Questions tagged [radius]

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

0
votes
1answer
93 views

RADIUS server on VPN set up

Just a quick question, hoping for a quick answer. I'm studying for my MCSA and I'm a little confused about RADIUS. Currently I have a VPN server set up with RRAS and NPS on my home server lab. Does ...
-1
votes
1answer
288 views

more than one freeradius user and database

I want to make free radius managing system. there are many users who can use this system. every user will have his own database. for example, I have tow users the first one admin1 and the second ...
2
votes
2answers
358 views

Should a server or a client be able to verify a client/server certificate - intermediate certificate chain with a known root ca?

I am trying to test the following setup: A RADIUS server works with the EAP-TLS protocol. The client and the server have the following certificates: Client Public Key: ...
0
votes
1answer
455 views

Freeradius radclient unsupported attribute

I want to send disconnect-message to NAS using radclient program but when I want to disconnect one user using this command echo user-name=zaib | radclient -x 192.168.3.1 disconnect "muh" the ...
1
vote
0answers
75 views

Port security and active directory

I'm using RADIUS for port security in my environment on publicly accessible ports (meeting rooms, etc.) We have HP Procurve switches and Aruba Clearpass is handling the authentication requests (with ...
0
votes
1answer
1k views

freeradius radacct table is empty and fortigate

I configured freeradius with mysql and fortigate when I authorize one user every thing go fine but the radacct table is empty and there is no data was inserted into it I don't know where is the ...
2
votes
1answer
2k views

FreeRadius, login not working when using mschap

I've been trying to make RADIUS work with Zentyal without success, I've tried logging in with an Android phone and a Windows 10 PC but none of them worked. Joining the domain using LAN works fine, ...
2
votes
1answer
980 views

Google Authenticator FreeRADIUS

I'm trying to implement google authenticator PAM module in FreeRADIUS on RHEL7. I've loosely followed this guide: http://www.supertechguy.com/help/security/freeradius-google-auth The reason I say ...
1
vote
1answer
285 views

802.1x Wifi with Disabled AD Account

I have setup an NPS Server (Windows Server 2016) which uses RADIUS to allow my users to authenticate against AD for their Wireless Connections. When I disable an account in AD, NPS will not allow the ...
0
votes
0answers
183 views

Radius - Run second instance as a service - Centos 6.8

The server (Centos 6.8) already has a single instance of Radius running as a service. I have created a second instance and am able to make it run successfully with: radiusd -X -d /etc/raddb2 I now ...
-1
votes
1answer
515 views

radius packets not reaching radius server

We are facing issue with radius server application wherein wireshark traces show radius request packets however some random packets are not visible in application's debug logs. This is carrier grade ...
2
votes
1answer
3k views

Freeradius VLAN assignment with EAP-TLS and WiFi 802.1x

I'm using FreeRadius with a Ubitquiti WiFi AP with 802.1x auth using EAP-TLS (mutual client/server cert based auth). This is working well for static VLANs (i.e. specified on the AP). I'd like to ...
2
votes
0answers
55 views

OpenBSD login.conf statement for nat-translated radius clients to ID as public address instead of private?

I'm on OBSD6.0 behind a NAT firewall and attempting to authenticate against a RADIUS server on the outside. The RADIUS server gets the internal (private) address of the client system, not what the ...
2
votes
1answer
868 views

CentOS 7 SSH and 2FA (ESET Secure Authentication)

I am stuck at getting two factor-authentication in CentOS 7 to work; specifically the authentication via SSH and OTP. I would very much appreciate it if someone could assist me with this. :) Edit: ...
1
vote
0answers
1k views

FreeRADIUS authentication using Active Directory

I am trying to implement RADIUS authentication using Active Directory. I want requests to RADIUS to be sent to AD server and RADIUS responds according to its result. I've already joined RADIUS server ...
0
votes
1answer
57 views

Can I demand both MAC and credentials to access network using MS RADIUS server?

Is is possible to demand both of these types of authorization? I know Microsoft NPS can use MAC address or credentials to approve access however can I demand both of these simultaneously? Thanks, ...
0
votes
1answer
3k views

Network Policy Server error message 'Negotiation failed. No available EAP methods'

I am trying to change our wireless access points to use RADIUS. I have installed Network Policy Server on a server and pointed our wireless access points RADIUS settings to it. I have allowed all ...
0
votes
2answers
3k views

how to configure windows login to get OTP as password

I searched a little and understand that its possible,But i couldn't find any clue of how to do it.Also can i use any server that works or it must be something like SafeNet's blackShield server? What i'...
1
vote
1answer
859 views

RADIUS/802.1x Latency Guidelines

We're considering a centralising our RADIUS infrastructure but I can't find any information about acceptable latency between the Authenticator (ie. switch or WLC) and the Authentication Server. Would ...
2
votes
1answer
671 views

FreeRadius can't get new openssl version

I just beginning with FreeRadius. I have installed FreeRadius 2.2.9 but when I try to debug with radiusd -X I got this error Refusing to start with libssl version OpenSSL 1.0.1e-fips 11 Feb 2013 ...
1
vote
0answers
399 views

Server 2008 Radius stopped working

i've had a working 2008 Server with NPS as a Radius Server running for authentication of wifi devices, VPN Connections and Logins from Cisco devices. Suddenly the server stopped responding. - No ...
1
vote
0answers
528 views

connecting Linux pppd to LDAP server to authenticate MSCHAPv2?

I need to provide a remote access VPN service. I'd like very much to use JumpCloud.com to do the user database management. I'm trying to achieve the following: Provide l2tp+ipsec VPN service to users,...
3
votes
1answer
4k views

Providing High Availability for NPS

I need to ensure high availability for RADIUS service in Windows Server environment so it can withstand loss or even temporary downtime of any particular server holding NPS role. Most of technet ...
0
votes
0answers
98 views

RADIUS Server for unauthorized device control using 802.1x

I have a closed network for security cameras. I want only for authorized cameras to be able to connect to the Network Switch. If the Switch supports 802.1x authentication, and so do the cameras, could ...
1
vote
1answer
2k views

Microsoft NPS 2012 R2 - Can't perform authentication from Cisco ASA with PAP

I am trying to setup a Cisco ASA (version 9.1(7)6) to authenticate against a Microsoft Network Policy Server 2012 R2. The ASA is able to communicate with the NPS server, however the test aaa-server ...
0
votes
2answers
475 views

How to give static local IP address to RADIUS Server software and IIS Server Website?

I have following network topology: Whenever I turn on my Server all the local IP addresses (in the form 10.0.0.X) of RADIUS Server and IIS Server changes or sometimes port is assigned to SVCHost ...
8
votes
1answer
6k views

How can I get a Radius server that can authenticate using my Google Apps domain credentials?

We do have a Google Apps domain and we want to configure a Radius server in order to allow people to login to our corporate WiFi or VPN using their corporate credentials (Google Apps). To make the ...
1
vote
0answers
664 views

Connecting Windows to Wireless (802.1x Radius) before login working sporadically

We have a system based on Ruckus wireless, connected to a Windows 2012R2 NPS server for RADIUS authentication. We've long been having issues whereby single sign-on isn't reliable, so we've set up a (...
0
votes
0answers
55 views

Delegating authentication in Windows AD domain

In a Windows AD domain, when the client (user) authenticates against the Domain Controller, is it possible to delegate the authentication to another LDAP/RADIUS server? We have a ton of services in ...
5
votes
1answer
651 views

pfSense - IKEv2 with EAP-RADIUS: Any fallback option if the RADIUS server is down?

I'm deploying an IKEv2 VPN authenticating against a RADIUS service within a pfSense 2.3-RELEASE box. But I'm afraid of the complications of this approach when the RADIUS server is down. Since the ...
0
votes
0answers
91 views

How to connect wireless APs to the same Radius server if the sevrer is on a different subnet?

I am trying to create the following setup. I have a pfSense firewall with two NIC (Internet - WAN/LAN - Switch). I am setting up VLANs on the switch so I end up with 3 subnets. A subnet for servers ...
1
vote
0answers
88 views

Apache radius auth works with firefox not with chrome

I am using mod_auth_radius with apache2.2 Here is the relevant config in the site section: <IfModule radius_auth_module> AddRadiusAuth localhost:1812 test 5:3 AddRadiusCookieValid 5 </...
2
votes
1answer
2k views

Verifying RADIUS server is sending the correct certificates?

How can I see the TLS (SSL) certificates that my RADIUS server is using, to make sure it is sending the correct certificate and chain? I am implementing 802.1x authentication with a RADIUS server, ...
0
votes
1answer
750 views

dynamic VLANs on cheap Access Point after switch

I set up 802.1x on the wifi and now I want to configure dynamic vlan. Only problem: the AP (TP-Link Archer C7 v2 w/stock firmware) doesn't support vlans. Let me be a bit more visual: a network diagram....
1
vote
1answer
517 views

Local credentials used when radius server is available sshd pam_radius

I have pam_radius setup and it works (centos6, pam_radius: 1.4.0-2.el6), i can authenticate via the radius server using ssh. What i am trying to accomplish is that when the radius server is ...
1
vote
0answers
1k views

Radius server not responding to EAP requests

We are trying to setup a wifi environment using WPA2 security using Radius server and AD authentication. We've set up the radius server using the following guide: https://networklessons.com/wireless/...
0
votes
1answer
233 views

High load and Cpu on Radius server- Supplicant issue?

We have a Wireless Lan controller set to authenticate users against (Lucent) Radius server. The username and password is stored in a database. About once a week the cpu on the radius/java process ...
1
vote
1answer
4k views

WIFi Authentication with Windows Active Directory [closed]

What would you recommend for scenario. Office with 100 employees multiple device platforms(Apple , Windows and Android). Existing Windows Active Directory on Windows 2008 but not all devices use this ...
0
votes
1answer
670 views

Multi-factor auth with Kerberos and RADIUS

I am looking for a solution in order to allow a multi-factor authentication for a Kerberos-based logon service. By reading some articles, I found some good references about RADIUS, that provides a set ...
2
votes
1answer
4k views

Setting up Cisco ASA VPN to use both radius and local users

I've got a Cisco ASA setup with L2TP/IPSec VPN, all is working well except for one minor issue. Ideally, I'd like to be able to log on to the VPN using either that RADIUS server users or the local ...
0
votes
1answer
775 views

FreeRadius configure two different authentication types

Have a particular scenario in that we would like to use FreeRadius to log into switchs using Kerberos credentials and network devices using EAP-TLS. Currently have this configured and working, but ...
1
vote
0answers
413 views

Use mail attribute for 802.1x RADIUS authenticatioon with Microsoft NPS

We have run a Cisco WiFi network that uses 802.1x to authentication logins against Active Directory. Employees login using their UPN prefix, and all works well. For various reasons we'd like users ...
1
vote
1answer
1k views

HAProxy and Radius

I've a following situation: network1 - gate - network2 network2 has several services. network1 has a lot of developers. I need to make access from developers to services with separated access, for ...
0
votes
1answer
862 views

radtest no response from outside localhost

I have set up freeradius in a Microsoft Azure VM. When I radtest from 127.0.0.1, it sends Access-Accept. But when I run radtest from another computer, freeradius doesn't respond. I am running ...
1
vote
0answers
206 views

local user cannot login while RADIUS is configured on Cisco Switch 3745

I've configured RADIUS on my switch as below: aaa new-model ! aaa authentication login default group radius local aaa authorization exec default group radius local ! radius-server host 172.16.1....
1
vote
1answer
2k views

SSH Authentication using RADIUS + Google Authenticator

I'm trying configure my SSHD's to authenticate users using FreeRadius. The FreeRadius server needs to first require a valid OTP using Google Authenticator, and then verify the system account password. ...
1
vote
1answer
1k views

NPS/RAIDUS Authentication for Wifi and certificates for non trusted server

I'm trying to setup an NPS server as RADIUS server for Wifi network of employers of my company. All mobile devices could connect to this networks using their domain user/pass. My problem is to let ...
3
votes
0answers
243 views

Authentication and logging of users for a Wireless ISP?

I have to upgrade a Wireless ISP's (WISP) network. Their current setup consists of a router (Mikrotik RouterBoard 1100AHx2), Ubiquiti Rockets (with sector antennas) for clients, and Ubiquiti ...
0
votes
1answer
959 views

NPS Server 2012 with ASA as Radius client not working, Server 2008 Working

for some time I have been using 2008 R2 as my Radius server and I have a Cisco ASA FW who is configured as Radius client and working ok. I have introduced another Windows 2012 DC, and also configured ...
1
vote
0answers
4k views

Windows Server 2012R2 RADIUS (wifi) clients won't accept bought wildcard certificate

I've been managing the NPS Server for a while and thought it was time to treat it a valid SSL certificate. The setup I bought a wildcard SSL certificate from comodo, compiled it to an .pfx ...