Questions tagged [802.1x]
The 802.1x tag has no usage guidance.
13
questions
2
votes
1
answer
12k
views
Still suffering from Windows NPS May 2022 Certficate Update
in May 2022 Microsoft changed the way that client certificates are mapped to AD accounts, causing 802.1X EAP-TLS computer account authentication to stop working.
Here is an additional resource with ...
CommunityBot
- 1
0
votes
0
answers
158
views
On Ubuntu, with nmcli, how to properly enter a valid password for wifi connection with 802-1x, without plaintext password saving
In my company, a Wi-Fi access point with 802-1.x authentication has been setup.
I can successfully connect to the access point with the nmcli command line like this
nmcli device wifi connect "...
- 1
1
vote
1
answer
586
views
Ubuntu 22.04 LTS: EAP-TLS not working
I'm setting up RADIUS server using FreeRADIUS and self-signed certificate. Tested using eapol_test and successfully logged in. But when I'm trying to add a PC running Ubuntu 22.04 LTS to the network, ...
- 163
0
votes
0
answers
45
views
Should VLANs and AD match organizational chart for implementing 802.1x with Dynamic VLAN?
I am experiencing an issue while trying to understand the best way to implement 802.1x (EAP Chaining with AD as the identity service) in a corporate environment. The following questions have arisen ...
0
votes
0
answers
40
views
Forcing freeradius to use 802.1x-2010
I am trying to troubleshoot a remote problem, where a piece of hardware is unable to connect using enterprise WPA. From the remote logs, it seems that the network is using 802.1X-2010, while the ...
- 1
1
vote
0
answers
383
views
Virtual machines not working with 802.1X - Linux Bridge
I am experimenting 802.1X in my home lab. I have most stuff working but one problem I have is with virtual machines not being able to authentication onto the network using 802.1X. There is very little ...
- 61
1
vote
0
answers
498
views
How to configure MACSEC Key Agreement (MKA) with hostapd & wpasupplicant?
I'm trying to setup MKA between some clients (using wpa_supplicant) and an authenticator (using hostapd).
Additionally I have a RADIUS server(using FreeRADIUS) that is going to be handling the ...
- 488
1
vote
0
answers
461
views
Any way to do virtual 802.1x inside Linux?
I'm trying to test out 802.1x in a virtual environment but I haven't been able to find any good resources/guides on how to do that.
The scenario is something like this:
I have a Linux host machine (...
- 488
1
vote
0
answers
2k
views
802.1x NPS Machine authentication
We are trying to implement 802.1x to authenticate wirelless users (Aruba Controller) through RADIUS (Windows server 2019 NPS),
For mobile phones and guests devices, we have successfully configured the ...
- 1
0
votes
1
answer
2k
views
802.1x Wireless with certificates for AADJ/Intune devices without user affinity
I can setup certificate distribution and wireless profiles in Intune for devices with user affinity and this works fine. The user account is synchronised with our on site AD server and NPS has an ...
- 101
0
votes
1
answer
766
views
Simple way to secure a wired link with 802.1x in "peer to peer" mode without server
I have an Ethernet link between two Linux hosts with a static IP config using systemd-networkd on the both sides without router, DHCP server, etc.
Is there a simple way to add a basic 802.1x security ...
- 11.7k
0
votes
0
answers
570
views
Wireless EAP / Freeradius, is there a way to check Mac Address in LDAP?
So we have EAP-PEAP over MSCHAP working. What I'd like to do is have a MAC Address check, for the purpose of making sure people aren't putting their credentials into random devices. I know SCEP would ...
2
votes
0
answers
201
views
Secure Diskless System - NFS as root
I've created a diskless Debian installation with root filesystem over NFS, and boot loader on a USB (this computer has issues booting from PXE for some reason). My setup is similar to the one ...
- 248k