0
votes
0answers
6 views

Freeradius and Cisco. VPN client public address attribute

Once again I am here with a FreeRADIUS question. I use RADIUS for authentication of my IPSec clients and the NAS is a Cisco router. I want RADIUS to be writing not only the NAS IP address into the ...
1
vote
2answers
53 views

Point of Shared Secrets on RADIUS Servers over a Cisco Switch

I was wondering what the point of Shared Secrets are on RADIUS servers if I set the secret in the Cisco switch configuration. If the supplicant wanting to be authenticated does not have to know it, ...
0
votes
1answer
35 views

RADIUS authentication requests not relayed to RADIUS server

I am trying to set up a RADIUS server for 802.1x NAC over a Cisco IE 3000 Network Switch, using freeRadius to implement it. I know the switch knows where the RADIUS server is because I set up the ...
0
votes
1answer
53 views

Configuring a RADIUS server for 802.1x over a Cisco Switch

I am trying to set up RADIUS authentication over a Cisco switch and I have gone through every tutorial they have. I am able to get the RADIUS server to authenticate when I access the CLI of the Cisco ...
0
votes
0answers
50 views

FreeRadius and Cisco 2600 Terminal Server [IOS 12.1(3)T]

I'm using FreeRadius 2 and Cisco 2600 Terminal server to coordinate access to cisco routers based on time‏ ranges. Basically we are an education/training environment where we have some students ...
1
vote
1answer
978 views

Setting Up A Windows 2008 NPS Server As A Radius Server For A Cisco AP541N Cluster

I have a cluster of Cisco AP541N access points. I am trying to use the Radius authentication for WPA-Enterprise authentication, but I cannot get the APs to query the server properly. Does anyone ...
0
votes
1answer
290 views

Configuring C2950 with 802.1X/PEAP and RADIUS server

I am setting up 802.1X security on a LAN which has a C2950 switch that controls access from the WLAN to the Ethernet LAN. I plan to use PEAP. I read this the Cisco article on configuring 802.1X ...
1
vote
1answer
658 views

Cisco ISE Wlan user authentication fails for users with umlaut

We have setup a Cisco Identity Services Engine to manage WLAN access for our users. Access should be granted to users from a specific Windows Active Directory group. This works fine for users having a ...
3
votes
1answer
770 views

How do I go about Improving wireless security at the office (Radius? Certs?)

EDIT 1: Our environment is mixed, majority OSX with a few Windows and Linux boxes. More importantly, Android and Apple cellphones will also need wireless access on a regular basis. We have a redhat ...
3
votes
1answer
462 views

What are the Precautions to be taken while configuring RADIUS authentication for Routers,Switches & Firewalls [closed]

Have quite a few questions for Implementing Radius for my network devices : How to safely implement aaa Radius authentication to make sure users have login using LOCAL database incase the Radius ...
1
vote
0answers
333 views

LOCAL and RADIUS authentication on ASA

Have configured local authentication which was working fine.And today I wanted to implement RADIUS too .. but after I have done, Im unable to login to my firewall user-identity default-domain LOCAL ...
2
votes
1answer
140 views

How to use different network policies for administrative logins and wireless users?

I'm using a RADIUS server (NPS on Windows 2008 R2) to centrally manage authentication for a bunch of Cisco devices, including switches and wireless access points; I'm currently using RADIUS to ...
0
votes
0answers
333 views

How to send connection type (SSH|Telnet) info in Radius Access Requests on Cisco router?

I've configured the following on a cisco router: aaa authentication login default group radius local ! radius-server host x.x.x.x auth-port 1012 acct-port 1013 radius-server host y.y.y.y auth-port ...
4
votes
1answer
450 views

Cisco ASA LDAP Group Privilege Level

We have a pair of ASA 5510s (8.4.3) on which we use LDAP authentication for VPN and SSH access. On all of our Catalyst switches, which use RADIUS, we're able to set the shell:priv-lvl to 15 in the ...
3
votes
1answer
665 views

Is a PKI required when authenticating a Cisco Aironet AP via radius against AD

We're a small office and have a Cisco Aironet 1250 access point set to WPA-PSK. Now that we've deployed Active Directory I'd like start authenticating my users via radius instead of a PSK. To this ...
0
votes
1answer
1k views

How to limit a VPN user to just one host?

I have a Cisco ASA that authenticates off of RADIUS / AD. I need to give a user VPN access but I want to limit their access to only one host. What is the best way to do this?
8
votes
2answers
1k views

Smart card authentication to a Cisco switch?

We have our Cisco network devices configured to authenticate network administrators using their domain accounts via RADIUS running on a Windows 2008R2 server with the network protection role. This ...
1
vote
2answers
6k views

configure a Cisco ASA to use MS-CHAP v2 for RADIUS authentication

Cisco ASA5505 8.2(2) Windows 2003 AD server We want to configure our ASA (10.1.1.1) to authenticate remote VPN users through RADIUS on the Windows AD controller (10.1.1.200) We have the following ...
1
vote
2answers
4k views

RADIUS authentication on Cisco switches: how to assign privilege levels?

I need to configure some Cisco switches (IOS 12.x) to authenticate against a RADIUS server; the server is Windows Server 2003's IAS, and it validates users against his Active Directory domain. I know ...
0
votes
2answers
2k views

Can I Specify an Existing ACL using a Radius AV Pair?

I am able to specify access-lists for VPN users on my IAS radius server using avpairs like: Cisco-AVpair = "ip:outacl[#number]={standard-access-control-list | extended-access-control-list}" So for ...
1
vote
1answer
298 views

Cisco 1841 banner info

I am using a Cisco 1841 router. I have programmed radius settings onto it which is always used to login if the radius server is present. If the radius server is down or not present it then converts to ...
0
votes
2answers
11k views

Authenticate Cisco ASA to Windows 2008 domain

My office has replaced its Windows 2003 domain and domain controllers with Windows 2008. I have a Cisco ASA 5510 which handles VPN connectivity for our remote users, still integrated with one of the ...
1
vote
1answer
1k views

where can i find a RADIUS configuration example of A cisco 2106 in combination with A juniper steel belted radius?

I'm looking for a configuration example of a Cisco wireless lan controller in combination with a juniper steel belted radius appliance (used to be made by funk now acquired by Juniper). It states in ...