Questions tagged [802.1]

IEEE Standard for port-based Network Access Control

Filter by
Sorted by
Tagged with
41 votes
5 answers
88k views

What is the maximum length of a wifi access point's SSID?

I was wondering if anybody knew what the maximum string length of a browser's SSID is or where I could go to look for that sort of information. (From a spec of some sort)
leeand00's user avatar
  • 4,919
29 votes
3 answers
17k views

What happens when a consumer switch receives a VLAN-tagged Ethernet frame?

Suppose you connect a trunk port from a VLAN capable network switch to a (VLAN incapable) consumer-grade network switch via a direct cable. Now the former switch send the later switch a 802.1Q-tagged ...
netvope's user avatar
  • 2,133
22 votes
4 answers
2k views

Do wifi packets go directly node to node?

I have two nodes on a wireless network. Node A is streaming data to node B. Most of the time it works fine, but sometimes there is packet loss and the stream is interrupted. To improve performance ...
Richard's user avatar
  • 331
17 votes
8 answers
53k views

What's the difference between a bridge and a switch?

I can't find any authoritative source that can concisely explain the difference between a bridge and a switch. As far as I can tell, most devices commonly referred to as "switches" fit the description ...
Dan Moulding's user avatar
11 votes
1 answer
20k views

linux 802.1x on a windows wired network

I'm looking to use my linux workstation on our company network, but i've been running into a few issues, specifically 802.1x i believe. I'm root on my machine and a windows domain admin so i should ...
Sirex's user avatar
  • 5,557
9 votes
3 answers
8k views

Cisco and Linux and Vlans

I appear to have some fundamental misunderstanding of how VLANs work on Linux, and I'm hoping the good people here can educate me. Cast: One Cisco 3560, one VLAN, and one Linux box [1]. Cisco -----...
Darren H's user avatar
8 votes
1 answer
89k views

What is the reason CSMA/CD can't be used on a wireless network? [closed]

I'm new to wireless networking and wondering why the same Collision Detection mechanisms used for Ethernet can't be applied to WiFi. I think I'm starting to understand, but not sure if I've got it: ...
Ian Muscat's user avatar
8 votes
3 answers
3k views

Load testing wireless LANs

Anyone have any suggestions for methods of load-testing wireless networks for enterprise network deployments? We've got a wide array of different wireless worst-case scenarios to support. rooms ...
chris's user avatar
  • 12k
7 votes
4 answers
2k views

Wireless technology - which is better: more single radio APs or less dual radio APs?

We are currently talking to vendors of wireless solutions for a wireless deployment in a university campus with some 5000 students. One vendor is offering us a Cisco solution with a WLC 5508 ...
gert_78's user avatar
  • 109
7 votes
1 answer
21k views

Testing radius server from Mac OS X client

I have a radius server set up on a server running Ubuntu 11.04. I have configured my switch to use the authentication server's IP (192.168.1.2) for RADIUS / 802.1x authentication, and I created a ...
Calvin Froedge's user avatar
7 votes
3 answers
39k views

802.1x automatically validate certificate in windows clients

We're deploying a wireless networking using Windows Server 2008 NAC as a RADIUS server. When Windows XP or 7 clients connect they initally fail to connect. In order to enable the client to connect we ...
Jona's user avatar
  • 746
7 votes
2 answers
9k views

PXE in an 802.1X environment

My organization is about to implement 802.1X on our enterprise, but we currently use PXE-based OS deployment sequences in SCCM. I'm looking for a way to continue using PXE in an 802.1X environment. ...
newmanth's user avatar
  • 3,943
7 votes
2 answers
1k views

Network Policy Server Granular Time Restrictions

I am configuring NPS as a RADIUS authentication source for my wireless clients. I am trying to differentiate between school hours and after hours as I need to connect certain users to a different ...
Littlejon's user avatar
  • 243
7 votes
1 answer
6k views

802.1x computer authentication using hostname instead of cert

My configuration includes: Cisco ACS as RADIUS server, MS AD, MS PKI, Cisco 2960G switches. Workstations are 95% XP Pro SP3 fully patched, some 7 pro fully patched. Computer cert autoenrollment ...
Paul Ackerman's user avatar
6 votes
3 answers
387 views

Cisco Dot1x Port Authentication - VLAN selected based on what domain the user logs on to on computer?

Currently my company has been bought out by another. Due to this, another two companies users will be migrating into our office. It would be super handy if we could have the vlan chosen for the user ...
Lance's user avatar
  • 281
5 votes
3 answers
3k views

Can a non-VLAN-aware switch pass 802.1q tagged packets?

Let's say I have a incoming connection which is fixed 1Gb/s with tagged packets. And lets say that I need to connect that connection to a device which is a 10/100 device, which deals with the tagged ...
David Mackintosh's user avatar
5 votes
3 answers
2k views

How to get decent WiFi despite a virtual Faraday cage

One of my clients is the local branch of an international airline. They have a small office in the secured area behind the ticket counters, and timeshare space at the ticket counter. I need to add a ...
MT_Head's user avatar
  • 173
5 votes
2 answers
468 views

Using 4 wifi channels rather than 3

I have a wifi deployment with about 60 access points, currently limited to channels 1,6, and 11. This is a college campus, and the residence halls can get quite noisy, from an rf perspective. We ...
Joel Coel's user avatar
  • 13k
5 votes
1 answer
2k views

Multiple Valid Certificates in Windows 7 breaking Wired 802.1x Deployment

I have a Wired 802.1x deployment using TLS machine authentication on Windows 7 (built-in 802.1x supplicant) with the necessary certs (FreeRadius v2.2.3 generated on Linux). Cisco C2960 POE switch is ...
Jude_Quintana's user avatar
4 votes
3 answers
16k views

Set 802.1Q tagged port on VLAN1 on Dell PowerConnect switch

I'm having big troubles when adding this Dell switch to my network. Here we use several VLANs to segment traffic. All switches (3com and DLink mostly) have configured the same VLANs, most ports are '...
Javier's user avatar
  • 9,378
4 votes
2 answers
5k views

802.1q PXE boot

I've been using CrucibleWDS for the past year to image machines in my environment. My dhcpd.conf file lists the PXE boot information for clients attached to the particular network I use for imaging. ...
Adam's user avatar
  • 45
4 votes
3 answers
163 views

Wireless LAN interference

I have set up at wireless LAN network in a small office, connected to a ADSL connection. Using a wired connection between a computer and the router, I get the expected ~8.5 Mbps down, and ~1 Mbps up. ...
hstr's user avatar
  • 145
4 votes
1 answer
6k views

Verifying RADIUS server is sending the correct certificates?

How can I see the TLS (SSL) certificates that my RADIUS server is using, to make sure it is sending the correct certificate and chain? I am implementing 802.1x authentication with a RADIUS server, ...
Jan Fabry's user avatar
  • 1,006
4 votes
2 answers
4k views

802.1X needs single port per device?

We are planning to implement 802.1X. What is not clear is whether a switch supporting 802.1X can successfully and correctly authenticate multiple devices connected to the same switch port (e.g. if we ...
Alex's user avatar
  • 1,868
4 votes
5 answers
13k views

802.1x PEAP GPO that trusts self-signed CA certificate

I am working on a Freeradius backed 802.1.x authentication infrastructure for our wireless clients. I am using a rather generic Freeradius configuration with EAP-PEAP. Our clients are predominantly ...
user avatar
4 votes
2 answers
380 views

How can I offer 2.4 ghz wi-fi in a building with strong interference?

I have a few access points on one floor of a high-rise building. They support both 2.4 ghz and 5ghz. When I used 2.4 ghz, the channel management features did not seem to work and we experienced ...
SLY's user avatar
  • 1,286
3 votes
2 answers
5k views

Ethertype field for 802.1q tagged frames

If 802.1q is created Ethertype field is changed to 0x8100 which means what it means - it is a 802.1q frame. But this means Ethertype is no longer used for marking higher level protocol, for example, ...
Vieplis's user avatar
  • 43
3 votes
3 answers
4k views

arp who-has requests view vlan isolated different addresses (single NIC)

I have debian hosts which are connected through trunk port on 5 different vlans. But this host respond to arp "who-has" requests of all of their differents ip. I wish understand why ... Here the ...
jjumper's user avatar
  • 41
3 votes
1 answer
381 views

Port Mirror and 802.1Q

Does a port mirror send ethernet frames out of the switch-port with the 802.1Q header bytes still on the frame?
Matt's user avatar
  • 1,142
3 votes
1 answer
11k views

Configure FreeRADIUS with Active Driectory allow specific group of users to authenticate

In order to authenticate WiFi clients I use a FreeRADIUS server configured to check for user credentials in an Active Directory environment. Currently all users with a valid account are authenticated ...
Debian's user avatar
  • 51
3 votes
1 answer
3k views

How do mixed wireless clients (b/g/n) effect total throughput of an access point?

Say you are planning a network based around access points that support the full range of 802.11 protocols on 2.4Ghz(b/g/n). How will a mixed set of clients effect the total throughput possible through ...
Chris Pitman's user avatar
3 votes
3 answers
2k views

Why slow (500-4500ms) ping times to google.com over Wi-Fi?

I regularly get ping times (to google.com) on my netbook over wireless (802.11) of: 500-4500ms for about half the time 100-150ms for the rest of the time. It seems to switch back and forth on the ...
BCS's user avatar
  • 1,075
3 votes
1 answer
437 views

howto restrict active directory account for PEAP/non-CIFS only

We have some voip phones that we want to integrate into our PEAP WiFi network, and I'm concerned about just creating a standard AD account and using that. If someone got hold of such long-term account ...
jhaar's user avatar
  • 191
3 votes
1 answer
8k views

OpenVPN to host tap device having very large MTU

Question What is the minimum set of server and client configuration directives that I need in order to satisfy the following conditions? Virtual layer 2 ethernet network that will not be bridged ...
Iron Savior's user avatar
3 votes
1 answer
2k views

Registation or Guest VLAN for 802.1x via Microsoft NPS

I am currently working on a Microsoft NPS solution to provide 802.1x MAC authentication for wired and wireless clients along with providing a VLAN for the clients to be moved to. It currently works ...
dave's user avatar
  • 31
3 votes
1 answer
4k views

Portable, battery-powered, wireless access point, ethernet adapter [closed]

I am in need of an adapter that will convert an ethernet port into a wireless access point. I have found a handful of devices, but I'm unable to find a device that is battery powered. Does a self-...
Jed's user avatar
  • 151
3 votes
2 answers
2k views

Realistic benchmarks of 802.11n / WiFi N performance?

I need to be able to connect a computer to our network with realistic speeds to the rest of the network of 30+ Mbps (as measured by something like iperf). Running a wire is not an option here, and the ...
Nick's user avatar
  • 301
3 votes
2 answers
553 views

802.1x or mac port security on SAN switches

I'm going through DISA security hardening on our network devices. Our iSCSI SAN network uses 2 Cisco 2960G layer 2 switches. The SAN consists of 2 HP P4000 devices. Servers are 3 Dell R710s in a ...
murisonc's user avatar
  • 2,968
3 votes
0 answers
175 views

Active Directory expired certs causing issues with 802.1x authentication

We are in the process of rolling out 802.1x in our environment. With that said, there are quite a few clients that revert back to an older (expired) certificate which prevents them from ...
wam6187's user avatar
  • 31
3 votes
0 answers
3k views

Cisco SG300 switch does not send RADIUS messages to server for 802.1x

I want to eventually configure the SG300 to authenticate wired clients with 802.1x and Microsoft NPS (RADIUS). I am currently testing this setup using a single port (Port 7) on my SG300, a test ...
Christopher Pope's user avatar
3 votes
3 answers
9k views

KVM 802.1q (tagged VLAN setup)

I've done a lot of reading about VLAN tagging in KVM bridged networks, but am getting very confused as to what needs to be tagged (the physical network devices, or the bridges attached to those ...
kwiksand's user avatar
  • 463
2 votes
3 answers
1k views

Wireless network infrastructure for an office with 40 employees

In my company we're facing connectivity problems due to our not very professional network infrastructure. We're growing now, and we expect to be 40 people at the office by the end of the year. I'm ...
Paul Ballesty's user avatar
2 votes
1 answer
264 views

for multiple access points on one SSID, should I broadcast SSID information from all of them?

Should I be broadcasting my SSID from multiple access points that are sharing the SSID and network segment, or should I only broadcast from one?
wjimenez5271's user avatar
2 votes
1 answer
3k views

Network Access Control with Linux

Are there any projects to provide NAC support in Linux? My main aim is to accept/deny access to other network on a Linux Firewall after asking the operating systems' NAC agents about the client's ...
seaquest's user avatar
  • 698
2 votes
2 answers
164 views

Tool to troubleshoot wireless connections

Having a lot of issues with a wireless network with multiple APs sharing the same SSID. I have a tool I use on my android phone (wifianalyzer) that is helpful, but I need a more comprehensive set of ...
wjimenez5271's user avatar
2 votes
1 answer
9k views

Freeradius VLAN assignment with EAP-TLS and WiFi 802.1x

I'm using FreeRadius with a Ubitquiti WiFi AP with 802.1x auth using EAP-TLS (mutual client/server cert based auth). This is working well for static VLANs (i.e. specified on the AP). I'd like to ...
user397220's user avatar
2 votes
2 answers
4k views

If network card supports 802.11n, does it mean it supports 5ghz band? [closed]

I've gotten a new router that broadcasts 2.4ghz and 5ghz bands. But my desktop could only see the 2.4ghz connection. I read from a website that as long as my network adapter supports 802.11a or 802....
xenon's user avatar
  • 321
2 votes
1 answer
3k views

Radius Client IP Address when setting up Wifi with WPA2 Enterprise?

I have taken over a server setup (as part of my job) which is setup of the following: Server setup with Threat Management Gateway (serving as the firewall) - 192.168.1.1 Server with Domain Controller ...
Jeff Kranenburg's user avatar
2 votes
1 answer
2k views

Wireless Profile via Group Policy - Specific Trusted Root not Listed?

So I am trying to use Group Policy to configure the wireless settings on a bunch of laptops. We are using a third party cert that isn't showing up as an option in the list of Trusted Root ...
MattUebel's user avatar
  • 937
2 votes
1 answer
14k views

How to integrate Windows Server 2008 R2's NPS with Cisco switches?

I need to evaluate in a lab environment the use of Windows Server 2008 R2's NPS for 802.1x authentication with Cisco Catalyst 3750 switches; the general idea is to only let clients connect to the ...
Massimo's user avatar
  • 71.3k