I have a closed network for security cameras. I want only for authorized cameras to be able to connect to the Network Switch. If the Switch supports 802.1x authentication, and so do the cameras, could I use a RADIUS Server to control access of these cameras to the network?

What I want to achieve is that when a security camera that is not registered in the RADIUS Server connects to the Switch, it doesn't get access (the Switch port denies the connection), so it gets no access at all.

Note that there's no users logging in at any point, just the cameras connecting to the Switch.

  • Yes, that's what a RADIUS server does. – Michael Hampton Jul 28 '16 at 22:42
  • @MichaelHampton I have been searching for information on the web, but all I find are examples when the RADIUS is part of a Domain, and there are users logging in (e.g. Wireless AP). Could you please shed some light on how could I do what I wrote in my question? – HelloExchangers Jul 28 '16 at 22:49
  • It'd help if you described what type of computers/network you're using. Within Windows, one option is NPS, but that requires Active Directory for a user database. You create a service account in your AD, and then configure the device to use those credentials to authenticate to the switch. In Linux, FreeRADIUS seems to be a popular choice, with a wider range of sources. – DarkMoon Jul 28 '16 at 23:09
  • @DarkMoon The thing is that there's no Active Directory nor there are computers in this network. I only have a Windows Server 2012 R2 with RADIUS Server features installed. The other network components are the Switch(es) and the Security Cameras, and that's it. Can I still use RADIUS to permit access to the cameras connecting to the Switch(es)? – HelloExchangers Jul 28 '16 at 23:14

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.