Questions tagged [aaa]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
93 views

Sending COA request to NAS behind NAT from Freeradius

My Mikrotik NAS is behind a NAT so it only has a private network IP address. So for authentication, I am using the public IP address which works fine. But when Freeradius (hosted) has to send the COA ...
sajeyks mwangi's user avatar
0 votes
0 answers
41 views

how to select the ISE proxy sequence based on an LDAP lookup?

I am currently setting up a VOIP network for my customer, which includes 802.1x and MAB authentication. The normal auth sequence goes like this: The switch detects a new machine with no 802.1x ...
Adalcar's user avatar
  • 101
0 votes
1 answer
83 views

Will a wifi range extender work after AAA configuration of the network?

In our campus LAN we are using WPA2 protocol and users have a common password. Presently there are several WAPs but we also need a few wifi range extenders (the range extender is TP Link TL- WA855RE) ...
S.Chandla's user avatar
0 votes
1 answer
822 views

What will happen if I enable LDAP authenticaion on pfsense and LDAP server will fail?

Currently I am using local database for authentication on my pfsense. I know that Cisco's IOS has backup authentication methods for the cases when primary one fails. You can even not to authenticate ...
Edik Mkoyan's user avatar
1 vote
1 answer
323 views

Unknown users logged into cisco router

Good day! I logged into a Cisco management router located in our company network and issue the show users command and it gave the following output. The 3rd line vty 4 is me. I am concerned of the 2 ...
ultrajohn's user avatar
  • 160
0 votes
1 answer
2k views

FreeRadius Scalability with multiple NAS worldwide

Our network setup consists of 5 network access servers in 5 different locations worldwide and it is expected to expand in the coming days to 15 network access servers and more in future. Currently we ...
muzammil's user avatar
0 votes
1 answer
2k views

NPS Server 2012 with ASA as Radius client not working, Server 2008 Working

for some time I have been using 2008 R2 as my Radius server and I have a Cisco ASA FW who is configured as Radius client and working ok. I have introduced another Windows 2012 DC, and also configured ...
ultimo_frogman's user avatar
1 vote
1 answer
2k views

TACACS+ configuration: how to receive priv-lvl value?

I need to configure TACACS+ server to know if the given user is authenticated* and what is his priv-lvl. As a client I'm using tactest (tacacs.net) and TACACS+ Client Java Library (AXL). I tried with ...
tomekceszke's user avatar
1 vote
2 answers
395 views

Radius clients with different authentication criteria

I can't seem to find a good tutorial on how to set my network policy for one of my radius clients. I'd like my radclientA with policyA to authenticate and radclientB with policyB to authenticate. ...
normarth's user avatar
  • 155
0 votes
1 answer
894 views

Does "aaa accounting commands" not support radius?

When I issue this command: aaa accounting commands 15 default start-stop group myradiusgroup I get this error: %AAAA-4-SERVNOTACPLUS: The server-group "myradiusgroup" is not a tacacs+ server group. ...
red888's user avatar
  • 4,243
2 votes
2 answers
2k views

How do I use a domain account to connect to a MSSQL server for NPS accounting?

I'm trying to connect a Server 2008 R2 NPS to a MSSQL server for logging accounting data and I'm running into issues. I configured NPS Accounting through the "Configure Accounting" wizard and, using ...
red888's user avatar
  • 4,243
0 votes
1 answer
2k views

Linux TACACS+ authorization

I'd like to know to to authorize (only allow a set of commands) users on Linux console (bash). I'm so far able to authenticate ssh users over TACACS+ but authorization is not working. This is my ...
Ignacio Verona's user avatar
0 votes
1 answer
2k views

Citrix Netscaler 10.1 AAA Application Traffic Single Sign On

I have a Netscaler deployment with a virtual server where I have enabled authentication through the AAA Application Traffic feature. As Expected this allows my users to log on to the netscaler login ...
Canis's user avatar
  • 87
0 votes
0 answers
1k views

Radius AAA authentication failover

I know this question has been asked on here but I cannot seem to figure this out. I am trying to get radius to failover to local authentication but whenever I turn off radius it won't failover. ...
Cory's user avatar
  • 1
4 votes
1 answer
3k views

Cisco ASA LDAP Group Privilege Level

We have a pair of ASA 5510s (8.4.3) on which we use LDAP authentication for VPN and SSH access. On all of our Catalyst switches, which use RADIUS, we're able to set the shell:priv-lvl to 15 in the ...
bab's user avatar
  • 443
5 votes
1 answer
1k views

How can I configure an ASA such that I can use a sub-priviledge 15 user to download the current config from http?

I am setting up our new ASA's at Stack Exchange and am trying to follow some best practices like using configuration management and minimum-permissions-necessary users. What I'm trying to do is ...
Peter Grace's user avatar
  • 3,476
1 vote
3 answers
5k views

Need to setup a RADIUS server to authenticate a Windows client to a Windows server

I have a server that I have technicians who need to be able to access using shared credentials. However, doing that violates our security policy (!). I need each user to be able to authenticate ...
drosenblatt's user avatar
1 vote
2 answers
895 views

Can a device (WAP or switch) be configured as an 802.1x supplicant?

We are looking at implementing 802.1x on a wired/wireless network. What I am looking for is a device that can act as a supplicant and once authenticated on the network, is able to pass traffic from ...
Allan Ross's user avatar