Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

learn more… | top users | synonyms

0
votes
0answers
5 views

How to connect wireless APs to the same Radius server if the sevrer is on a different subnet?

I am trying to create the following setup. I have a pfSense firewall with two NIC (Internet - WAN/LAN - Switch). I am setting up VLANs on the switch so I end up with 3 subnets. A subnet for servers ...
1
vote
0answers
19 views

Apache radius auth works with firefox not with chrome

I am using mod_auth_radius with apache2.2 Here is the relevant config in the site section: <IfModule radius_auth_module> AddRadiusAuth localhost:1812 test 5:3 AddRadiusCookieValid 5 ...
2
votes
1answer
13 views

Verifying RADIUS server is sending the correct certificates?

How can I see the TLS (SSL) certificates that my RADIUS server is using, to make sure it is sending the correct certificate and chain? I am implementing 802.1x authentication with a RADIUS server, ...
0
votes
0answers
15 views

NPS RADIUS 802.1x and configuring for large number of VLAN-s

Problem I've got a network with large number of VLAN-s (200+), and ActiveDirectory with 2012R2 servers, with all users and computers. I've also got NPS RADIUS server setup, properly working with ...
0
votes
0answers
14 views

IOS + StrongSwan + Windows RADIUS (NAP)

We've got Windows NAP, Windows Certification Services and many kind of clients wich uses Windows, android, OS X and iOS. All clients have certificates issued Windows CA, and I need that they connect ...
0
votes
1answer
55 views

dynamic VLANs on cheap Access Point after switch

I set up 802.1x on the wifi and now I want to configure dynamic vlan. Only problem: the AP (TP-Link Archer C7 v2 w/stock firmware) doesn't support vlans. Let me be a bit more visual: a network ...
1
vote
1answer
21 views

Local credentials used when radius server is available sshd pam_radius

I have pam_radius setup and it works (centos6, pam_radius: 1.4.0-2.el6), i can authenticate via the radius server using ssh. What i am trying to accomplish is that when the radius server is ...
1
vote
0answers
90 views

Radius server not responding to EAP requests

We are trying to setup a wifi environment using WPA2 security using Radius server and AD authentication. We've set up the radius server using the following guide: ...
0
votes
0answers
27 views

High load and Cpu on Radius server- Supplicant issue?

We have a Wireless Lan controller set to authenticate users against (Lucent) Radius server. The username and password is stored in a database. About once a week the cpu on the radius/java process ...
0
votes
0answers
35 views

supermicro ipmi radius attributes

Referencing this old question: Configuring RADIUS or LDAP on Supermicro (ATEN) IPMI Supermicro isn't in FreeRadius's vendor dictionary. So how do I add these attributes and get Supermicro IPMI to ...
1
vote
1answer
42 views

WIFi Authentication with Windows Active Directory [closed]

What would you recommend for scenario. Office with 100 employees multiple device platforms(Apple , Windows and Android). Existing Windows Active Directory on Windows 2008 but not all devices use this ...
0
votes
0answers
12 views

Cisco VWLC redirect page without authentication, radius or dhcp?

I have a virtual Cisco CMX sytem for the tracking of customers in a smalland a virtual Wireless Lan Controller also from cisco, in it's webconfigure I can choose for it to redirect to a webpage we ...
0
votes
1answer
37 views

Multi-factor auth with Kerberos and RADIUS

I am looking for a solution in order to allow a multi-factor authentication for a Kerberos-based logon service. By reading some articles, I found some good references about RADIUS, that provides a set ...
1
vote
1answer
44 views

Setting up Cisco ASA VPN to use both radius and local users

I've got a Cisco ASA setup with L2TP/IPSec VPN, all is working well except for one minor issue. Ideally, I'd like to be able to log on to the VPN using either that RADIUS server users or the local ...
0
votes
1answer
88 views

FreeRadius configure two different authentication types

Have a particular scenario in that we would like to use FreeRadius to log into switchs using Kerberos credentials and network devices using EAP-TLS. Currently have this configured and working, but ...
0
votes
0answers
33 views

RADIUS + LDAP + Cisco router 1941

I have a unique setup in my data center where I have configured a Radius with LDAP for authentication and authorization in my cisco 1941 router for remote IPSEC vpn users. This works fine and dandy. ...
0
votes
0answers
35 views

Use mail attribute for 802.1x RADIUS authenticatioon with Microsoft NPS

We have run a Cisco WiFi network that uses 802.1x to authentication logins against Active Directory. Employees login using their UPN prefix, and all works well. For various reasons we'd like users ...
1
vote
1answer
116 views

HAProxy and Radius

I've a following situation: network1 - gate - network2 network2 has several services. network1 has a lot of developers. I need to make access from developers to services with separated access, ...
0
votes
0answers
31 views

RADIUS servers at different sites (member servers at each site) - roles on each server

I have successfully set up a Windows Server SBS 2011 RADIUS server and it works well with our DrayTek router to authenticate domain joined workstations to our office wireless (so that only trusted ...
0
votes
1answer
122 views

radtest no response from outside localhost

I have set up freeradius in a Microsoft Azure VM. When I radtest from 127.0.0.1, it sends Access-Accept. But when I run radtest from another computer, freeradius doesn't respond. I am running ...
1
vote
0answers
39 views

local user cannot login while RADIUS is configured on Cisco Switch 3745

I've configured RADIUS on my switch as below: aaa new-model ! aaa authentication login default group radius local aaa authorization exec default group radius local ! radius-server host ...
0
votes
0answers
8 views

NPS with Microtik Routerboard 750GL

I want to configure Microtik Routerboard 750GL with NPS to grant access to Internet for our wifi clients. Clients need to be authenticated via active directory using nps. I have configured routerboard ...
0
votes
1answer
87 views

Apache & Radius & OTP

We have a Radius Server which authenticates our Users for our VPN solution. It additionally uses OTPs which are sent to the mobile phone. Im trying to find a way to use Radius Auth & OTP to ...
0
votes
0answers
65 views

Freeradius Authentication Fails only from Wireless router and works with radtest

I have installed and configured freeradius 2. When I test my freeradius installation using radtest, everything works fine. Locally The test command I executed was this one: radtest mario thepass ...
1
vote
1answer
282 views

SSH Authentication using RADIUS + Google Authenticator

I'm trying configure my SSHD's to authenticate users using FreeRadius. The FreeRadius server needs to first require a valid OTP using Google Authenticator, and then verify the system account password. ...
1
vote
0answers
152 views

NPS/RAIDUS Authentication for Wifi and certificates for non trusted server

I'm trying to setup an NPS server as RADIUS server for Wifi network of employers of my company. All mobile devices could connect to this networks using their domain user/pass. My problem is to let ...
3
votes
0answers
72 views

Authentication and logging of users for a Wireless ISP?

I have to upgrade a Wireless ISP's (WISP) network. Their current setup consists of a router (Mikrotik RouterBoard 1100AHx2), Ubiquiti Rockets (with sector antennas) for clients, and Ubiquiti ...
0
votes
1answer
136 views

NPS Server 2012 with ASA as Radius client not working, Server 2008 Working

for some time I have been using 2008 R2 as my Radius server and I have a Cisco ASA FW who is configured as Radius client and working ok. I have introduced another Windows 2012 DC, and also configured ...
1
vote
0answers
315 views

Windows Server 2012R2 RADIUS (wifi) clients won't accept bought wildcard certificate

I've been managing the NPS Server for a while and thought it was time to treat it a valid SSL certificate. The setup I bought a wildcard SSL certificate from comodo, compiled it to an .pfx ...
0
votes
0answers
62 views

Windows NAPS RADIUS server rejecting client

I have a Windows 2012 R2 VM with NAPS installed. I also have a Zyxel ASA and an AP that are configured to authenticate over RADIUS for one particular SSID. In the logs, I'm seeing that the ASA is ...
0
votes
1answer
133 views

For 802.1x PEAP RADIUS Authentication, do you use a different certificate per server?

Consider an environment that uses 802.1x PEAP authentication via RADIUS. Typically, this is to authenticate wireless clients. In this environment there are multiple RADIUS servers and clients will be ...
0
votes
1answer
167 views

OATH TOTP with Windows NPS Server?

I'm trying to set up multi-factor authentication for AWS WorkSpaces using AD and OATH TOTP (e.g. Google Authenticator). In the AWS AD Connector config you can set up the RADIUS server's IP, port and ...
0
votes
0answers
33 views

Protocol used between a RADIUS client and a computer?

I can't find documentation about the protocol used when a computer wants to reach a network with 802.1x. RADIUS client (switch, access point) use UDP/1812-1813 to communicate with RADIUS server. How ...
0
votes
0answers
93 views

Purchasing a certificate for Freeradius / WPA-Enterprise

I'm moving my WiFi to WPA-Enterprise, using a Freeradius server that authenticates with our Samba 4 directory. I'm currently using a self-signed certificate, but want to move to a purchased ...
1
vote
2answers
352 views

What are the risks of adding third-party Root CA certificate into NTAuth Store?

What are the risks associated with import of third-party Root CA certificate into the Enterprise NTAuth Store in Windows domain except that the CA is then trusted to issue certificates? This is for ...
1
vote
2answers
45 views

Radius clients with different authentication criteria

I can't seem to find a good tutorial on how to set my network policy for one of my radius clients. I'd like my radclientA with policyA to authenticate and radclientB with policyB to authenticate. ...
0
votes
0answers
176 views

Server 2012 NPS Server not authenticating IKEv2 requests

I am having a weird problem regarding NPS Server when I upgraded my vpn servers from server 2008 R2 to Server 2012 R2. Actually in my infrasturcture I have a Windows 2008 R2 based AD and in its domain ...
1
vote
0answers
17 views

Network Policy not evaluated for forwarded authentications

I'm having a problem with NPS connection policies in combination with forwarded RADIUS requests - the connection policy does not seem to be evaluated? Our domain has several one-way trusts. I have a ...
0
votes
0answers
62 views

Creation of a guest Wireless network 802.1X - easy to configure out of the box on clients (android, ios, computers,..)

I would like to create a Guest wireless network with 802.1X (WPA enteprise). On the client side, it must be easy to configure, so the users can enter a login and password during the authentication ...
0
votes
0answers
18 views

'Generic' Certificates for RADIUS authentication/Encryption (weird?)

Situation: I have a test environment with Server 2008 that's a DC and has NPS for RADIUS authentication/encryption for wireless, and AD CS installed for the self signed cert. As it stands now, my ...
0
votes
1answer
914 views

NPS/RADIUS authentication across one-way trust

I'm trying to set up Windows Network Policy Server to allow RADIUS authentication in a multiple forest scenario with one-way trusts. We have several domains (each in a single domain-forest) containing ...
1
vote
0answers
100 views

Same VLAN for LAN only and Internet users on 802.1x network with pfSense as gateway

I am creating an ISP for a student residence. The LAN is already there and working, with several CISCO switches. I want to provide Internet by a secured and automatic way to those who pay for it ...
0
votes
0answers
33 views

How does EAP-SIM and RADIUS work together?

I would like to know how does EAP-SIM and RADIUS work together. Assume we have something like this: [client-1]----+ | [client-2]----+----[AP]----------[RADIUS Server]------------[HSS] ...
0
votes
0answers
43 views

Unable to use Radius server out of LAN

I want to set up WPA2 Enterprise for my TP-Link TL-WR886N router (official firmware). Tried to use an radius server in LAN and it is working. Since the power supply is not steady (I have UPS for the ...
2
votes
1answer
319 views

EAP-TLS for Wireless with Active Directory

My question is more from a conceptual point of view, rather than implementation (even though I'm asking about proprietary protocols and products). Assuming I have users and credentials set up in my ...
0
votes
0answers
103 views

OpenVPN + FreeRADIUS Authentication Error

Trying to set up a OpenVPN server with FreeRADIUS server running on the same machine. All servers are running but I'm getting errors with authentication when the end user logs on VIA OpenVPN client. ...
0
votes
0answers
408 views

Error using SHA256 certificate for RADIUS server for use with Ubuntu Unifi/Wireless 802.1x 802.11 network

We have an established wifi network with Unifi, setup as wpa2-enterprise with a Windows Server 2008 R2 RADIUS host. Our CA server crashed, which didn't seem to cause any trouble with phones ...
0
votes
0answers
153 views

specific IP Attribution with isc-dhcp-server with freeradius authentication

I would like to assign specific address to my clients, regarding their radius authentication. For exemple, user1 (group user) authenticate on radius, dhcp gives him 192.168.1.1 as IP user2 (group ...
1
vote
0answers
159 views

Using airport extreme as an AP with true bridge mode (forwarding 802.1x auth)

So here is my setup. I have a Router (Fortigate) 4 airport Extreme, and a radius/ldap server on a distant server. I want my user to authenticate with the radius or LDAP server, and be able to create ...
3
votes
0answers
449 views

Windows machines cannot connect to Radius Wifi

Environment Background: 4 Domain Controllers, DC01 DC02 DC03 DC04 DC01 is my PDC DC02 is my NPS Server The other two are load balancing and site specific. I'm using a Ruckus Zone Director with Ruckus ...