUS server configured to check for user credentials in an Active Directory environment. Currently all users with a valid account are authenticated ...
2
votes
1answer
40 views

howto restrict active directory account for PEAP/non-CIFS only

We have some voip phones that we want to integrate into our PEAP WiFi network, and I'm concerned about just creating a standard AD account and using that. If someone got hold of such long-term account ...
0
votes
1answer
126 views

Configuring a RADIUS server for 802.1x over a Cisco Switch

I am trying to set up RADIUS authentication over a Cisco switch and I have gone through every tutorial they have. I am able to get the RADIUS server to authenticate when I access the CLI of the Cisco ...
1
vote
0answers
96 views

Debian WPA2-Enterprise (Network-manager) 802.1X no prompt for certificat?

I set up an access point (AP) with PEAP (Freeradius) 802.1X authentication and trying to connect the following: IOS: Automatically provides the certificate to the onscreen user. WINDOWS: ...
0
votes
1answer
54 views

Can RADIUS offer protection against spoofed MAC addresses accessing resources protected with MAC Authentication

When running RADIUS via WPA2 Enterprise and 802.1x, clients wishing to access the network must provide valid credentials. However, this does not stop malicious clients forging valid clients MAC ...
-1
votes
1answer
58 views

what 802.1x key_mgmt/eap does wired network normally uses? [closed]

I'm really new to 802.1x but I'm trying to use 802.1x authentication in a wired network. My desktop is Linux (centos) using wpa_supplicant as the supplicant. I'm wondering what key_mgmt/eap is ...
1
vote
1answer
167 views

tutorial on using wpa_supplicant on centos to configure 802.1x for wired network

I have been trying hard to configure 802.1x on centos 6.4 for authentication on a wired network (not wireless), but with no luck so far. Is there any good tutorial on this? I want to configure using ...
0
votes
0answers
86 views

Setting variable depending on NAS-IP-Address in Freeradius

The setup We currently have a Freeradius server used to authenticate our Wifi users against our Active Directory server. The link between Freeradius and the Active Directory is done by Winbind. In ...
0
votes
1answer
320 views

“Certificate not trusted error” for eap-tls

I'm setting up freeradius as the authentication server for 802.1x. While testing the config using rad_eap_test, the server returns the following error: [tls] <<< TLS 1.0 Handshake [length ...
1
vote
1answer
605 views

Certificate 'not verified' when doing 802.x1 authentication on Apple ios

I've setup a new wifi network including a Freeradius server. Everything works fine except that Apple iOS gives a 'certificate not verified' warning when connecting. When the user accept the ...
0
votes
0answers
35 views

802.1x - Issue with command: authentication open

The issue we are running into is that when we initially deployed 802.1x we had the command “authentication open” on all of our switch ports. We ran a CscoWorks job last week Thursday to remove that ...
3
votes
0answers
277 views

Multiple Valid Certificates in Windows 7 breaking Wired 802.1x Deployment

I have a Wired 802.1x deployment using TLS machine authentication on Windows 7 (built-in 802.1x supplicant) with the necessary certs (FreeRadius v2.2.3 generated on Linux). Cisco C2960 POE switch is ...
1
vote
2answers
793 views

How to limit user's access to a specific NAS?

I'm new to RADIUS and I have just set up a very basic FreeRADIUS server for 802.1x (WPA). I use EAP, MySQL as backend with daloRADIUS as webGUI (for user management, mainly). I got two WiFi networks, ...
6
votes
3answers
160 views

Cisco Dot1x Port Authentication - VLAN selected based on what domain the user logs on to on computer?

Currently my company has been bought out by another. Due to this, another two companies users will be migrating into our office. It would be super handy if we could have the vlan chosen for the user ...
0
votes
3answers
136 views

How to prevent users from connecting directly to the switch, where the Access point is connected?

I'm about to setup a large wireless network, at a dorm. The hardware I'm using is going to be: HP Procurve E2520-24G-PoE (J9299A) Cisco Aironet 2602i Autonomous Access Point Since the outlets at ...
0
votes
0answers
1k views

MAB and 802.1x Issue - MAB-authenticated device gets dropped

I'm trying to use 802.1x to authenticate clients on my network with dynamic VLAN assignment from RADIUS. We have IP-Phones(powered by PoE) that only supports EAP-MD5, and we would rather use MAB(it ...
0
votes
0answers
775 views

Windows 7 802.1x wired authentication to domain with single sign on

I'm doing some research here regarding possible implementations of 802.1x wired authentication with single sign on - domain username/password is used for 802.1x authentication. Initially user is ...
6
votes
1answer
159 views

Network Policy Server Granular Time Restrictions

I am configuring NPS as a RADIUS authentication source for my wireless clients. I am trying to differentiate between school hours and after hours as I need to connect certain users to a different ...
3
votes
1answer
609 views

Registation or Guest VLAN for 802.1x via Microsoft NPS

I am currently working on a Microsoft NPS solution to provide 802.1x MAC authentication for wired and wireless clients along with providing a VLAN for the clients to be moved to. It currently works ...
0
votes
0answers
54 views

Network Role based routing

Apologies my networking skills are a tad rusty. I'm looking for a way to setup a system that gives me the ability to setup Role-based access to specific network resources. For example, i have three ...
1
vote
0answers
1k views

Single Sign On 802.1x Wireless - saying “Connecting to <SSID>”, hangs for 10 seconds, fails with “Unable to connect to <SSID>, Logging on…”.

We are implementing WiFi on Windows 7 machines in our corporate environment. Machines should be able to log into the domain by WiFi as the Machine (Pre-Logon), and as the User (Post-Logon). We have ...
1
vote
1answer
194 views

Enterprise Wireless Authentication without Active Directory

We are in the process of redoing our wireless access network and would like to know if there is any method to get Windows clients/users access to the network using 802.1x WITHOUT having an Active ...
4
votes
2answers
8k views

802.1x automatically validate certificate in windows clients

We're deploying a wireless networking using Windows Server 2008 NAC as a RADIUS server. When Windows XP or 7 clients connect they initally fail to connect. In order to enable the client to connect we ...
0
votes
1answer
90 views

Which EAP (if any) is default in an Access Point out of the box?

I am reading about the WPA2 protocol. The authentication step uses 802.1X protocol which in turn uses the EAP framework; in which a so called 'EAP method' does the authentication (diagram from book). ...
1
vote
1answer
121 views

802.1x, what is meant by “port-based”?

I'm reading about 802.1X, mainly on Wikipedia, but can't quite get it. So here is a very basic question: What is meant, when they say that 802.1X is "port-based"?
2
votes
0answers
262 views

Macs to work on 802.1X wired network

We are in the process on 802.1X for all our wired clients. We are using NPS on Server 2008R2 as our Radius server. All our windows clients authenticate using just a computer certificate issued by our ...
3
votes
1answer
2k views

Portable, battery-powered, wireless access point, ethernet adapter [closed]

I am in need of an adapter that will convert an ethernet port into a wireless access point. I have found a handful of devices, but I'm unable to find a device that is battery powered. Does a ...
0
votes
3answers
441 views

How to prevent MAC spoofing

I have configured a DHCP server on Ubuntu and a fixed IP address for a specific mac, like this: host client1 { hardware ethernet E0:69:95:73:2C:66; fixed-address 192.168.0.10; } If anyone ...
3
votes
4answers
2k views

802.1x PEAP GPO that trusts self-signed CA certificate

I am working on a Freeradius backed 802.1.x authentication infrastructure for our wireless clients. I am using a rather generic Freeradius configuration with EAP-PEAP. Our clients are predominantly ...
2
votes
1answer
659 views

Wireless Profile via Group Policy - Specific Trusted Root not Listed?

So I am trying to use Group Policy to configure the wireless settings on a bunch of laptops. We are using a third party cert that isn't showing up as an option in the list of Trusted Root ...
1
vote
2answers
1k views

Windows XP will not connect to Enterprise Wireless

We run a Radius server (Windows Server 2008 R2 running NPS). My goal is to push out GPOs to wireless users with the network information. I am successfully doing this with Windows 7 clients, iOS ...
7
votes
1answer
1k views

802.1x computer authentication using hostname instead of cert

My configuration includes: Cisco ACS as RADIUS server, MS AD, MS PKI, Cisco 2960G switches. Workstations are 95% XP Pro SP3 fully patched, some 7 pro fully patched. Computer cert autoenrollment ...
1
vote
2answers
609 views

Can I use wireless 802.1x authentication on windows for client machines that are not in the domain?

First off, I am not a sysadmin, so feel free to correct any mistakes in my question. We have a Windows Server 2008 R2 domain with 802.1X authenticated wireless access for laptops with Windows 7 ...
0
votes
1answer
402 views

Wireless setup for my Aironet 1260 [closed]

I have a new Aironet 1260. I've read that I shouldn't setup WEP for wireless. Any recommendations on how this should be configured? Should I setup 802.1X? I assume I need to setup a radius server. ...
2
votes
0answers
478 views

Windows 7 / Windows Vista won't connect to 802.1x RADIUS Server

I've deployed Radius and have no problems connecting with TTLS, PEAP, or MD5 using linux, mac, and windows xp. For Windows 7 and Vista, I'm never prompted with the dialog box to enter username & ...
3
votes
2answers
792 views

802.1X needs single port per device?

We are planning to implement 802.1X. What is not clear is whether a switch supporting 802.1X can successfully and correctly authenticate multiple devices connected to the same switch port (e.g. if we ...
2
votes
0answers
1k views

Testing radius server from Mac OS X client

I have a radius server set up on a server running Ubuntu 11.04. I have configured my switch to use the authentication server's IP (192.168.1.2) for RADIUS / 802.1x authentication, and I created a ...
0
votes
1answer
270 views

RADIUS work flow

I am attempting to create an authentication system for my network via Radius. Eventually, I want all machines on the network to authenticate with Radius before gaining access to any other network ...
2
votes
2answers
84 views

Logging per-user Internet access

Let me preface this by saying that I have a bit of a strange network. LAN 1 router: 10.0.0.254/24, Internet via DSL on 10.0.0.254. LAN 2 router: 172.16.2.254/24, default gateway: 10.0.0.254 (LAN 2 is ...
1
vote
0answers
207 views

Radius “Splash” Page?

I'm using 802.1x authentication via RADIUS on Windows Server 2008 R2 for my college's wifi network (for faculty and staff only to start). The problem is, students keep trying to log in and are ...
1
vote
1answer
273 views

Network Access Control with Linux

Are there any project to include NAC support in to Linux?. My main aim is to accept-deny access to other network on a Linux Firewall afte awking for operating system NAC agents for client's health. ...
6
votes
2answers
3k views

PXE in an 802.1X environment

My organization is about to implement 802.1X on our enterprise, but we currently use PXE-based OS deployment sequences in SCCM. I'm looking for a way to continue using PXE in an 802.1X environment. ...
1
vote
2answers
440 views

Can a device (WAP or switch) be configured as an 802.1x supplicant?

We are looking at implementing 802.1x on a wired/wireless network. What I am looking for is a device that can act as a supplicant and once authenticated on the network, is able to pass traffic from ...
3
votes
2answers
333 views

802.1x or mac port security on SAN switches

I'm going through DISA security hardening on our network devices. Our iSCSI SAN network uses 2 Cisco 2960G layer 2 switches. The SAN consists of 2 HP P4000 devices. Servers are 3 Dell R710s in a ...
1
vote
0answers
234 views

How to Implementing wired 802.1x in Win2k3 R2 and Windows XP SP3 Client

I just add this .ldf filesMicrosoft AD Extenstions that MS suggest for extending Windows Server 2003 GP to support 802.1x security policy over Wired. both file successfully installed, but I cannot ...
2
votes
2answers
420 views

802.1x authentication on LAN

i want to configure a linux as gateway (dhcp and nat) and i would like to add 802.1x as authentication protocol. My question is, i remember in the past, that it has a strong connection with the port ...