Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

learn more… | top users | synonyms

4
votes
0answers
93 views

How do I get as much debugging info as possible out of the Network Policy Server (ias) service?

We are trying to authenticate a client on remote vpn, through a Meraki Z1 teleworker appliance. The Z1 is sending a proper request, the Network Policy Server (ias) service is apparently ...
4
votes
0answers
144 views

SuperMicro IPMI using Windows-based RADIUS (NPS)

I'm struggling to use a Windows-based RADIUS setup (Network Policy Server) with SuperMicro IPMI interfaces. I've found that I need to add vendor-specific attribute H=4, I=4 (Appendix C in the ...
3
votes
0answers
53 views

Authentication and logging of users for a Wireless ISP?

I have to upgrade a Wireless ISP's (WISP) network. Their current setup consists of a router (Mikrotik RouterBoard 1100AHx2), Ubiquiti Rockets (with sector antennas) for clients, and Ubiquiti ...
3
votes
0answers
358 views

Windows machines cannot connect to Radius Wifi

Environment Background: 4 Domain Controllers, DC01 DC02 DC03 DC04 DC01 is my PDC DC02 is my NPS Server The other two are load balancing and site specific. I'm using a Ruckus Zone Director with Ruckus ...
2
votes
0answers
310 views

Macs to work on 802.1X wired network

We are in the process on 802.1X for all our wired clients. We are using NPS on Server 2008R2 as our Radius server. All our windows clients authenticate using just a computer certificate issued by our ...
2
votes
0answers
692 views

Windows 7 / Windows Vista won't connect to 802.1x RADIUS Server

I've deployed Radius and have no problems connecting with TTLS, PEAP, or MD5 using linux, mac, and windows xp. For Windows 7 and Vista, I'm never prompted with the dialog box to enter username & ...
2
votes
0answers
1k views

Coovachilli Mac Authentication

I'm running coovachilli 1.2.5 and want to use mac authentication. I'm using --macauth --macreauth --macpasswd macpass in my command line. Based on tcpdump, and on my radius log, my MAC address is ...
1
vote
0answers
26 views

local user cannot login while RADIUS is configured on Cisco Switch 3745

I've configured RADIUS on my switch as below: aaa new-model ! aaa authentication login default group radius local aaa authorization exec default group radius local ! radius-server host ...
1
vote
0answers
122 views

NPS/RAIDUS Authentication for Wifi and certificates for non trusted server

I'm trying to setup an NPS server as RADIUS server for Wifi network of employers of my company. All mobile devices could connect to this networks using their domain user/pass. My problem is to let ...
1
vote
0answers
16 views

Network Policy not evaluated for forwarded authentications

I'm having a problem with NPS connection policies in combination with forwarded RADIUS requests - the connection policy does not seem to be evaluated? Our domain has several one-way trusts. I have a ...
1
vote
0answers
91 views

Same VLAN for LAN only and Internet users on 802.1x network with pfSense as gateway

I am creating an ISP for a student residence. The LAN is already there and working, with several CISCO switches. I want to provide Internet by a secured and automatic way to those who pay for it ...
1
vote
0answers
145 views

Using airport extreme as an AP with true bridge mode (forwarding 802.1x auth)

So here is my setup. I have a Router (Fortigate) 4 airport Extreme, and a radius/ldap server on a distant server. I want my user to authenticate with the radius or LDAP server, and be able to create ...
1
vote
0answers
101 views

Authenticating devices instead of users via PEAP/Radius

Our Cisco Aironet AP uses Radius to authenticate against our Active Directory via our Network Policy Server (NPS). For my users, on their domain-managed laptops and BYO devices (such as laptops, ...
1
vote
0answers
188 views

NPS RADIUS authentication fails due to user account

We're in the process of migrating our wireless network, adding in 802.11x-based RADIUS authentication. The set up is as follows: Client connects to router01 Client authenticates through RADIUS on a ...
1
vote
0answers
582 views

FreeRadius Error reading /etc/freeradius/huntgroups

I've configured freeradius to use sql, everything was working fine, I was doing some tests with the users, and suddenly I cannot start the debugger because of this error : rlm_preprocess: Error ...
1
vote
0answers
169 views

£ sign in password fails Windows NPS Radius authentication against Sonicwall SRA

We have a Sonicwall SRA server configured to authenticate users using RADIUS to a Windows NPS Server running on Windows Server 2012 R2. It all works fine EXCEPT when passwords contain the "£" ...
1
vote
0answers
57 views

Troubleshooting 802.1x authentication issue relating to signal strength

My setup: Windows 2008 R2 server with the NPS role configured for RADIUS _PEAP/MSCHAPV2. I have a WPA2 Enterprise network configured on the Ubiquity controller. 3 Ubiquity UniFi LR access points. ...
1
vote
0answers
397 views

Server 2008 RADIUS on auth non-domain computers

I have read a few articles about the web regarding this, but I seem to be unable to find a definitive answer for my question. I have an Aruba Networks controller configured to hit a RADIUS server ...
1
vote
0answers
1k views

How do I set up an 802.1X infrastructure for use with OS X and iPads?

At my workplace I have been tasked with setting up machine certificate based 802.1X wireless authentication for our Apple devices. It seems like on the client side this will be handled by Profiles ...
1
vote
0answers
153 views

Checking Statement of Health (NAP) info on Linux using Dhcp and Radius

I have a Linux DHCP server and windows clients. I want my DHCP server to assign an IP address from a network let's say 10.6.3.0/255.255.255.128 if the client has it's firewall enabled or an IP address ...
1
vote
0answers
792 views

FreeRadius external authenification script

I am trying to configure FreeRadius to work with my external authentification script. I have a custom module exec myscript { wait = yes shell_escape = yes program = ...
1
vote
0answers
148 views

authentication of VM's using PPPoE

I have two VM's running on Ubuntu box.Their name and IP addresses are give below. nas 192.168.129.153 home_user 192.168.129.152 I establish a ppp connection ...
1
vote
0answers
669 views

LOCAL and RADIUS authentication on ASA

Have configured local authentication which was working fine.And today I wanted to implement RADIUS too .. but after I have done, Im unable to login to my firewall user-identity default-domain LOCAL ...
1
vote
0answers
250 views

Radius “Splash” Page?

I'm using 802.1x authentication via RADIUS on Windows Server 2008 R2 for my college's wifi network (for faculty and staff only to start). The problem is, students keep trying to log in and are ...
1
vote
0answers
2k views

Cisco Remote Access VPN authenticating via RADIUS over Site2Site VPN

Is it possible to setup the remote access VPN to athenticate to a RADIUS server that is on the other end of a Site to site VPN on the same ASA? I have an ASA 5505 that is at a branch office with a ...
0
votes
0answers
12 views

High load and Cpu on Radius server- Supplicant issue?

We have a Wireless Lan controller set to authenticate users against (Lucent) Radius server. The username and password is stored in a database. About once a week the cpu on the radius/java process ...
0
votes
0answers
21 views

supermicro ipmi radius attributes

Referencing this old question: Configuring RADIUS or LDAP on Supermicro (ATEN) IPMI Supermicro isn't in FreeRadius's vendor dictionary. So how do I add these attributes and get Supermicro IPMI to ...
0
votes
0answers
7 views

Cisco VWLC redirect page without authentication, radius or dhcp?

I have a virtual Cisco CMX sytem for the tracking of customers in a smalland a virtual Wireless Lan Controller also from cisco, in it's webconfigure I can choose for it to redirect to a webpage we ...
0
votes
0answers
10 views

Multi-factor auth with Kerberos and RADIUS

I am looking for a solution in order to allow a multi-factor authentication for a Kerberos-based logon service. By reading some articles, I found some good references about RADIUS, that provides a set ...
0
votes
0answers
16 views

Setting up Cisco ASA VPN to use both radius and local users

I've got a Cisco ASA setup with L2TP/IPSec VPN, all is working well except for one minor issue. Ideally, I'd like to be able to log on to the VPN using either that RADIUS server users or the local ...
0
votes
0answers
30 views

User-Password is not sent with RADIUS request

I am trying to get my router wifi to authenticate the username and password from an LDAP database on my ubuntu server. I followed the steps mentioned in this tutorial: ...
0
votes
0answers
23 views

RADIUS + LDAP + Cisco router 1941

I have a unique setup in my data center where I have configured a Radius with LDAP for authentication and authorization in my cisco 1941 router for remote IPSEC vpn users. This works fine and dandy. ...
0
votes
0answers
22 views

Use mail attribute for 802.1x RADIUS authenticatioon with Microsoft NPS

We have run a Cisco WiFi network that uses 802.1x to authentication logins against Active Directory. Employees login using their UPN prefix, and all works well. For various reasons we'd like users ...
0
votes
0answers
18 views

RADIUS servers at different sites (member servers at each site) - roles on each server

I have successfully set up a Windows Server SBS 2011 RADIUS server and it works well with our DrayTek router to authenticate domain joined workstations to our office wireless (so that only trusted ...
0
votes
0answers
6 views

NPS with Microtik Routerboard 750GL

I want to configure Microtik Routerboard 750GL with NPS to grant access to Internet for our wifi clients. Clients need to be authenticated via active directory using nps. I have configured routerboard ...
0
votes
0answers
53 views

Freeradius Authentication Fails only from Wireless router and works with radtest

I have installed and configured freeradius 2. When I test my freeradius installation using radtest, everything works fine. Locally The test command I executed was this one: radtest mario thepass ...
0
votes
0answers
199 views

Windows Server 2012R2 RADIUS (wifi) clients won't accept bought wildcard certificate

I've been managing the NPS Server for a while and thought it was time to treat it a valid SSL certificate. The setup I bought a wildcard SSL certificate from comodo, compiled it to an .pfx ...
0
votes
0answers
46 views

Windows NAPS RADIUS server rejecting client

I have a Windows 2012 R2 VM with NAPS installed. I also have a Zyxel ASA and an AP that are configured to authenticate over RADIUS for one particular SSID. In the logs, I'm seeing that the ASA is ...
0
votes
0answers
31 views

Protocol used between a RADIUS client and a computer?

I can't find documentation about the protocol used when a computer wants to reach a network with 802.1x. RADIUS client (switch, access point) use UDP/1812-1813 to communicate with RADIUS server. How ...
0
votes
0answers
64 views

Purchasing a certificate for Freeradius / WPA-Enterprise

I'm moving my WiFi to WPA-Enterprise, using a Freeradius server that authenticates with our Samba 4 directory. I'm currently using a self-signed certificate, but want to move to a purchased ...
0
votes
0answers
128 views

Server 2012 NPS Server not authenticating IKEv2 requests

I am having a weird problem regarding NPS Server when I upgraded my vpn servers from server 2008 R2 to Server 2012 R2. Actually in my infrasturcture I have a Windows 2008 R2 based AD and in its domain ...
0
votes
0answers
56 views

Creation of a guest Wireless network 802.1X - easy to configure out of the box on clients (android, ios, computers,..)

I would like to create a Guest wireless network with 802.1X (WPA enteprise). On the client side, it must be easy to configure, so the users can enter a login and password during the authentication ...
0
votes
0answers
17 views

'Generic' Certificates for RADIUS authentication/Encryption (weird?)

Situation: I have a test environment with Server 2008 that's a DC and has NPS for RADIUS authentication/encryption for wireless, and AD CS installed for the self signed cert. As it stands now, my ...
0
votes
0answers
32 views

How does EAP-SIM and RADIUS work together?

I would like to know how does EAP-SIM and RADIUS work together. Assume we have something like this: [client-1]----+ | [client-2]----+----[AP]----------[RADIUS Server]------------[HSS] ...
0
votes
0answers
41 views

Unable to use Radius server out of LAN

I want to set up WPA2 Enterprise for my TP-Link TL-WR886N router (official firmware). Tried to use an radius server in LAN and it is working. Since the power supply is not steady (I have UPS for the ...
0
votes
0answers
87 views

OpenVPN + FreeRADIUS Authentication Error

Trying to set up a OpenVPN server with FreeRADIUS server running on the same machine. All servers are running but I'm getting errors with authentication when the end user logs on VIA OpenVPN client. ...
0
votes
0answers
290 views

Error using SHA256 certificate for RADIUS server for use with Ubuntu Unifi/Wireless 802.1x 802.11 network

We have an established wifi network with Unifi, setup as wpa2-enterprise with a Windows Server 2008 R2 RADIUS host. Our CA server crashed, which didn't seem to cause any trouble with phones ...
0
votes
0answers
125 views

specific IP Attribution with isc-dhcp-server with freeradius authentication

I would like to assign specific address to my clients, regarding their radius authentication. For exemple, user1 (group user) authenticate on radius, dhcp gives him 192.168.1.1 as IP user2 (group ...
0
votes
0answers
77 views

An error occured during the Network Policy Server use of Extensible Authentication Protocol

It has been almost two weeks to get my radius server up and running. I think i have run in almost to all the issue known to Radius :). Am guessing this to be a Certificate issue, Please go through ...
0
votes
0answers
176 views

RADIUS server does not call a custom script

I do have a RADIUS server which called a custom script for authentication in the past. In the /etc/freeradius/sites-enabled/default, I modified the following lines to archieve this: authorize{ ...