Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

learn more… | top users | synonyms

0
votes
0answers
18 views

Creation of a guest Wireless network 802.1X - easy to configure out of the box on clients (android, ios, computers,..)

I would like to create a Guest wireless network with 802.1X (WPA enteprise). On the client side, it must be easy to configure, so the users can enter a login and password during the authentication ...
0
votes
0answers
12 views

'Generic' Certificates for RADIUS authentication/Encryption (weird?)

Situation: I have a test environment with Server 2008 that's a DC and has NPS for RADIUS authentication/encryption for wireless, and AD CS installed for the self signed cert. As it stands now, my ...
0
votes
1answer
46 views

NPS/RADIUS authentication across one-way trust

I'm trying to set up Windows Network Policy Server to allow RADIUS authentication in a multiple forest scenario with one-way trusts. We have several domains (each in a single domain-forest) containing ...
-1
votes
0answers
22 views

Hardware limitations of a RADIUS server? [duplicate]

I would like to configure a RADIUS server to authenticate users by retrieving informations from an HSS. However, I am wondering about the need to install several servers with a load balancer. Note ...
1
vote
0answers
34 views

Same VLAN for LAN only and Internet users on 802.1x network with pfSense as gateway

I am creating an ISP for a student residence. The LAN is already there and working, with several CISCO switches. I want to provide Internet by a secured and automatic way to those who pay for it ...
0
votes
0answers
19 views

How does EAP-SIM and RADIUS work together?

I would like to know how does EAP-SIM and RADIUS work together. Assume we have something like this: [client-1]----+ | [client-2]----+----[AP]----------[RADIUS Server]------------[HSS] ...
0
votes
0answers
17 views

Unable to use Radius server out of LAN

I want to set up WPA2 Enterprise for my TP-Link TL-WR886N router (official firmware). Tried to use an radius server in LAN and it is working. Since the power supply is not steady (I have UPS for the ...
2
votes
1answer
94 views

EAP-TLS for Wireless with Active Directory

My question is more from a conceptual point of view, rather than implementation (even though I'm asking about proprietary protocols and products). Assuming I have users and credentials set up in my ...
0
votes
0answers
28 views

OpenVPN + FreeRADIUS Authentication Error

Trying to set up a OpenVPN server with FreeRADIUS server running on the same machine. All servers are running but I'm getting errors with authentication when the end user logs on VIA OpenVPN client. ...
0
votes
0answers
72 views

Error using SHA256 certificate for RADIUS server for use with Ubuntu Unifi/Wireless 802.1x 802.11 network

We have an established wifi network with Unifi, setup as wpa2-enterprise with a Windows Server 2008 R2 RADIUS host. Our CA server crashed, which didn't seem to cause any trouble with phones ...
0
votes
0answers
32 views

specific IP Attribution with isc-dhcp-server with freeradius authentication

I would like to assign specific address to my clients, regarding their radius authentication. For exemple, user1 (group user) authenticate on radius, dhcp gives him 192.168.1.1 as IP user2 (group ...
1
vote
0answers
39 views

Using airport extreme as an AP with true bridge mode (forwarding 802.1x auth)

So here is my setup. I have a Router (Fortigate) 4 airport Extreme, and a radius/ldap server on a distant server. I want my user to authenticate with the radius or LDAP server, and be able to create ...
2
votes
0answers
57 views

Windows machines cannot connect to Radius Wifi

Environment Background: 4 Domain Controllers, DC01 DC02 DC03 DC04 DC01 is my PDC DC02 is my NPS Server The other two are load balancing and site specific. I'm using a Ruckus Zone Director with Ruckus ...
1
vote
1answer
120 views

Debian Samba share Authentification with RADIUS server

I'm trying to configure Samba (apt-get install samba) to authenticate users using a RADIUS server and i cannot find anything useful. Is it possible ? I tought i could set Samba to use the PAM ...
0
votes
0answers
32 views

An error occured during the Network Policy Server use of Extensible Authentication Protocol

It has been almost two weeks to get my radius server up and running. I think i have run in almost to all the issue known to Radius :). Am guessing this to be a Certificate issue, Please go through ...
2
votes
0answers
212 views

Tracing Untraceable AD Account Lockouts

A user (we'll call them 'username') keeps getting locked out and I don't know why. Another bad password is logged every 20 minutes on the dot. The PDC Emulator DC is running Server 2008 R2 Std. ...
0
votes
0answers
46 views

RADIUS server does not call a custom script

I do have a RADIUS server which called a custom script for authentication in the past. In the /etc/freeradius/sites-enabled/default, I modified the following lines to archieve this: authorize{ ...
0
votes
1answer
41 views

FreeRADIUS 3 and Wildcard Certs

I am setting up a new FreeRADIUS server here on campus, jumping from v1 to v3 (I was not here when the original was setup). Things seem to be working fine, but I do not understand how the certificates ...
1
vote
1answer
29 views

mod_auth_radius secure over https?

mod_auth_radius README file says: Using static passwords & RADIUS authentication over the web is a BAD IDEA. Everyone can sniff the passwords, as they're sent over the net in the clear. If I ...
0
votes
0answers
86 views

Active Directory / Freeradius / ntlm_auth / mail attribute

I am currently configuring a linux server with Freeradius to have our clients authenticate against our Active Directory for our WiFi-network. The goal is to have our users use the e-mail address that ...
0
votes
0answers
84 views

NPS Radius wireless authentication only for domain computers

Is it possibile to setup a Windows NPS role to grant only Domain PC to wireless access? I want to still check for a valid domain user account, but I would like to restrict access only to domain ...
0
votes
1answer
250 views

EAP-PWD with FreeRADIUS 3

I'm trying to setup EAP-PWD using FreeRADIUS 3. However, I can't get it to work and documentation is virtually non-existent. Thus, I don't know whether the problem I'm running into is a ...
0
votes
0answers
51 views

Is it possible to use RADIUS with client certificate for Checkpoint VPN?

I have Checkpoint Gaia R77 acting as VPN gateway, and Microsoft NPS acting as RADIUS. Is it possible to use client certificates for VPN authentication against RADIUS server? I know for sure that ...
1
vote
1answer
86 views

NPS server Active Directory registration & WIFI RADIUS

Background (I'm new to this, so bear with me): So, I set up an NPS server vm in an AD domain to try out RADIUS client WAPs. The NPS is installed alongside an AD CS server (enterprise, plus one ...
0
votes
0answers
148 views

RADIUS w/ NPS, Sonicwall, and Meru Wireless

EDITED 3/23: I've been trying to configure a DS/NPS->Sonicwall->Meru Controller>Client RADIUS Wifi solution and I haven't had much success on the sonicwall side. I've shortened all shared secrets to 8 ...
0
votes
0answers
153 views

Microsoft NPS Radius Proxy - Framed-IP-Address Empty

I'm trying to use Microsoft's NPS as a radius proxy, but for some reason it's not forwarding the Framed-IP-Attribute in the accounting requests. I have a Meru wireless controller, Smoothwall web ...
0
votes
0answers
31 views

Windows 2008 Radius Client

I'm trying to search for a way to have Windows 2008 as a Radius client to authenticate itself with the corporate Radius server. AD is currently out of the picture, and my superiors want me to look ...
0
votes
1answer
85 views

Does “aaa accounting commands” not support radius?

When I issue this command: aaa accounting commands 15 default start-stop group myradiusgroup I get this error: %AAAA-4-SERVNOTACPLUS: The server-group "myradiusgroup" is not a tacacs+ server group. ...
1
vote
0answers
53 views

Authenticating devices instead of users via PEAP/Radius

Our Cisco Aironet AP uses Radius to authenticate against our Active Directory via our Network Policy Server (NPS). For my users, on their domain-managed laptops and BYO devices (such as laptops, ...
1
vote
1answer
164 views

How do I use a domain account to connect to a MSSQL server for NPS accounting?

I'm trying to connect a Server 2008 R2 NPS to a MSSQL server for logging accounting data and I'm running into issues. I configured NPS Accounting through the "Configure Accounting" wizard and, using ...
-3
votes
2answers
45 views

How to bind with RADIUS port i.e.1812? [closed]

I am trying to connect to RADIUS port in one of my project. The radius port is 1812 opened on RADIUS server. I added this port to ip table (ip natting) using /sbin/iptables -t nat -A PREROUTING -p ...
0
votes
1answer
710 views

radclient:: Failed to find IP address

I installed freeradius on CentOS 6.6 and I have configured the files /etc/raddb/clients and /etc/raddb/users. I am trying to test the server by this command : radtest Aicha passme 127.0.0.1 100 ...
2
votes
0answers
167 views

Using Windows NPS for Cisco router aaa authentication - is this safe?

I setup RADIUS authentication on a Cisco router and pointed it to a Windows NPS. Now I can ssh into the router my with AD account YAY. But now that I got it working I'm going over the settings to ...
1
vote
1answer
121 views

LDAP authentication using RADIUS server

I have a RADIUS server with a custom authentication method. I have a Mysql-Database with passwords of a Django CMS which are hashed in PBKDF2_SHA256, so I had to write a custom authentication script. ...
2
votes
1answer
167 views

Radius Client IP Address when setting up Wifi with WPA2 Enterprise?

I have taken over a server setup (as part of my job) which is setup of the following: Server setup with Threat Management Gateway (serving as the firewall) - 192.168.1.1 Server with Domain ...
1
vote
0answers
121 views

NPS RADIUS authentication fails due to user account

We're in the process of migrating our wireless network, adding in 802.11x-based RADIUS authentication. The set up is as follows: Client connects to router01 Client authenticates through RADIUS on a ...
0
votes
0answers
131 views

Server 2012 RRAS - RADIUS client number of authentication retries

I have a Windows Server 2012 system with the RRAS service installed. RRAS works ok, it receives VPN requests and sends them to a remote RADIUS server for authentication. I am trying to configure the ...
4
votes
0answers
43 views

How do I get as much debugging info as possible out of the Network Policy Server (ias) service?

We are trying to authenticate a client on remote vpn, through a Meraki Z1 teleworker appliance. The Z1 is sending a proper request, the Network Policy Server (ias) service is apparently ...
1
vote
0answers
303 views

FreeRadius Error reading /etc/freeradius/huntgroups

I've configured freeradius to use sql, everything was working fine, I was doing some tests with the users, and suddenly I cannot start the debugger because of this error : rlm_preprocess: Error ...
1
vote
1answer
51 views

EAP-TLS: is it possible eavesdropping when sharing client certificate?

I want to know how to share a network of WPA2 enterprise with EAP-TLS, authenticating users with a common certificate. They share the same certificate. I'm afraid they can monitor each other. Is ...
0
votes
0answers
109 views

£ sign in password fails Windows NPS Radius authentication against Sonicwall SRA

We have a Sonicwall SRA server configured to authenticate users using RADIUS to a Windows NPS Server running on Windows Server 2012 R2. It all works fine EXCEPT when passwords contain the "£" ...
1
vote
1answer
434 views

New root CA will not list schema version 2 & 3 certificate templates

I'm trying to decommission a Server 2008 machine that hosts DC, NPS, and CA. I've deployed two new servers to take over as root CA and RADIUS server (both new servers are 2012R2). The new root CA is ...
3
votes
0answers
83 views

SuperMicro IPMI using Windows-based RADIUS (NPS)

I'm struggling to use a Windows-based RADIUS setup (Network Policy Server) with SuperMicro IPMI interfaces. I've found that I need to add vendor-specific attribute H=4, I=4 (Appendix C in the ...
0
votes
0answers
87 views

Poptop unable to authenticate against RSA Authentication Manager via RADIUS

Unfortunately I haven't been able to find an answer to this through Googling, searching Stack sites, etc. Any help provided would be appreciated. I'm setting up Poptop and it needs to authenticate ...
2
votes
1answer
128 views

FreeRadius - Authenticate any User & Password

I am trying to help a facility who's radius server crashed - no recoverable data. The clients are all installed (buried) in vehicles and are not readily accessible (need to tear stuff apart). Access ...
0
votes
0answers
468 views

Configure Mikrotik WPA-EAP to authenticate against local user database

Is it possible to configure a Mikrotik router (RouterOS 6.20) to perform WPA-EAP authentication against the local user database on the Mikrotik? Documentation indicates that all authentication ...
0
votes
0answers
357 views

How to handle 802.1x authentication system with incompatible clients devices?

I would like to split my wired network into multiple VLANs. In order to do that, I think I will use dot1x authentication on my Cisco Switchs (2960S and 2960G) RADIUS will be handle through NPS on my ...
0
votes
0answers
80 views

OpenVPN Radiusplugin AD and the user restriction

Im using FreeRadius which is using Samba4 (AD DC) as the user/password provider. OpenVPN is using Radiusplugin, which use that FreeRadius Server for authentication. This solution work great, but I ...
1
vote
1answer
254 views

Setting up NPS with a certificate that is valid to both AD and non-AD machines

I'm trying to setup an AD server running the NPS service so that both AD and non-AD machines see the certificate as valid when authenticating to the wireless network. I picked up a cert from GoDaddy ...
0
votes
0answers
87 views

Freeradius and Cisco. VPN client public address attribute

Once again I am here with a FreeRADIUS question. I use RADIUS for authentication of my IPSec clients and the NAS is a Cisco router. I want RADIUS to be writing not only the NAS IP address into the ...