Questions tagged [aaa]
The aaa tag has no usage guidance.
18
questions
0
votes
1
answer
78
views
Need help to edit NGINX config for SSL
I keep getting errors when adding SSL syntax.
server {
listen 443 ssl;
server_name www.example.com;
ssl_certificate /etc/nginx/ssl/example.crt;
ssl_certificate_key /etc/nginx/ssl/example.key;
...
0
votes
1
answer
262
views
Sending COA request to NAS behind NAT from Freeradius
My Mikrotik NAS is behind a NAT so it only has a private network IP address. So for authentication, I am using the public IP address which works fine. But when Freeradius (hosted) has to send the COA ...
- 101
0
votes
1
answer
85
views
Will a wifi range extender work after AAA configuration of the network?
In our campus LAN we are using WPA2 protocol and users have a common password.
Presently there are several WAPs but we also need a few wifi range extenders (the range extender is TP Link TL- WA855RE) ...
- 13
0
votes
1
answer
847
views
What will happen if I enable LDAP authenticaion on pfsense and LDAP server will fail?
Currently I am using local database for authentication on my pfsense. I know that Cisco's IOS has backup authentication methods for the cases when primary one fails. You can even not to authenticate ...
- 115
1
vote
1
answer
346
views
Unknown users logged into cisco router
Good day!
I logged into a Cisco management router located in our company network and issue the show users command and it gave the following output. The 3rd line vty 4 is me. I am concerned of the 2 ...
- 160
0
votes
1
answer
2k
views
FreeRadius Scalability with multiple NAS worldwide
Our network setup consists of 5 network access servers in 5 different locations worldwide and it is expected to expand in the coming days to 15 network access servers and more in future. Currently we ...
- 59
0
votes
1
answer
2k
views
NPS Server 2012 with ASA as Radius client not working, Server 2008 Working
for some time I have been using 2008 R2 as my Radius server and I have a Cisco ASA FW who is configured as Radius client and working ok. I have introduced another Windows 2012 DC, and also configured ...
1
vote
1
answer
2k
views
TACACS+ configuration: how to receive priv-lvl value?
I need to configure TACACS+ server to know if the given user is authenticated* and what is his priv-lvl. As a client I'm using tactest (tacacs.net) and TACACS+ Client Java Library (AXL).
I tried with ...
- 21
1
vote
2
answers
499
views
Radius clients with different authentication criteria
I can't seem to find a good tutorial on how to set my network policy for one of my radius clients.
I'd like my radclientA with policyA to authenticate and radclientB with policyB to authenticate.
...
- 155
0
votes
1
answer
939
views
Does "aaa accounting commands" not support radius?
When I issue this command:
aaa accounting commands 15 default start-stop group myradiusgroup
I get this error:
%AAAA-4-SERVNOTACPLUS: The server-group "myradiusgroup" is not a tacacs+ server group. ...
- 4,291
2
votes
2
answers
3k
views
How do I use a domain account to connect to a MSSQL server for NPS accounting?
I'm trying to connect a Server 2008 R2 NPS to a MSSQL server for logging accounting data and I'm running into issues.
I configured NPS Accounting through the "Configure Accounting" wizard and, using ...
- 4,291
0
votes
1
answer
2k
views
Linux TACACS+ authorization
I'd like to know to to authorize (only allow a set of commands) users on Linux console (bash). I'm so far able to authenticate ssh users over TACACS+ but authorization is not working.
This is my ...
- 141
0
votes
1
answer
2k
views
Citrix Netscaler 10.1 AAA Application Traffic Single Sign On
I have a Netscaler deployment with a virtual server where I have enabled authentication through the AAA Application Traffic feature. As Expected this allows my users to log on to the netscaler login ...
- 87
0
votes
0
answers
1k
views
Radius AAA authentication failover
I know this question has been asked on here but I cannot seem to figure this out. I am trying to get radius to failover to local authentication but whenever I turn off radius it won't failover. ...
- 1
4
votes
1
answer
3k
views
Cisco ASA LDAP Group Privilege Level
We have a pair of ASA 5510s (8.4.3) on which we use LDAP authentication for VPN and SSH access. On all of our Catalyst switches, which use RADIUS, we're able to set the shell:priv-lvl to 15 in the ...
- 443
5
votes
1
answer
1k
views
How can I configure an ASA such that I can use a sub-priviledge 15 user to download the current config from http?
I am setting up our new ASA's at Stack Exchange and am trying to follow some best practices like using configuration management and minimum-permissions-necessary users. What I'm trying to do is ...
- 3,486
1
vote
3
answers
6k
views
Need to setup a RADIUS server to authenticate a Windows client to a Windows server
I have a server that I have technicians who need to be able to access using shared credentials. However, doing that violates our security policy (!). I need each user to be able to authenticate ...
- 13
1
vote
2
answers
908
views
Can a device (WAP or switch) be configured as an 802.1x supplicant?
We are looking at implementing 802.1x on a wired/wireless network. What I am looking for is a device that can act as a supplicant and once authenticated on the network, is able to pass traffic from ...
- 11