Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

learn more… | top users | synonyms

0
votes
1answer
802 views

freeradius address assignment from ippool

I'm trying to figure out how to assign IP addresses from an ippool to mobile units. Ideally, I would like a unit to receive the same IP at each request. There is no data source to use to populate ...
0
votes
1answer
478 views

WPA2-Enterprise and RADIUS accounting server

Is mandatory to use WPA2-Enterprise to be able to send accounting packages to my RADIUS server from an access point (Meraki)?
2
votes
2answers
944 views

Meraki's Accounting-Requests to RADIUS server

I'm running a RADIUS server with some Meraki APs, the process of Authentications is fine... But it seems that the Meraki Cloud Controller is just sending the authentication packets and not the ...
3
votes
1answer
4k views

Sign an OpenSSL .CSR with Microsoft Certificate Authority

I'm in the process of building a Debian FreeRadius server that does 802.1x authentication for domain members. I would like to sign my radius server's SSL certificate (used for EAP-TLS) and leverage ...
7
votes
7answers
11k views

Why would you use EAP-TTLS instead of PEAP?

As I understood EAP-TTLS and PEAP share same level of security when implemented in wireless networks. Both only provide server side authentication via certificate. The drawback of EAP-TTLS can be ...
1
vote
2answers
1k views

Radius over WAN

I have a couple of small-business routers (Cisco RV120W) that I use at some of our smaller offices configured with a site-to-site VPN to allow connectivity for devices & such between my main ...
1
vote
2answers
2k views

Windows XP will not connect to Enterprise Wireless

We run a Radius server (Windows Server 2008 R2 running NPS). My goal is to push out GPOs to wireless users with the network information. I am successfully doing this with Windows 7 clients, iOS ...
-1
votes
2answers
190 views

RADIUS hardware on the client side?

From the wikipedia page on RADIUS: http://en.wikipedia.org/wiki/RADIUS It says: RADIUS is a client/server protocol that runs in the application layer, using UDP as transport. The Remote Access ...
3
votes
1answer
963 views

Is a PKI required when authenticating a Cisco Aironet AP via radius against AD

We're a small office and have a Cisco Aironet 1250 access point set to WPA-PSK. Now that we've deployed Active Directory I'd like start authenticating my users via radius instead of a PSK. To this ...
2
votes
0answers
719 views

Windows 7 / Windows Vista won't connect to 802.1x RADIUS Server

I've deployed Radius and have no problems connecting with TTLS, PEAP, or MD5 using linux, mac, and windows xp. For Windows 7 and Vista, I'm never prompted with the dialog box to enter username & ...
3
votes
1answer
4k views

Testing radius server from Mac OS X client

I have a radius server set up on a server running Ubuntu 11.04. I have configured my switch to use the authentication server's IP (192.168.1.2) for RADIUS / 802.1x authentication, and I created a ...
0
votes
1answer
2k views

How to limit a VPN user to just one host?

I have a Cisco ASA that authenticates off of RADIUS / AD. I need to give a user VPN access but I want to limit their access to only one host. What is the best way to do this?
0
votes
1answer
345 views

RADIUS work flow

I am attempting to create an authentication system for my network via Radius. Eventually, I want all machines on the network to authenticate with Radius before gaining access to any other network ...
3
votes
1answer
77 views

Is there such a thing as “server sliding” (or similar), and if so, what is it?

I am not a network engineer, but rather a translator, so I apologize in advance if this is a rather obvious question to some of you. Normally Google can answer my questions, but in this case I'm ...
0
votes
2answers
590 views

Make user home directory at gdm login

I'm trying to make home directory at (RADIUS) user gdm login. The auth is working right, but when I try gdm says that the user hasn't a home directory. I tried to do that with pam_mkhomedir.so but ...
1
vote
0answers
254 views

Radius “Splash” Page?

I'm using 802.1x authentication via RADIUS on Windows Server 2008 R2 for my college's wifi network (for faculty and staff only to start). The problem is, students keep trying to log in and are ...
3
votes
2answers
15k views

Why would NPS suddenly stop authenticating users?

We use a computer running Windows Server 2008 (32-bit) with the RRAS and NPS roles to authenticate users for VPN and wireless access over RADIUS. This configuration has been working great for more ...
7
votes
1answer
5k views

Third Party Wildcard Certificates for use with Microsoft NPS / RADIUS / PEAP

I want to replace the SSL certificate that is used for PEAP on our NPS server that is doing RADIUS authentication for our Cisco WLCs. The current certificate is a SSL certificate that does Client ...
1
vote
1answer
940 views

How do I setup dynamic VLAN assignment on an autonomous Cisco 1142n?

I've gotten my Cisco 1142n autonomous AP configured with every option under the sun, but I still can't get dynamic VLAN assignment working! I verified the following: I give priority to VLAN ...
5
votes
4answers
778 views

Radius feedback from AP to WiFi client

We have the following setup at our company: a gateway PC with CentOS (gw), running Radius and some traffic filtering programs. All of our employees connect wirelessly, and we have a WPA2 Enterprise ...
2
votes
1answer
300 views

Mac address filtering radius server

I would like to use the radius server on mac os x server (10.6.8) to allow users to access wireless. However the restriction i would like to use is Mac address filtering. Is this possible? how can i ...
0
votes
1answer
1k views

Radius authentication for OpenVPN in pfSense

I have a pfSense Firewall with OpenVPN against RADIUS Server configured in a Windows Server 2008 R2. The RADIUS server is configured in pfSense, but when I try the Authentication (Diagnostics -> ...
2
votes
2answers
5k views

Problem with network policy rule in Network Policy Server

Trying to configure RADIUS for a college network, and have run into the following frustration: I can't set an "AND" condition for group membership of authenticated objects in the network policy ...
8
votes
2answers
3k views

Smart card authentication to a Cisco switch?

We have our Cisco network devices configured to authenticate network administrators using their domain accounts via RADIUS running on a Windows 2008R2 server with the network protection role. This ...
0
votes
2answers
2k views

Configuring Cisco Switch and ASA/VPN devices to authenticate with W2008R2 NPS RADIUS

I am currently having issues with being able to authenticate with RADIUS from our Cisco devices…it seems to partially work but I’m missing something apparently, hoping some experts can point me in the ...
2
votes
0answers
1k views

Coovachilli Mac Authentication

I'm running coovachilli 1.2.5 and want to use mac authentication. I'm using --macauth --macreauth --macpasswd macpass in my command line. Based on tcpdump, and on my radius log, my MAC address is ...
0
votes
1answer
1k views

Where can I find the users file for FreeRADIUS in Ubuntu?

I'm using Ubuntu 10.10. I'm trying to learn how to configure a RADIUS server, but I'm having trouble with creating new users to authenticate. Almost all of the tutorials I've found online mention ...
0
votes
2answers
599 views

RADIUS against IMEI

I have a base of users that use mobile devices to access back to the office. there is already lots of existing security. however I would like to add some form of RADIUS authentication on the firewall ...
1
vote
1answer
947 views

How does one guarantee a remote client the same local IP address every time when connecting to a VPN?

I need to configure a VPN for secure remote access to a PACS serving DICOM radiological images. The DICOM standard requires that any clients accessing the PACS must be using a fixed IP address that is ...
1
vote
2answers
1k views

Cannot register RADIUS server in Active Directory, Windows Server 2008 r2

I'm trying to set up a RADIUS server in Windows 2008 R2 following the guide Install Windows 2008 R2 NPS for RADIUS Authentication for Cisco Router Logins. What I can't do is to register the RADIUS ...
1
vote
0answers
2k views

Cisco Remote Access VPN authenticating via RADIUS over Site2Site VPN

Is it possible to setup the remote access VPN to athenticate to a RADIUS server that is on the other end of a Site to site VPN on the same ASA? I have an ASA 5505 that is at a branch office with a ...
0
votes
3answers
2k views

Need to setup a RADIUS server to authenticate a Windows client to a Windows server

I have a server that I have technicians who need to be able to access using shared credentials. However, doing that violates our security policy (!). I need each user to be able to authenticate ...
0
votes
1answer
86 views

Running Radius on a Novell Backbone

I am a rookie network engineer and I've been asked to create a secure wireless system intergrated with an existing network. So far I'd decided to use 802.1x secuity with a Radius enabled server over a ...
0
votes
1answer
654 views

Lotus Notes & Domino RADIUS Integration

Does anyone know if it's possible to have Lotus Notes & Domino do external authentication via RADIUS? Specifically to integrate a 2FA solution.
0
votes
1answer
1k views

DD-WRT + TekRADIUS: Having issues getting it to work

Has anyone else gotten it to work? My setup: Router: Netgear WNR3500v2 WAN IP: y.y.y.y Radius: off Wireless Security: Security Mode: WPA2 Enterprise WPA Algorithms: AES ...
1
vote
2answers
670 views

Can a device (WAP or switch) be configured as an 802.1x supplicant?

We are looking at implementing 802.1x on a wired/wireless network. What I am looking for is a device that can act as a supplicant and once authenticated on the network, is able to pass traffic from ...
3
votes
3answers
8k views

How to integrate RADIUS with Kerberos?

We've got properly configured LDAP+Kerberos on our wired network. Now we want our users to log in to our WiFi network by using their normal credentials. I've found lots of HOWTOS about LDAP+RADIUS ...
1
vote
1answer
798 views

Using arpwatch to backtrack proxy access ip to eap-tls certificate

In my network I am using eap-tls authentication (machine certificates) for clients. Those clients are using a squid proxy to access the internet. The proxy is logging the request to the access.log. ...
1
vote
2answers
225 views

MAC spoofing - keeping the connection alive

Is it possible to keep a connection alive, while spoofing/changing the MAC address of your own network adapter (especially wlan adapter), without needing to re-authenticate against 802.1X ...
0
votes
1answer
199 views

Will RADIUS allow me to have authentication from an SBS domain in a 2003 domain?

I'm no RADIUS expert. But my understanding is that RADIUS can use Active Directory as a 'realm' to authenticate. This got me thinking - We have 3 separate clients in one building, and we manage the ...
1
vote
3answers
4k views

Windows RADIUS Server: Sync between RADIUS servers?

We will be setting up a tertiary RADIUS server at a remote site. Up until now, changes to the RADIUS database has been done manually, since it was only 2 servers. With a third one coming online, I ...
1
vote
1answer
3k views

Need help getting Dynamic VLAN Assignment working with RADIUS and Dell PowerConnect 3524

I'm attempting to get Dynamic VLAN Assignment working on a number of Dell PowerConnect 3524 switches. I've got a two RADIUS servers, both of which I've proved to be working using radtest on Linux. ...
0
votes
1answer
17k views

How to configure FreeRadius to accept all authentication requests?

I'm attempting to configure FreeRadius to work with Dynamic VLAN Assignment. What I'm attempting to do, is return a specific VLAN ID for known hosts, but return a default VLAN ID for unknown hosts. ...
0
votes
1answer
330 views

freeradius authenticate over ldap log files

when config free-radius to authenticate over ldap where are the log files that store usernames and other connected client info? excuse me for my bad English.
0
votes
1answer
2k views

pam_auth_radius - RADIUS users vs unix users

I have recently set up a server with FreeRADIUS to authenticate and keep track of admin logins on some of my devices. I'm looking at getting my Linux and FreeBSD machines authenticating against ...
0
votes
1answer
782 views

OpenBSD logins via SSH seem to be ignoring my configured radius server

I've installed and configured a radius server upon my localhost - it is delegating auth to a remote LDAP server. Initially things look good: I can test via the console: # export user=skemp # export ...
4
votes
2answers
470 views

Login-time quota for VPN users

I have configured Routing and Remote Access Service in Windows Server 2003 as the VPN server. VPN users are defined in Active Directory which is running on this server too. How i can configure the ...
5
votes
1answer
3k views

Configuring RADIUS or LDAP on Supermicro (ATEN) IPMI

I'm trying to get our new server, a X8DTN+-F's IMPI configured to talk to our authentication servers. The two choices are LDAP and RADIUS. I'm debugging this by looking at packet captures, as it ...
1
vote
1answer
365 views

FreeRADIUS Default Answer

We are using FreeRADIUS with a MySQL database, authenticating users. We ran into an issue where are MySQL database was slow causing the max number of threads to be reached. The issue with this is, ...
0
votes
1answer
631 views

How would I relay/proxy/mirror RADIUS from one server to another?

Scenario... I have a Windows Server 2003 box acting as a RADIUS server that is connected to my AD in network A. I have network B which is not connected to network A. Can I install something on a ...