IEEE Standard for port-based Network Access Control

learn more… | top users | synonyms

0
votes
1answer
20 views

“Certificate not trusted error” for eap-tls

I'm setting up freeradius as the authentication server for 802.1x. While testing the config using rad_eap_test, the server returns the following error: [tls] <<< TLS 1.0 Handshake [length ...
1
vote
1answer
40 views

Certificate 'not verified' when doing 802.x1 authentication on Apple ios

I've setup a new wifi network including a Freeradius server. Everything works fine except that Apple iOS gives a 'certificate not verified' warning when connecting. When the user accept the ...
0
votes
0answers
24 views

802.1x - Issue with command: authentication open

The issue we are running into is that when we initially deployed 802.1x we had the command “authentication open” on all of our switch ports. We ran a CscoWorks job last week Thursday to remove that ...
3
votes
0answers
130 views

Multiple Valid Certificates in Windows 7 breaking Wired 802.1x Deployment

I have a Wired 802.1x deployment using TLS machine authentication on Windows 7 (built-in 802.1x supplicant) with the necessary certs (FreeRadius v2.2.3 generated on Linux). Cisco C2960 POE switch is ...
0
votes
0answers
113 views

hostapd dynamically show/hide ssid

Im trying to have simple connection saturation algorithm for a bunch of nodes running hostapd. On having max_num_sta connection, I want hostapd to move into hidden ssid mode (ignore_broadcast_ssid = ...
0
votes
2answers
325 views

How to limit user's access to a specific NAS?

I'm new to RADIUS and I have just set up a very basic FreeRADIUS server for 802.1x (WPA). I use EAP, MySQL as backend with daloRADIUS as webGUI (for user management, mainly). I got two WiFi networks, ...
6
votes
1answer
98 views

Cisco Dot1x Port Authentication - VLAN selected based on what domain the user logs on to on computer?

Currently my company has been bought out by another. Due to this, another two companies users will be migrating into our office. It would be super handy if we could have the vlan chosen for the user ...
0
votes
3answers
92 views

How to prevent users from connecting directly to the switch, where the Access point is connected?

I'm about to setup a large wireless network, at a dorm. The hardware I'm using is going to be: HP Procurve E2520-24G-PoE (J9299A) Cisco Aironet 2602i Autonomous Access Point Since the outlets at ...
0
votes
0answers
599 views

MAB and 802.1x Issue - MAB-authenticated device gets dropped

I'm trying to use 802.1x to authenticate clients on my network with dynamic VLAN assignment from RADIUS. We have IP-Phones(powered by PoE) that only supports EAP-MD5, and we would rather use MAB(it ...
0
votes
0answers
714 views

How to do a COMPUTER (not user name) 802.1x (RADIUS) authentication with wpa_supplicant in Ubuntu 12.04?

In my corporation, NPS policy does not use AD username/password authentication, for it's too much less secure. For some laptops and PCs, Ubuntu 12.04 x86 desktop edition is deployed. I found that ...
0
votes
0answers
425 views

Windows 7 802.1x wired authentication to domain with single sign on

I'm doing some research here regarding possible implementations of 802.1x wired authentication with single sign on - domain username/password is used for 802.1x authentication. Initially user is ...
6
votes
1answer
108 views

Network Policy Server Granular Time Restrictions

I am configuring NPS as a RADIUS authentication source for my wireless clients. I am trying to differentiate between school hours and after hours as I need to connect certain users to a different ...
3
votes
1answer
458 views

Registation or Guest VLAN for 802.1x via Microsoft NPS

I am currently working on a Microsoft NPS solution to provide 802.1x MAC authentication for wired and wireless clients along with providing a VLAN for the clients to be moved to. It currently works ...
0
votes
0answers
52 views

Network Role based routing

Apologies my networking skills are a tad rusty. I'm looking for a way to setup a system that gives me the ability to setup Role-based access to specific network resources. For example, i have three ...
1
vote
0answers
760 views

Single Sign On 802.1x Wireless - saying “Connecting to <SSID>”, hangs for 10 seconds, fails with “Unable to connect to <SSID>, Logging on…”.

We are implementing WiFi on Windows 7 machines in our corporate environment. Machines should be able to log into the domain by WiFi as the Machine (Pre-Logon), and as the User (Post-Logon). We have ...
1
vote
1answer
169 views

Enterprise Wireless Authentication without Active Directory

We are in the process of redoing our wireless access network and would like to know if there is any method to get Windows clients/users access to the network using 802.1x WITHOUT having an Active ...
4
votes
2answers
6k views

802.1x automatically validate certificate in windows clients

We're deploying a wireless networking using Windows Server 2008 NAC as a RADIUS server. When Windows XP or 7 clients connect they initally fail to connect. In order to enable the client to connect we ...
0
votes
0answers
212 views

radius server for 802.1x wireless (Certificate timeout)

We have a radius server for 802.1x wireless setup. A little while ago all of our wireless routers stopped authenticating, we have solved this by re setting them up and setting a new password. Does ...
0
votes
1answer
79 views

Which EAP (if any) is default in an Access Point out of the box?

I am reading about the WPA2 protocol. The authentication step uses 802.1X protocol which in turn uses the EAP framework; in which a so called 'EAP method' does the authentication (diagram from book). ...
1
vote
1answer
112 views

802.1x, what is meant by “port-based”?

I'm reading about 802.1X, mainly on Wikipedia, but can't quite get it. So here is a very basic question: What is meant, when they say that 802.1X is "port-based"?
2
votes
0answers
235 views

Macs to work on 802.1X wired network

We are in the process on 802.1X for all our wired clients. We are using NPS on Server 2008R2 as our Radius server. All our windows clients authenticate using just a computer certificate issued by our ...
3
votes
1answer
2k views

Portable, battery-powered, wireless access point, ethernet adapter

I am in need of an adapter that will convert an ethernet port into a wireless access point. I have found a handful of devices, but I'm unable to find a device that is battery powered. Does a ...
0
votes
3answers
384 views

How to prevent MAC spoofing

I have configured a DHCP server on Ubuntu and a fixed IP address for a specific mac, like this: host client1 { hardware ethernet E0:69:95:73:2C:66; fixed-address 192.168.0.10; } If anyone ...
3
votes
3answers
2k views

802.1x PEAP GPO that trusts self-signed CA certificate

I am working on a Freeradius backed 802.1.x authentication infrastructure for our wireless clients. I am using a rather generic Freeradius configuration with EAP-PEAP. Our clients are predominantly ...
2
votes
1answer
523 views

Wireless Profile via Group Policy - Specific Trusted Root not Listed?

So I am trying to use Group Policy to configure the wireless settings on a bunch of laptops. We are using a third party cert that isn't showing up as an option in the list of Trusted Root ...
1
vote
2answers
1k views

Windows XP will not connect to Enterprise Wireless

We run a Radius server (Windows Server 2008 R2 running NPS). My goal is to push out GPOs to wireless users with the network information. I am successfully doing this with Windows 7 clients, iOS ...
7
votes
1answer
1k views

802.1x computer authentication using hostname instead of cert

My configuration includes: Cisco ACS as RADIUS server, MS AD, MS PKI, Cisco 2960G switches. Workstations are 95% XP Pro SP3 fully patched, some 7 pro fully patched. Computer cert autoenrollment ...
1
vote
2answers
505 views

Can I use wireless 802.1x authentication on windows for client machines that are not in the domain?

First off, I am not a sysadmin, so feel free to correct any mistakes in my question. We have a Windows Server 2008 R2 domain with 802.1X authenticated wireless access for laptops with Windows 7 ...
0
votes
1answer
377 views

Wireless setup for my Aironet 1260 [closed]

I have a new Aironet 1260. I've read that I shouldn't setup WEP for wireless. Any recommendations on how this should be configured? Should I setup 802.1X? I assume I need to setup a radius server. ...
2
votes
0answers
421 views

Windows 7 / Windows Vista won't connect to 802.1x RADIUS Server

I've deployed Radius and have no problems connecting with TTLS, PEAP, or MD5 using linux, mac, and windows xp. For Windows 7 and Vista, I'm never prompted with the dialog box to enter username & ...
3
votes
2answers
649 views

802.1X needs single port per device?

We are planning to implement 802.1X. What is not clear is whether a switch supporting 802.1X can successfully and correctly authenticate multiple devices connected to the same switch port (e.g. if we ...
2
votes
0answers
987 views

Testing radius server from Mac OS X client

I have a radius server set up on a server running Ubuntu 11.04. I have configured my switch to use the authentication server's IP (192.168.1.2) for RADIUS / 802.1x authentication, and I created a ...
0
votes
1answer
240 views

RADIUS work flow

I am attempting to create an authentication system for my network via Radius. Eventually, I want all machines on the network to authenticate with Radius before gaining access to any other network ...
2
votes
2answers
82 views

Logging per-user Internet access

Let me preface this by saying that I have a bit of a strange network. LAN 1 router: 10.0.0.254/24, Internet via DSL on 10.0.0.254. LAN 2 router: 172.16.2.254/24, default gateway: 10.0.0.254 (LAN 2 is ...
1
vote
0answers
193 views

Radius “Splash” Page?

I'm using 802.1x authentication via RADIUS on Windows Server 2008 R2 for my college's wifi network (for faculty and staff only to start). The problem is, students keep trying to log in and are ...
1
vote
1answer
219 views

Network Access Control with Linux

Are there any project to include NAC support in to Linux?. My main aim is to accept-deny access to other network on a Linux Firewall afte awking for operating system NAC agents for client's health. ...
6
votes
2answers
2k views

PXE in an 802.1X environment

My organization is about to implement 802.1X on our enterprise, but we currently use PXE-based OS deployment sequences in SCCM. I'm looking for a way to continue using PXE in an 802.1X environment. ...
1
vote
2answers
353 views

Can a device (WAP or switch) be configured as an 802.1x supplicant?

We are looking at implementing 802.1x on a wired/wireless network. What I am looking for is a device that can act as a supplicant and once authenticated on the network, is able to pass traffic from ...
3
votes
2answers
310 views

802.1x or mac port security on SAN switches

I'm going through DISA security hardening on our network devices. Our iSCSI SAN network uses 2 Cisco 2960G layer 2 switches. The SAN consists of 2 HP P4000 devices. Servers are 3 Dell R710s in a ...
1
vote
0answers
228 views

How to Implementing wired 802.1x in Win2k3 R2 and Windows XP SP3 Client

I just add this .ldf filesMicrosoft AD Extenstions that MS suggest for extending Windows Server 2003 GP to support 802.1x security policy over Wired. both file successfully installed, but I cannot ...
2
votes
2answers
377 views

802.1x authentication on LAN

i want to configure a linux as gateway (dhcp and nat) and i would like to add 802.1x as authentication protocol. My question is, i remember in the past, that it has a strong connection with the port ...
2
votes
1answer
8k views

How to integrate Windows Server 2008 R2's NPS with Cisco switches?

I need to evaluate in a lab environment the use of Windows Server 2008 R2's NPS for 802.1x authentication with Cisco Catalyst 3750 switches; the general idea is to only let clients connect to the ...
1
vote
1answer
534 views

How to redirect http trafic from different VLANs?

Is there a way to match VLAN ids and redirect such http traffic to webserver (?? iptables)? And when at webserver, rewrite URL according to VLAN id? I would need such thing because our network ...
1
vote
0answers
812 views

802.1x authentication against an Active Directory with a trusted Kerberos realm

I am attempting to use Windows Server 2008 NPS to provide 802.1x authentication against our Cisco switches. The set-up works fine for local domain users, I am now attempting to integrate it with an ...
1
vote
2answers
179 views

Is browser based wireless authentication secure?

Our wireless network previously used a preshared WPA/WPA2 key for guest access, which allows them access to the Internet. (Our employee access uses 802.1x authentication). We just had a wireless ...
1
vote
1answer
770 views

Switches with 802.1x “supplicant timeout” feature?

I'm looking for a complete list of switches which will allow 802.1x and normal (non-supplicant) enabled hosts to connect to the same ports on a switch. This is useful for areas where there are ...
1
vote
1answer
100 views

Vista Enterprise doesn't find logon servers in a network with 802.1x authentication

In a network with 802.1x configuration and a samba server configured in the domain, I have a radius server that delegates the authentication against the samba domain for users (using LDAP). The radius ...
1
vote
2answers
833 views

8021x wireless clients auto connect prior to user login

I am using a 2008 r2 dc that also performs Radius (NPS), I also have a 2008 r2 certificate authority which is giving out certificates. The computers are getting the certificate and when a user logs ...
1
vote
2answers
2k views

802.1X EAP authentication in Cisco switches with certificate

I am currently planning to implement 802.1X authentication for all the wired computers at the office where I work at currently. We have successfully implemented 802.1X authentication with ...
0
votes
1answer
593 views

802.1x authentication over wireless not wired

We have a wireless network that authenticates via 802.1x free-radius server. We have told the wireless network to authenticate accordingly and it works. However when we have a wired network we have ...