IEEE Standard for port-based Network Access Control
0
votes
0answers
80 views
MAB and 802.1x Issue - MAB-authenticated device gets dropped
I'm trying to use 802.1x to authenticate clients on my network with dynamic VLAN assignment from RADIUS. We have IP-Phones(powered by PoE) that only supports EAP-MD5, and we would rather use MAB(it ...
0
votes
0answers
283 views
How to do a COMPUTER (not user name) 802.1x (RADIUS) authentication with wpa_supplicant in Ubuntu 12.04?
In my corporation, NPS policy does not use AD username/password authentication, for it's too much less secure.
For some laptops and PCs, Ubuntu 12.04 x86 desktop edition is deployed. I found that ...
0
votes
0answers
228 views
Windows 7 802.1x wired authentication to domain with single sign on
I'm doing some research here regarding possible implementations of 802.1x wired authentication with single sign on - domain username/password is used for 802.1x authentication.
Initially user is ...
0
votes
0answers
173 views
Windows NAP / Cisco: Dynamic VLAN switching not working
I'm having hard times configuring wired 802.1x test lab. Everything went ok on the server side, but I'm getting some weird results when it comes to vlan switching: every time a client authenticates it ...
4
votes
0answers
52 views
Network Policy Server Granular Time Restrictions
I am configuring NPS as a RADIUS authentication source for my wireless clients.
I am trying to differentiate between school hours and after hours as I need to connect certain users to a different ...
3
votes
1answer
231 views
Registation or Guest VLAN for 802.1x via Microsoft NPS
I am currently working on a Microsoft NPS solution to provide 802.1x MAC authentication for wired and wireless clients along with providing a VLAN for the clients to be moved to.
It currently works ...
0
votes
0answers
45 views
Network Role based routing
Apologies my networking skills are a tad rusty. I'm looking for a way to setup a system that gives me the ability to setup Role-based access to specific network resources. For example, i have three ...
1
vote
0answers
432 views
Single Sign On 802.1x Wireless - saying “Connecting to <SSID>”, hangs for 10 seconds, fails with “Unable to connect to <SSID>, Logging on…”.
We are implementing WiFi on Windows 7 machines in our corporate environment. Machines should be able to log into the domain by WiFi as the Machine (Pre-Logon), and as the User (Post-Logon). We have ...
1
vote
1answer
145 views
Enterprise Wireless Authentication without Active Directory
We are in the process of redoing our wireless access network and would like to know if there is any method to get Windows clients/users access to the network using 802.1x WITHOUT having an Active ...
4
votes
1answer
3k views
802.1x automatically validate certificate in windows clients
We're deploying a wireless networking using Windows Server 2008 NAC as a RADIUS server. When Windows XP or 7 clients connect they initally fail to connect.
In order to enable the client to connect we ...
0
votes
0answers
194 views
radius server for 802.1x wireless (Certificate timeout)
We have a radius server for 802.1x wireless setup. A little while ago all of our wireless routers stopped authenticating, we have solved this by re setting them up and setting a new password.
Does ...
0
votes
1answer
69 views
Which EAP (if any) is default in an Access Point out of the box?
I am reading about the WPA2 protocol. The authentication step uses 802.1X protocol which in turn uses the EAP framework; in which a so called 'EAP method' does the authentication (diagram from book).
...
1
vote
1answer
100 views
802.1x, what is meant by “port-based”?
I'm reading about 802.1X, mainly on Wikipedia, but can't quite get it. So here is a very basic question:
What is meant, when they say that 802.1X is "port-based"?
2
votes
0answers
197 views
Macs to work on 802.1X wired network
We are in the process on 802.1X for all our wired clients. We are using NPS on Server 2008R2 as our Radius server. All our windows clients authenticate using just a computer certificate issued by our ...
3
votes
1answer
1k views
Portable, battery-powered, wireless access point, ethernet adapter
I am in need of an adapter that will convert an ethernet port into a wireless access point. I have found a handful of devices, but I'm unable to find a device that is battery powered.
Does a ...
0
votes
3answers
278 views
How to prevent MAC spoofing
I have configured a DHCP server on Ubuntu and a fixed IP address for a specific mac, like this:
host client1 {
hardware ethernet E0:69:95:73:2C:66;
fixed-address 192.168.0.10;
}
If anyone ...
3
votes
3answers
1k views
802.1x PEAP GPO that trusts self-signed CA certificate
I am working on a Freeradius backed 802.1.x authentication infrastructure for our wireless clients. I am using a rather generic Freeradius configuration with EAP-PEAP. Our clients are predominantly ...
2
votes
1answer
363 views
Wireless Profile via Group Policy - Specific Trusted Root not Listed?
So I am trying to use Group Policy to configure the wireless settings on a bunch of laptops. We are using a third party cert that isn't showing up as an option in the list of Trusted Root ...
1
vote
2answers
926 views
Windows XP will not connect to Enterprise Wireless
We run a Radius server (Windows Server 2008 R2 running NPS). My goal is to push out GPOs to wireless users with the network information. I am successfully doing this with Windows 7 clients, iOS ...
7
votes
1answer
765 views
802.1x computer authentication using hostname instead of cert
My configuration includes: Cisco ACS as RADIUS server, MS AD, MS PKI, Cisco 2960G switches. Workstations are 95% XP Pro SP3 fully patched, some 7 pro fully patched.
Computer cert autoenrollment ...
1
vote
2answers
417 views
Can I use wireless 802.1x authentication on windows for client machines that are not in the domain?
First off, I am not a sysadmin, so feel free to correct any mistakes in my question.
We have a Windows Server 2008 R2 domain with 802.1X authenticated wireless access for laptops with Windows 7 ...
0
votes
1answer
334 views
Wireless setup for my Aironet 1260 [closed]
I have a new Aironet 1260. I've read that I shouldn't setup WEP for wireless. Any recommendations on how this should be configured? Should I setup 802.1X? I assume I need to setup a radius server. ...
2
votes
0answers
317 views
Windows 7 / Windows Vista won't connect to 802.1x RADIUS Server
I've deployed Radius and have no problems connecting with TTLS, PEAP, or MD5 using linux, mac, and windows xp. For Windows 7 and Vista, I'm never prompted with the dialog box to enter username & ...
3
votes
2answers
440 views
802.1X needs single port per device?
We are planning to implement 802.1X. What is not clear is whether a switch supporting 802.1X can successfully and correctly authenticate multiple devices connected to the same switch port (e.g. if we ...
2
votes
0answers
670 views
Testing radius server from Mac OS X client
I have a radius server set up on a server running Ubuntu 11.04. I have configured my switch to use the authentication server's IP (192.168.1.2) for RADIUS / 802.1x authentication, and I created a ...
0
votes
1answer
200 views
RADIUS work flow
I am attempting to create an authentication system for my network via Radius. Eventually, I want all machines on the network to authenticate with Radius before gaining access to any other network ...
2
votes
2answers
78 views
Logging per-user Internet access
Let me preface this by saying that I have a bit of a strange network.
LAN 1 router: 10.0.0.254/24, Internet via DSL on 10.0.0.254.
LAN 2 router: 172.16.2.254/24, default gateway: 10.0.0.254 (LAN 2 is ...
1
vote
0answers
175 views
Radius “Splash” Page?
I'm using 802.1x authentication via RADIUS on Windows Server 2008 R2 for my college's wifi network (for faculty and staff only to start).
The problem is, students keep trying to log in and are ...
1
vote
1answer
145 views
Network Access Control with Linux
Are there any project to include NAC support in to Linux?. My main aim is to accept-deny access to other network on a Linux Firewall afte awking for operating system NAC agents for client's health. ...
6
votes
2answers
1k views
PXE in an 802.1X environment
My organization is about to implement 802.1X on our enterprise, but we currently use PXE-based OS deployment sequences in SCCM. I'm looking for a way to continue using PXE in an 802.1X environment. ...
1
vote
2answers
287 views
Can a device (WAP or switch) be configured as an 802.1x supplicant?
We are looking at implementing 802.1x on a wired/wireless network. What I am looking for is a device that can act as a supplicant and once authenticated on the network, is able to pass traffic from ...
3
votes
2answers
279 views
802.1x or mac port security on SAN switches
I'm going through DISA security hardening on our network devices. Our iSCSI SAN network uses 2 Cisco 2960G layer 2 switches. The SAN consists of 2 HP P4000 devices. Servers are 3 Dell R710s in a ...
1
vote
0answers
218 views
How to Implementing wired 802.1x in Win2k3 R2 and Windows XP SP3 Client
I just add this .ldf filesMicrosoft AD Extenstions that MS suggest for extending Windows Server 2003 GP to support 802.1x security policy over Wired. both file successfully installed, but I cannot ...
2
votes
2answers
333 views
802.1x authentication on LAN
i want to configure a linux as gateway (dhcp and nat) and i would like to add 802.1x as authentication protocol.
My question is, i remember in the past, that it has a strong connection with the port ...
2
votes
1answer
7k views
How to integrate Windows Server 2008 R2's NPS with Cisco switches?
I need to evaluate in a lab environment the use of Windows Server 2008 R2's NPS for 802.1x authentication with Cisco Catalyst 3750 switches; the general idea is to only let clients connect to the ...
1
vote
1answer
444 views
How to redirect http trafic from different VLANs?
Is there a way to match VLAN ids and redirect such http traffic to webserver (?? iptables)? And when at webserver, rewrite URL according to VLAN id?
I would need such thing because our network ...
1
vote
0answers
708 views
802.1x authentication against an Active Directory with a trusted Kerberos realm
I am attempting to use Windows Server 2008 NPS to provide 802.1x authentication against our Cisco switches. The set-up works fine for local domain users, I am now attempting to integrate it with an ...
1
vote
2answers
169 views
Is browser based wireless authentication secure?
Our wireless network previously used a preshared WPA/WPA2 key for guest access, which allows them access to the Internet. (Our employee access uses 802.1x authentication). We just had a wireless ...
1
vote
1answer
669 views
Switches with 802.1x “supplicant timeout” feature?
I'm looking for a complete list of switches which will allow 802.1x and normal (non-supplicant) enabled hosts to connect to the same ports on a switch. This is useful for areas where there are ...
1
vote
1answer
96 views
Vista Enterprise doesn't find logon servers in a network with 802.1x authentication
In a network with 802.1x configuration and a samba server configured in the domain, I have a radius server that delegates the authentication against the samba domain for users (using LDAP). The radius ...
1
vote
2answers
800 views
8021x wireless clients auto connect prior to user login
I am using a 2008 r2 dc that also performs Radius (NPS), I also have a 2008 r2 certificate authority which is giving out certificates.
The computers are getting the certificate and when a user logs ...
1
vote
2answers
2k views
802.1X EAP authentication in Cisco switches with certificate
I am currently planning to implement 802.1X authentication for all the wired computers at the office where I work at currently.
We have successfully implemented 802.1X authentication with ...
0
votes
1answer
569 views
802.1x authentication over wireless not wired
We have a wireless network that authenticates via 802.1x free-radius server. We have told the wireless network to authenticate accordingly and it works. However when we have a wired network we have ...
0
votes
1answer
210 views
Novell, Symantec, and 802.1x
We are running Novell 4.91 sp5 with Symantec Endpoint. We are authenticating via 802.1x and when Symantec is running we get an 802.1x Auth Fail. RPC error occurred. Failed to authenticate"
We ...
0
votes
2answers
1k views
Broken 802.1x Windows Server 2008 R2
I've setup a new Windows Server 2008 R2 installation with AD, Certificate Services, NPS, and RRAS. I have setup (using the wizard) the policies for 802.1x authentication using an Airport Extreme as ...
0
votes
2answers
2k views
Unable to specify alterntive credentials using 802.1x wireless connections on Windows 7
Using Windows 7 I am unable to connect to the wireless network using 802.1x settings. I have configured it exactly as in Vista using certificates and checking the use alternative credentials check box ...
