Questions tagged [802.1]
IEEE Standard for port-based Network Access Control
142
questions
41
votes
5
answers
88k
views
What is the maximum length of a wifi access point's SSID?
I was wondering if anybody knew what the maximum string length of a browser's SSID is or where I could go to look for that sort of information. (From a spec of some sort)
29
votes
3
answers
17k
views
What happens when a consumer switch receives a VLAN-tagged Ethernet frame?
Suppose you connect a trunk port from a VLAN capable network switch to a (VLAN incapable) consumer-grade network switch via a direct cable. Now the former switch send the later switch a 802.1Q-tagged ...
22
votes
4
answers
2k
views
Do wifi packets go directly node to node?
I have two nodes on a wireless network. Node A is streaming data to node B. Most of the time it works fine, but sometimes there is packet loss and the stream is interrupted.
To improve performance ...
17
votes
8
answers
53k
views
What's the difference between a bridge and a switch?
I can't find any authoritative source that can concisely explain the difference between a bridge and a switch. As far as I can tell, most devices commonly referred to as "switches" fit the description ...
11
votes
1
answer
20k
views
linux 802.1x on a windows wired network
I'm looking to use my linux workstation on our company network, but i've been running into a few issues, specifically 802.1x i believe.
I'm root on my machine and a windows domain admin so i should ...
9
votes
3
answers
8k
views
Cisco and Linux and Vlans
I appear to have some fundamental misunderstanding of how VLANs work on Linux, and I'm hoping the good people here can educate me.
Cast: One Cisco 3560, one VLAN, and one Linux box [1].
Cisco -----...
8
votes
1
answer
89k
views
What is the reason CSMA/CD can't be used on a wireless network? [closed]
I'm new to wireless networking and wondering why the same Collision Detection mechanisms used for Ethernet can't be applied to WiFi. I think I'm starting to understand, but not sure if I've got it:
...
8
votes
3
answers
3k
views
Load testing wireless LANs
Anyone have any suggestions for methods of load-testing wireless networks for enterprise network deployments?
We've got a wide array of different wireless worst-case scenarios to support.
rooms ...
7
votes
4
answers
2k
views
Wireless technology - which is better: more single radio APs or less dual radio APs?
We are currently talking to vendors of wireless solutions for a wireless deployment in a university campus with some 5000 students.
One vendor is offering us a Cisco solution with a WLC 5508 ...
7
votes
1
answer
21k
views
Testing radius server from Mac OS X client
I have a radius server set up on a server running Ubuntu 11.04. I have configured my switch to use the authentication server's IP (192.168.1.2) for RADIUS / 802.1x authentication, and I created a ...
7
votes
3
answers
39k
views
802.1x automatically validate certificate in windows clients
We're deploying a wireless networking using Windows Server 2008 NAC as a RADIUS server. When Windows XP or 7 clients connect they initally fail to connect.
In order to enable the client to connect we ...
7
votes
2
answers
9k
views
PXE in an 802.1X environment
My organization is about to implement 802.1X on our enterprise, but we currently use PXE-based OS deployment sequences in SCCM. I'm looking for a way to continue using PXE in an 802.1X environment. ...
7
votes
2
answers
1k
views
Network Policy Server Granular Time Restrictions
I am configuring NPS as a RADIUS authentication source for my wireless clients.
I am trying to differentiate between school hours and after hours as I need to connect certain users to a different ...
7
votes
1
answer
6k
views
802.1x computer authentication using hostname instead of cert
My configuration includes: Cisco ACS as RADIUS server, MS AD, MS PKI, Cisco 2960G switches. Workstations are 95% XP Pro SP3 fully patched, some 7 pro fully patched.
Computer cert autoenrollment ...
6
votes
3
answers
387
views
Cisco Dot1x Port Authentication - VLAN selected based on what domain the user logs on to on computer?
Currently my company has been bought out by another. Due to this, another two companies users will be migrating into our office.
It would be super handy if we could have the vlan chosen for the user ...
5
votes
3
answers
3k
views
Can a non-VLAN-aware switch pass 802.1q tagged packets?
Let's say I have a incoming connection which is fixed 1Gb/s with tagged packets. And lets say that I need to connect that connection to a device which is a 10/100 device, which deals with the tagged ...
5
votes
3
answers
2k
views
How to get decent WiFi despite a virtual Faraday cage
One of my clients is the local branch of an international airline. They have a small office in the secured area behind the ticket counters, and timeshare space at the ticket counter. I need to add a ...
5
votes
2
answers
468
views
Using 4 wifi channels rather than 3
I have a wifi deployment with about 60 access points, currently limited to channels 1,6, and 11. This is a college campus, and the residence halls can get quite noisy, from an rf perspective. We ...
5
votes
1
answer
2k
views
Multiple Valid Certificates in Windows 7 breaking Wired 802.1x Deployment
I have a Wired 802.1x deployment using TLS machine authentication on Windows 7 (built-in 802.1x supplicant) with the necessary certs (FreeRadius v2.2.3 generated on Linux). Cisco C2960 POE switch is ...
4
votes
3
answers
16k
views
Set 802.1Q tagged port on VLAN1 on Dell PowerConnect switch
I'm having big troubles when adding this Dell switch to my network.
Here we use several VLANs to segment traffic. All switches (3com and DLink mostly) have configured the same VLANs, most ports are '...
4
votes
2
answers
5k
views
802.1q PXE boot
I've been using CrucibleWDS for the past year to image machines in my environment. My dhcpd.conf file lists the PXE boot information for clients attached to the particular network I use for imaging.
...
4
votes
3
answers
163
views
Wireless LAN interference
I have set up at wireless LAN network in a small office, connected to a ADSL connection.
Using a wired connection between a computer and the router, I get the expected ~8.5 Mbps down, and ~1 Mbps up. ...
4
votes
1
answer
6k
views
Verifying RADIUS server is sending the correct certificates?
How can I see the TLS (SSL) certificates that my RADIUS server is using, to make sure it is sending the correct certificate and chain?
I am implementing 802.1x authentication with a RADIUS server, ...
4
votes
2
answers
4k
views
802.1X needs single port per device?
We are planning to implement 802.1X. What is not clear is whether a switch supporting 802.1X can successfully and correctly authenticate multiple devices connected to the same switch port (e.g. if we ...
4
votes
5
answers
13k
views
802.1x PEAP GPO that trusts self-signed CA certificate
I am working on a Freeradius backed 802.1.x authentication infrastructure for our wireless clients. I am using a rather generic Freeradius configuration with EAP-PEAP. Our clients are predominantly ...
4
votes
2
answers
380
views
How can I offer 2.4 ghz wi-fi in a building with strong interference?
I have a few access points on one floor of a high-rise building. They support both 2.4 ghz and 5ghz.
When I used 2.4 ghz, the channel management features did not seem to work and we experienced ...
3
votes
2
answers
5k
views
Ethertype field for 802.1q tagged frames
If 802.1q is created Ethertype field is changed to 0x8100 which means what it means - it is a 802.1q frame.
But this means Ethertype is no longer used for marking higher level protocol, for example, ...
3
votes
3
answers
4k
views
arp who-has requests view vlan isolated different addresses (single NIC)
I have debian hosts which are connected through trunk port on 5 different vlans. But this host respond to arp "who-has" requests of all of their differents ip. I wish understand why ...
Here the ...
3
votes
1
answer
381
views
Port Mirror and 802.1Q
Does a port mirror send ethernet frames out of the switch-port with the 802.1Q header bytes still on the frame?
3
votes
1
answer
11k
views
Configure FreeRADIUS with Active Driectory allow specific group of users to authenticate
In order to authenticate WiFi clients I use a FreeRADIUS server configured to check for user credentials in an Active Directory environment. Currently all users with a valid account are authenticated ...
3
votes
1
answer
3k
views
How do mixed wireless clients (b/g/n) effect total throughput of an access point?
Say you are planning a network based around access points that support the full range of 802.11 protocols on 2.4Ghz(b/g/n). How will a mixed set of clients effect the total throughput possible through ...
3
votes
3
answers
2k
views
Why slow (500-4500ms) ping times to google.com over Wi-Fi?
I regularly get ping times (to google.com) on my netbook over wireless (802.11) of:
500-4500ms for about half the time
100-150ms for the rest of the time.
It seems to switch back and forth on the ...
3
votes
1
answer
437
views
howto restrict active directory account for PEAP/non-CIFS only
We have some voip phones that we want to integrate into our PEAP WiFi network, and I'm concerned about just creating a standard AD account and using that. If someone got hold of such long-term account ...
3
votes
1
answer
8k
views
OpenVPN to host tap device having very large MTU
Question
What is the minimum set of server and client configuration directives that I need in order to satisfy the following conditions?
Virtual layer 2 ethernet network that will not be bridged ...
3
votes
1
answer
2k
views
Registation or Guest VLAN for 802.1x via Microsoft NPS
I am currently working on a Microsoft NPS solution to provide 802.1x MAC authentication for wired and wireless clients along with providing a VLAN for the clients to be moved to.
It currently works ...
3
votes
1
answer
4k
views
Portable, battery-powered, wireless access point, ethernet adapter [closed]
I am in need of an adapter that will convert an ethernet port into a wireless access point. I have found a handful of devices, but I'm unable to find a device that is battery powered.
Does a self-...
3
votes
2
answers
2k
views
Realistic benchmarks of 802.11n / WiFi N performance?
I need to be able to connect a computer to our network with realistic speeds to the rest of the network of 30+ Mbps (as measured by something like iperf). Running a wire is not an option here, and the ...
3
votes
2
answers
553
views
802.1x or mac port security on SAN switches
I'm going through DISA security hardening on our network devices. Our iSCSI SAN network uses 2 Cisco 2960G layer 2 switches. The SAN consists of 2 HP P4000 devices. Servers are 3 Dell R710s in a ...
3
votes
0
answers
175
views
Active Directory expired certs causing issues with 802.1x authentication
We are in the process of rolling out 802.1x in our environment. With that said, there are quite a few clients that revert back to an older (expired) certificate which prevents them from ...
3
votes
0
answers
3k
views
Cisco SG300 switch does not send RADIUS messages to server for 802.1x
I want to eventually configure the SG300 to authenticate wired clients with 802.1x and Microsoft NPS (RADIUS). I am currently testing this setup using a single port (Port 7) on my SG300, a test ...
3
votes
3
answers
9k
views
KVM 802.1q (tagged VLAN setup)
I've done a lot of reading about VLAN tagging in KVM bridged networks, but am getting very confused as to what needs to be tagged (the physical network devices, or the bridges attached to those ...
2
votes
3
answers
1k
views
Wireless network infrastructure for an office with 40 employees
In my company we're facing connectivity problems due to our not very professional network infrastructure. We're growing now, and we expect to be 40 people at the office by the end of the year.
I'm ...
2
votes
1
answer
264
views
for multiple access points on one SSID, should I broadcast SSID information from all of them?
Should I be broadcasting my SSID from multiple access points that are sharing the SSID and network segment, or should I only broadcast from one?
2
votes
1
answer
3k
views
Network Access Control with Linux
Are there any projects to provide NAC support in Linux? My main aim is to accept/deny access to other network on a Linux Firewall after asking the operating systems' NAC agents about the client's ...
2
votes
2
answers
164
views
Tool to troubleshoot wireless connections
Having a lot of issues with a wireless network with multiple APs sharing the same SSID. I have a tool I use on my android phone (wifianalyzer) that is helpful, but I need a more comprehensive set of ...
2
votes
1
answer
9k
views
Freeradius VLAN assignment with EAP-TLS and WiFi 802.1x
I'm using FreeRadius with a Ubitquiti WiFi AP with 802.1x auth using EAP-TLS (mutual client/server cert based auth). This is working well for static VLANs (i.e. specified on the AP).
I'd like to ...
2
votes
2
answers
4k
views
If network card supports 802.11n, does it mean it supports 5ghz band? [closed]
I've gotten a new router that broadcasts 2.4ghz and 5ghz bands. But my desktop could only see the 2.4ghz connection.
I read from a website that as long as my network adapter supports 802.11a or 802....
2
votes
1
answer
3k
views
Radius Client IP Address when setting up Wifi with WPA2 Enterprise?
I have taken over a server setup (as part of my job) which is setup of the following:
Server setup with Threat Management Gateway (serving as the firewall) - 192.168.1.1
Server with Domain Controller ...
2
votes
1
answer
2k
views
Wireless Profile via Group Policy - Specific Trusted Root not Listed?
So I am trying to use Group Policy to configure the wireless settings on a bunch of laptops. We are using a third party cert that isn't showing up as an option in the list of Trusted Root ...
2
votes
1
answer
14k
views
How to integrate Windows Server 2008 R2's NPS with Cisco switches?
I need to evaluate in a lab environment the use of Windows Server 2008 R2's NPS for 802.1x authentication with Cisco Catalyst 3750 switches; the general idea is to only let clients connect to the ...