1
vote
1answer
399 views

Setting Up A Windows 2008 NPS Server As A Radius Server For A Cisco AP541N Cluster

I have a cluster of Cisco AP541N access points. I am trying to use the Radius authentication for WPA-Enterprise authentication, but I cannot get the APs to query the server properly. Does anyone ...
0
votes
0answers
21 views

How to configure network policy to disallow specific users group access VPN and allow access to cisco devices via telnet? (windows 2008 r2)

I am using radius to authenticate VPN users, and access to Cisco devices. some users allowed to connect via VPN only, others allowed to connect via VPN and access Cisco devices. I want to add other ...
0
votes
1answer
174 views

Configuring C2950 with 802.1X/PEAP and RADIUS server

I am setting up 802.1X security on a LAN which has a C2950 switch that controls access from the WLAN to the Ethernet LAN. I plan to use PEAP. I read this the Cisco article on configuring 802.1X ...
1
vote
1answer
509 views

Cisco ISE Wlan user authentication fails for users with umlaut

We have setup a Cisco Identity Services Engine to manage WLAN access for our users. Access should be granted to users from a specific Windows Active Directory group. This works fine for users having a ...
3
votes
1answer
688 views

How do I go about Improving wireless security at the office (Radius? Certs?)

EDIT 1: Our environment is mixed, majority OSX with a few Windows and Linux boxes. More importantly, Android and Apple cellphones will also need wireless access on a regular basis. We have a redhat ...
3
votes
1answer
369 views

What are the Precautions to be taken while configuring RADIUS authentication for Routers,Switches & Firewalls [closed]

Have quite a few questions for Implementing Radius for my network devices : How to safely implement aaa Radius authentication to make sure users have login using LOCAL database incase the Radius ...
1
vote
0answers
272 views

LOCAL and RADIUS authentication on ASA

Have configured local authentication which was working fine.And today I wanted to implement RADIUS too .. but after I have done, Im unable to login to my firewall user-identity default-domain LOCAL ...
2
votes
1answer
132 views

How to use different network policies for administrative logins and wireless users?

I'm using a RADIUS server (NPS on Windows 2008 R2) to centrally manage authentication for a bunch of Cisco devices, including switches and wireless access points; I'm currently using RADIUS to ...
0
votes
0answers
288 views

How to send connection type (SSH|Telnet) info in Radius Access Requests on Cisco router?

I've configured the following on a cisco router: aaa authentication login default group radius local ! radius-server host x.x.x.x auth-port 1012 acct-port 1013 radius-server host y.y.y.y auth-port ...
4
votes
1answer
332 views

Cisco ASA LDAP Group Privilege Level

We have a pair of ASA 5510s (8.4.3) on which we use LDAP authentication for VPN and SSH access. On all of our Catalyst switches, which use RADIUS, we're able to set the shell:priv-lvl to 15 in the ...
3
votes
1answer
611 views

Is a PKI required when authenticating a Cisco Aironet AP via radius against AD

We're a small office and have a Cisco Aironet 1250 access point set to WPA-PSK. Now that we've deployed Active Directory I'd like start authenticating my users via radius instead of a PSK. To this ...
0
votes
1answer
1k views

How to limit a VPN user to just one host?

I have a Cisco ASA that authenticates off of RADIUS / AD. I need to give a user VPN access but I want to limit their access to only one host. What is the best way to do this?
8
votes
2answers
1k views

Smart card authentication to a Cisco switch?

We have our Cisco network devices configured to authenticate network administrators using their domain accounts via RADIUS running on a Windows 2008R2 server with the network protection role. This ...
1
vote
2answers
6k views

configure a Cisco ASA to use MS-CHAP v2 for RADIUS authentication

Cisco ASA5505 8.2(2) Windows 2003 AD server We want to configure our ASA (10.1.1.1) to authenticate remote VPN users through RADIUS on the Windows AD controller (10.1.1.200) We have the following ...
1
vote
2answers
4k views

RADIUS authentication on Cisco switches: how to assign privilege levels?

I need to configure some Cisco switches (IOS 12.x) to authenticate against a RADIUS server; the server is Windows Server 2003's IAS, and it validates users against his Active Directory domain. I know ...
0
votes
2answers
2k views

Can I Specify an Existing ACL using a Radius AV Pair?

I am able to specify access-lists for VPN users on my IAS radius server using avpairs like: Cisco-AVpair = "ip:outacl[#number]={standard-access-control-list | extended-access-control-list}" So for ...
1
vote
1answer
298 views

Cisco 1841 banner info

I am using a Cisco 1841 router. I have programmed radius settings onto it which is always used to login if the radius server is present. If the radius server is down or not present it then converts to ...
0
votes
2answers
10k views

Authenticate Cisco ASA to Windows 2008 domain

My office has replaced its Windows 2003 domain and domain controllers with Windows 2008. I have a Cisco ASA 5510 which handles VPN connectivity for our remote users, still integrated with one of the ...
1
vote
1answer
1k views

where can i find a RADIUS configuration example of A cisco 2106 in combination with A juniper steel belted radius?

I'm looking for a configuration example of a Cisco wireless lan controller in combination with a juniper steel belted radius appliance (used to be made by funk now acquired by Juniper). It states in ...