Tagged Questions

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

learn more… | top users | synonyms

0
votes
0answers
22 views

£ sign in password fails Windows NPS Radius authentication against Sonicwall SRA

We have a Sonicwall SRA server configured to authenticate users using RADIUS to a Windows NPS Server running on Windows Server 2012 R2. It all works fine EXCEPT when passwords contain the "£" ...
1
vote
1answer
52 views

New root CA will not list schema version 2 & 3 certificate templates

I'm trying to decommission a Server 2008 machine that hosts DC, NPS, and CA. I've deployed two new servers to take over as root CA and RADIUS server (both new servers are 2012R2). The new root CA is ...
3
votes
0answers
23 views

SuperMicro IPMI using Windows-based RADIUS (NPS)

I'm struggling to use a Windows-based RADIUS setup (Network Policy Server) with SuperMicro IPMI interfaces. I've found that I need to add vendor-specific attribute H=4, I=4 (Appendix C in the ...
0
votes
0answers
17 views

Poptop unable to authenticate against RSA Authentication Manager via RADIUS

Unfortunately I haven't been able to find an answer to this through Googling, searching Stack sites, etc. Any help provided would be appreciated. I'm setting up Poptop and it needs to authenticate ...
2
votes
1answer
51 views

FreeRadius - Authenticate any User & Password

I am trying to help a facility who's radius server crashed - no recoverable data. The clients are all installed (buried) in vehicles and are not readily accessible (need to tear stuff apart). Access ...
0
votes
0answers
146 views

Configure Mikrotik WPA-EAP to authenticate against local user database

Is it possible to configure a Mikrotik router (RouterOS 6.20) to perform WPA-EAP authentication against the local user database on the Mikrotik? Documentation indicates that all authentication ...
0
votes
0answers
56 views

How to handle 802.1x authentication system with incompatible clients devices?

I would like to split my wired network into multiple VLANs. In order to do that, I think I will use dot1x authentication on my Cisco Switchs (2960S and 2960G) RADIUS will be handle through NPS on my ...
0
votes
0answers
27 views

OpenVPN Radiusplugin AD and the user restriction

Im using FreeRadius which is using Samba4 (AD DC) as the user/password provider. OpenVPN is using Radiusplugin, which use that FreeRadius Server for authentication. This solution work great, but I ...
1
vote
1answer
41 views

Setting up NPS with a certificate that is valid to both AD and non-AD machines

I'm trying to setup an AD server running the NPS service so that both AD and non-AD machines see the certificate as valid when authenticating to the wireless network. I picked up a cert from GoDaddy ...
0
votes
0answers
38 views

Freeradius and Cisco. VPN client public address attribute

Once again I am here with a FreeRADIUS question. I use RADIUS for authentication of my IPSec clients and the NAS is a Cisco router. I want RADIUS to be writing not only the NAS IP address into the ...
0
votes
0answers
19 views

Radius Users grouped by NAS Client

I have searched for many hours about the possibility of FreeRadius separate users by NAS client, but, without success :( I want to separate my users grouping by NAS client, as follow: Nas client 01 ...
0
votes
1answer
224 views

Daloradius / Freeradius mac authentication

I setup a centos freeradius mysql with the frontend daloradius using the steps on this site http://linuxdrops.com/install-freeradius-with-web-based-management-daloradius-on-centosrhel-debian-ubuntu/ ...
-2
votes
1answer
62 views

Diameter vs Radius? [closed]

I would like to design ISP accounting system from scratch , But my question is which one of Radius(UDP) or Diameter Protocols are better and suitable for this concept ? I think Diameter is more secure ...
1
vote
2answers
88 views

Point of Shared Secrets on RADIUS Servers over a Cisco Switch

I was wondering what the point of Shared Secrets are on RADIUS servers if I set the secret in the Cisco switch configuration. If the supplicant wanting to be authenticated does not have to know it, ...
3
votes
2answers
1k views

Authentication via RADIUS : MSCHAPv2 Error 691

I am working on setting up authentication into an Acme Packet Net-Net 3820 (SBC) via RADIUS. The accounting side of things is working just fine with no issues. The authentication side of things is ...
0
votes
0answers
290 views

Cisco ASA + FreeRadius: Downloadable ACL configuration

VPN users that are using FreeRadius are having access to all VLANs. VPN users using local authentication have local ACLs applied to their access. I need to know what configuration change I need to ...
0
votes
1answer
54 views

RADIUS authentication requests not relayed to RADIUS server

I am trying to set up a RADIUS server for 802.1x NAC over a Cisco IE 3000 Network Switch, using freeRadius to implement it. I know the switch knows where the RADIUS server is because I set up the ...
0
votes
1answer
183 views

Configuring a RADIUS server for 802.1x over a Cisco Switch

I am trying to set up RADIUS authentication over a Cisco switch and I have gone through every tutorial they have. I am able to get the RADIUS server to authenticate when I access the CLI of the Cisco ...
0
votes
1answer
71 views

Can RADIUS offer protection against spoofed MAC addresses accessing resources protected with MAC Authentication

When running RADIUS via WPA2 Enterprise and 802.1x, clients wishing to access the network must provide valid credentials. However, this does not stop malicious clients forging valid clients MAC ...
0
votes
0answers
18 views

Multiple server with Pam radius?

I have an issue with Pam radius . I want to use two radius servers at same time with different databases with Pam_radius I use Open-connect which use Pam authentication . in ...
0
votes
0answers
115 views

FreeRadius and Cisco 2600 Terminal Server [IOS 12.1(3)T]

I'm using FreeRadius 2 and Cisco 2600 Terminal server to coordinate access to cisco routers based on time‏ ranges. Basically we are an education/training environment where we have some students ...
1
vote
1answer
242 views

Nagios-Plugin “check_radius” missing in Ubuntu 14.04?

Since I asked this question already on askubuntu but nobody answered for a week perhaps here somebody knows the answere ...
0
votes
2answers
197 views

RADIUS-sever: Hashing password before checking

I do have to set up a RADIUS server for authentication with a captive portal of pfSense. Unfortunately, all passwords in the RADIUS' database are hashed with a certain algorithm. I do use a ...
1
vote
0answers
33 views

Troubleshooting 802.1x authentication issue relating to signal strength

My setup: Windows 2008 R2 server with the NPS role configured for RADIUS _PEAP/MSCHAPV2. I have a WPA2 Enterprise network configured on the Ubiquity controller. 3 Ubiquity UniFi LR access points. ...
3
votes
1answer
998 views

802.1x certificates, EAP-TLS, RADIUS and Windows machines

When using 802.1x certificate-based authentication on Windows machines, should I use different certificate for each machine? There is RADIUS server running in the network, the machines use EAP-TLS to ...
-1
votes
1answer
814 views

802.1x auth without certificate on clients

I'm trying to implement WPA-Enterprise authentication on my UniFi Controller (3.1.10) without the need for certificates on clients. My RADIUS server will be Windows Server 2012R2 with NPS role ...
-1
votes
1answer
282 views

User authentication; PAM or Radius? [closed]

At college I'm part of a group of students that keep a server infrastructure running for the students. Lately we've been having a lot of trouble with the servers, and we decided that it's probably ...
0
votes
0answers
97 views

Exchange Server 2013 and RADIUS server(freeRADIUS2)

I am a student and doing an internship. I have to test Microsoft Exchange Server 2013. I am using Windows Server 2012, I already installed Exchange Server 2013 on it and everything works as intended. ...
1
vote
0answers
184 views

Server 2008 RADIUS on auth non-domain computers

I have read a few articles about the web regarding this, but I seem to be unable to find a definitive answer for my question. I have an Aruba Networks controller configured to hit a RADIUS server ...
0
votes
2answers
147 views

Radius Authentication

I will first tell you a little bit about how I am set up. I have wireless clients connecting to an ARUBA Mobility Controller using a RADIUS server for Authentication. I need to ensure I can get ...
2
votes
2answers
1k views

NPS - RADIUS - Active Directory Authentication

Is it possible to use NPS RADIUS as an intermediary between an application that only supports RADIUS authentication and an active directory server which is used for authentication across the network? ...
0
votes
1answer
345 views

Authentication to Squid proxy with a RADIUS-authenticated client

I want to set up a wireless environment where WPA2-Enterprise is used for authentication to a FreeRADIUS server (using EAP-TTLS or PEAP), and the wireless client is seamlessly routed through and ...
0
votes
1answer
512 views

Authenticate Radius user using pam and ssh [duplicate]

I am able to authenticate radius users using radius server+pam+ssh with creating local user with blank password in linux. Is it possible to authenticate radius users without creating users in local ...
2
votes
1answer
2k views

How to use Calling-Station-Id on a per user basis in freeRADIUS?

I am trying to limit every user to a small set of Mac-IDs in RADIUS, by directly including the appropriate information in the users file. It would be acceptable even if every user was limited to one ...
1
vote
1answer
129 views

Managing Active Directory account access across multiple forests / customers

We do managed IT services for a number of small / medium business. I'm looking to find a solution to manage our access to our clients' AD forest's in a scalable fashion. Right now, we manually create ...
1
vote
0answers
894 views

How do I set up an 802.1X infrastructure for use with OS X and iPads?

At my workplace I have been tasked with setting up machine certificate based 802.1X wireless authentication for our Apple devices. It seems like on the client side this will be handled by Profiles ...
0
votes
1answer
384 views

Freeradius server is not accepting accounting packets through tcpreplay

I am running a free radius server on system A. I am sending test accounting requests using radclient radclient -x systemA acct testing123 from system B. I can see that the radius server recieved these ...
1
vote
1answer
2k views

Setting Up A Windows 2008 NPS Server As A Radius Server For A Cisco AP541N Cluster

I have a cluster of Cisco AP541N access points. I am trying to use the Radius authentication for WPA-Enterprise authentication, but I cannot get the APs to query the server properly. Does anyone ...
0
votes
1answer
155 views

system authentication and radius authentication

I am using CentOS 6.3 and want to enable ssh RADIUS authentication along with Centos system Authentication. Right now my server is firstly authenticated with RADIUS server. And after system ...
1
vote
2answers
610 views

WPA2-Enterprise vs. Captive Portal, which is more preferable?

My school runs our WiFi network on Aruba Controllers, some of the access points are Aruba-branded and is managed. Others are D-Link branded, and need configuration one by one if needed. We run our ...
0
votes
1answer
311 views

Expired password change through VPN failure

I am setting up some new accounts to be used by some contractors. they are going to connect via VPN to our network. My requirement is to set the password initially and then have them change it the ...
1
vote
2answers
870 views

How to limit user's access to a specific NAS?

I'm new to RADIUS and I have just set up a very basic FreeRADIUS server for 802.1x (WPA). I use EAP, MySQL as backend with daloRADIUS as webGUI (for user management, mainly). I got two WiFi networks, ...
0
votes
1answer
1k views

NPS Policy doesn't to respect the “Control access through NPS Policy” user attribute

I have a Win2K8 server with NPS. I am trying to set my VPN authentication on a FortiGate firewall to authorize users via Radius from my Windows server. I have two policies configured a Connection ...
0
votes
3answers
143 views

How to prevent users from connecting directly to the switch, where the Access point is connected?

I'm about to setup a large wireless network, at a dorm. The hardware I'm using is going to be: HP Procurve E2520-24G-PoE (J9299A) Cisco Aironet 2602i Autonomous Access Point Since the outlets at ...
2
votes
1answer
168 views

How to enable two factor authentication

I am using CentOS 6.3 and want to enable ssh RADIUS authentication. Right now my server is directly authenticated with RADIUS server. I want the server to authenticate with unix credentials first and ...
1
vote
0answers
86 views

Checking Statement of Health (NAP) info on Linux using Dhcp and Radius

I have a Linux DHCP server and windows clients. I want my DHCP server to assign an IP address from a network let's say 10.6.3.0/255.255.255.128 if the client has it's firewall enabled or an IP address ...
0
votes
0answers
198 views

Radius AAA authentication failover

I know this question has been asked on here but I cannot seem to figure this out. I am trying to get radius to failover to local authentication but whenever I turn off radius it won't failover. ...
2
votes
1answer
1k views

Radius connection with windows computers

I have many Ubiquiti's unifi AP connected to a Windows Server 2012 NPS's radius server. I configured security policies for let domain user to connect to local network. I have some trouble with window ...
0
votes
1answer
355 views

Configuring C2950 with 802.1X/PEAP and RADIUS server

I am setting up 802.1X security on a LAN which has a C2950 switch that controls access from the WLAN to the Ethernet LAN. I plan to use PEAP. I read this the Cisco article on configuring 802.1X ...
0
votes
1answer
83 views

What decides what tunnels inside EAP-TTLS?

If EAP-TTLS is a EAP method that establishes a TLS tunnel, what goes in the tunnel? It could be another EAP method, but it could also be PAP. What decides? The server, the supplicant, or do they ...