Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

learn more… | top users | synonyms

0
votes
2answers
531 views

RADIUS against IMEI

I have a base of users that use mobile devices to access back to the office. there is already lots of existing security. however I would like to add some form of RADIUS authentication on the firewall ...
1
vote
1answer
722 views

How does one guarantee a remote client the same local IP address every time when connecting to a VPN?

I need to configure a VPN for secure remote access to a PACS serving DICOM radiological images. The DICOM standard requires that any clients accessing the PACS must be using a fixed IP address that is ...
0
votes
1answer
970 views

Cannot register RADIUS server in Active Directory, Windows Server 2008 r2

I'm trying to set up a RADIUS server in Windows 2008 R2 following the guide Install Windows 2008 R2 NPS for RADIUS Authentication for Cisco Router Logins. What I can't do is to register the RADIUS ...
1
vote
0answers
1k views

Cisco Remote Access VPN authenticating via RADIUS over Site2Site VPN

Is it possible to setup the remote access VPN to athenticate to a RADIUS server that is on the other end of a Site to site VPN on the same ASA? I have an ASA 5505 that is at a branch office with a ...
0
votes
3answers
1k views

Need to setup a RADIUS server to authenticate a Windows client to a Windows server

I have a server that I have technicians who need to be able to access using shared credentials. However, doing that violates our security policy (!). I need each user to be able to authenticate ...
0
votes
1answer
85 views

Running Radius on a Novell Backbone

I am a rookie network engineer and I've been asked to create a secure wireless system intergrated with an existing network. So far I'd decided to use 802.1x secuity with a Radius enabled server over a ...
0
votes
1answer
577 views

Lotus Notes & Domino RADIUS Integration

Does anyone know if it's possible to have Lotus Notes & Domino do external authentication via RADIUS? Specifically to integrate a 2FA solution.
0
votes
1answer
1k views

DD-WRT + TekRADIUS: Having issues getting it to work

Has anyone else gotten it to work? My setup: Router: Netgear WNR3500v2 WAN IP: y.y.y.y Radius: off Wireless Security: Security Mode: WPA2 Enterprise WPA Algorithms: AES ...
1
vote
2answers
538 views

Can a device (WAP or switch) be configured as an 802.1x supplicant?

We are looking at implementing 802.1x on a wired/wireless network. What I am looking for is a device that can act as a supplicant and once authenticated on the network, is able to pass traffic from ...
2
votes
3answers
7k views

How to integrate RADIUS with Kerberos?

We've got properly configured LDAP+Kerberos on our wired network. Now we want our users to log in to our WiFi network by using their normal credentials. I've found lots of HOWTOS about LDAP+RADIUS ...
1
vote
1answer
774 views

Using arpwatch to backtrack proxy access ip to eap-tls certificate

In my network I am using eap-tls authentication (machine certificates) for clients. Those clients are using a squid proxy to access the internet. The proxy is logging the request to the access.log. ...
1
vote
2answers
212 views

MAC spoofing - keeping the connection alive

Is it possible to keep a connection alive, while spoofing/changing the MAC address of your own network adapter (especially wlan adapter), without needing to re-authenticate against 802.1X ...
0
votes
1answer
192 views

Will RADIUS allow me to have authentication from an SBS domain in a 2003 domain?

I'm no RADIUS expert. But my understanding is that RADIUS can use Active Directory as a 'realm' to authenticate. This got me thinking - We have 3 separate clients in one building, and we manage the ...
1
vote
3answers
3k views

Windows RADIUS Server: Sync between RADIUS servers?

We will be setting up a tertiary RADIUS server at a remote site. Up until now, changes to the RADIUS database has been done manually, since it was only 2 servers. With a third one coming online, I ...
0
votes
1answer
2k views

Need help getting Dynamic VLAN Assignment working with RADIUS and Dell PowerConnect 3524

I'm attempting to get Dynamic VLAN Assignment working on a number of Dell PowerConnect 3524 switches. I've got a two RADIUS servers, both of which I've proved to be working using radtest on Linux. ...
0
votes
1answer
15k views

How to configure FreeRadius to accept all authentication requests?

I'm attempting to configure FreeRadius to work with Dynamic VLAN Assignment. What I'm attempting to do, is return a specific VLAN ID for known hosts, but return a default VLAN ID for unknown hosts. ...
0
votes
1answer
301 views

freeradius authenticate over ldap log files

when config free-radius to authenticate over ldap where are the log files that store usernames and other connected client info? excuse me for my bad English.
0
votes
1answer
2k views

pam_auth_radius - RADIUS users vs unix users

I have recently set up a server with FreeRADIUS to authenticate and keep track of admin logins on some of my devices. I'm looking at getting my Linux and FreeBSD machines authenticating against ...
0
votes
1answer
730 views

OpenBSD logins via SSH seem to be ignoring my configured radius server

I've installed and configured a radius server upon my localhost - it is delegating auth to a remote LDAP server. Initially things look good: I can test via the console: # export user=skemp # export ...
4
votes
2answers
435 views

Login-time quota for VPN users

I have configured Routing and Remote Access Service in Windows Server 2003 as the VPN server. VPN users are defined in Active Directory which is running on this server too. How i can configure the ...
4
votes
1answer
3k views

Configuring RADIUS or LDAP on Supermicro (ATEN) IPMI

I'm trying to get our new server, a X8DTN+-F's IMPI configured to talk to our authentication servers. The two choices are LDAP and RADIUS. I'm debugging this by looking at packet captures, as it ...
1
vote
1answer
329 views

FreeRADIUS Default Answer

We are using FreeRADIUS with a MySQL database, authenticating users. We ran into an issue where are MySQL database was slow causing the max number of threads to be reached. The issue with this is, ...
0
votes
1answer
524 views

How would I relay/proxy/mirror RADIUS from one server to another?

Scenario... I have a Windows Server 2003 box acting as a RADIUS server that is connected to my AD in network A. I have network B which is not connected to network A. Can I install something on a ...
4
votes
2answers
7k views

Is it possible to use WPA Enterprise Mode without having to use or issue certificates?

Scenario... I have a wireless network that students use for Internet access. Each student has an Active Directory account. Is it possible to configure my APs to require them to use there AD ...
2
votes
4answers
127 views

How can I revoke access for a user across different systems?

We are going to let one of our sysadmins go in a few weeks. He has access to our entire infrastructure, so we'll have to reset the passwords on everything. This is going to be really time consuming ...
1
vote
2answers
1k views

How to set Windows to use an external RADIUS server for user authentication to share folder?

Is it possible and if so how, to make users use an external RADIUS server to connect to Windows shares?
2
votes
1answer
6k views

Users loggin to 3Com switches authenticated by radius not getting admin priv and no access available with radius service down

Following the setup that I have for my Cisco devices, I got some basic level of functionality authenticating users that loggin to 3Com switches authenticated against a RADIUS server. Problem is that I ...
2
votes
2answers
124 views

RADIUS Protocol - Sending more than 255 bytes in vendor-specific field

I am using the RADIUS protocol to for sending some values from client to server. I am using vendor specific value pairs, and defining our own types. But the value length for Vendor-specific data is ...
1
vote
1answer
109 views

Vista Enterprise doesn't find logon servers in a network with 802.1x authentication

In a network with 802.1x configuration and a samba server configured in the domain, I have a radius server that delegates the authentication against the samba domain for users (using LDAP). The radius ...
1
vote
2answers
8k views

configure a Cisco ASA to use MS-CHAP v2 for RADIUS authentication

Cisco ASA5505 8.2(2) Windows 2003 AD server We want to configure our ASA (10.1.1.1) to authenticate remote VPN users through RADIUS on the Windows AD controller (10.1.1.200) We have the following ...
1
vote
1answer
3k views

Windows XP login using Radius authentication

I would like to use existing Radius server to provide AAA for users which are logging to a Windows XP machine. Cisco can use Radius, Linux (via PAM) as well, is it possible for Windows XP?
2
votes
1answer
2k views

NPS will not add Radius client

I've just installed a fresh copy of NPS on a new 2008 R2 Std server. When I go to add a Radius client, I get "NPS Error: The service being accessed is licensed for a particular number of connections. ...
1
vote
2answers
894 views

8021x wireless clients auto connect prior to user login

I am using a 2008 r2 dc that also performs Radius (NPS), I also have a 2008 r2 certificate authority which is giving out certificates. The computers are getting the certificate and when a user logs ...
1
vote
2answers
5k views

RADIUS authentication on Cisco switches: how to assign privilege levels?

I need to configure some Cisco switches (IOS 12.x) to authenticate against a RADIUS server; the server is Windows Server 2003's IAS, and it validates users against his Active Directory domain. I know ...
0
votes
2answers
2k views

VPN Router + LDAP/RADIUS?

I need a VPN-capable router, preferably with a web interface, that should be able to authenticate against my LDAP server which is behind the router. I'm utterly unable to configure that setup for the ...
0
votes
2answers
2k views

PPPoE and FreeRadius

We have a number of wireless clients using ubiquity radios that support PPPoE. The number of connected clients is currently sitting around 20. But this is increasing rapidly and we want better ...
1
vote
2answers
5k views

Certificate Authority - RADIUS/WPA

We have a problem with our Certificate Authority, it deletes its own Computer Certificate day-by-day. I implement a WPA wireless security via RADIUS standard with using that computer. So everyday I ...
1
vote
1answer
3k views

Is there a way to allow all external ip connections in FreeRadius?

I have a problem setting up FreeRadius server to allow connections from all external IP addresses. My hotspot system is based on CoovaAP and custom made captive portal which communicates with ...
4
votes
5answers
5k views

Central Authentication For Windows, Linux, Network Devices

I'm trying to find a way to centralize user management & authentication for a large collection of Windows & Linux Servers, including network devices (Cisco, HP, Juniper). Options include ...
8
votes
4answers
900 views

Wireless AAA for a small, bandwidth-limited hotel

We (the tech I work with and myself) live in a remote northern town where Internet access is somewhat of a luxury, and bandwidth is quite limited. Here, overage charges ranging from few hundreds, to ...
0
votes
1answer
731 views

radius traffic accounting - what attributes do I use for traffic (and how)

we are building a web front end for a internet access token management system that uses radius (freeradius) queried from a captive portal. Reason for building this part is the integration into the ...
2
votes
1answer
994 views

Radius + SSH Key Authentication

Does anyone know if it is possible to configure pam to require both radius AND ssh-key to successfully authenticate ?
0
votes
3answers
700 views

Radius server benchmark

I wrote some module for FreeRadius and need to check it's performance. Using radclient is not OK because radius server is multi threaded and radclient not - it waits for an answer for previous request ...
1
vote
1answer
2k views

How to monitor freeradius using EAP-MSCHAP v2 authentication method with Nagios?

How to monitor freeradius using EAP-MSCHAP v2 authentication method with Nagios? Do you know any nagios plugins for such monitoring?
2
votes
1answer
2k views

IAS migrate from 2003 server to 2008 r2

I have recently upgraded all our DC's from 2003 svr to 2008 r2 servers. I had a radius server in the existing environment for 8021x authentication. I successfully exported the configuration to a text ...
0
votes
1answer
556 views

How to export MS IAS Radius Login Events to a remote system

Is there a way to (export|pull) MS IAS radius login events (to|from) a remote system ? I can see that the logs are stored in plain text in a file called system32/logfiles/nap On the Windows 2008 ...
1
vote
2answers
2k views

802.1X EAP authentication in Cisco switches with certificate

I am currently planning to implement 802.1X authentication for all the wired computers at the office where I work at currently. We have successfully implemented 802.1X authentication with ...
0
votes
1answer
497 views

Linux: Chilispot or FreeRadius

Has anybody installed Chilispot or FreeRadius on Ubuntu? If yes, where are the traps? How is your experience? Peace Ice
0
votes
2answers
2k views

Can I Specify an Existing ACL using a Radius AV Pair?

I am able to specify access-lists for VPN users on my IAS radius server using avpairs like: Cisco-AVpair = "ip:outacl[#number]={standard-access-control-list | extended-access-control-list}" So for ...
1
vote
3answers
4k views

Are Reversibly Encrypted Passwords safe, and Why isn't it working when enabled for a user?

In my event log, when my router tries to use Radius to authetnicate I get the following: """The user could not be authenticated using Challenge Handshake Authentication Protocol (CHAP). A ...