Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [radius]

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

2
votes
1answer
224 views

How to use different network policies for administrative logins and wireless users?

I'm using a RADIUS server (NPS on Windows 2008 R2) to centrally manage authentication for a bunch of Cisco devices, including switches and wireless access points; I'm currently using RADIUS to ...
0
votes
4answers
21k views

NPS EAP authentication failing after Windows Update

I have a Windows 2008 Std server running NPS. After applying the latest round of updates (including Root Certificates for April 2012 KB931125 (See:http://support.microsoft.com/kb/933430/)), EAP ...
4
votes
1answer
2k views

Cisco ASA LDAP Group Privilege Level

We have a pair of ASA 5510s (8.4.3) on which we use LDAP authentication for VPN and SSH access. On all of our Catalyst switches, which use RADIUS, we're able to set the shell:priv-lvl to 15 in the ...
1
vote
2answers
314 views

Which Authentication Server in consumer Access Points

The WPA2 standard defines three entities: STA: the networking station, e.g. pc AP: access point AS: authentication server As far as I understand, when you buy a regular access point, there is a ...
2
votes
0answers
373 views

Macs to work on 802.1X wired network

We are in the process on 802.1X for all our wired clients. We are using NPS on Server 2008R2 as our Radius server. All our windows clients authenticate using just a computer certificate issued by our ...
2
votes
1answer
1k views

Configure VPN on ASA to log accounting via NPS

Currently we have VPN setup on an ASA 5510. I have it set to use NPS for RADIUS authentication, but I've never really configured much as far as accounting. I'm wanting to set this up to be able to ...
4
votes
4answers
8k views

802.1x PEAP GPO that trusts self-signed CA certificate

I am working on a Freeradius backed 802.1.x authentication infrastructure for our wireless clients. I am using a rather generic Freeradius configuration with EAP-PEAP. Our clients are predominantly ...
2
votes
3answers
2k views

Server 2008 VPN authentication WITHOUT Active Directory

First the set up. 15 workgroup users, and we have a Watchguard firewall with VPN. Currently using the Watchguard to authenticate users for VPN access, but the boss wants to use server 2008 as the ...
0
votes
1answer
977 views

Radius + Vyatta Firewall + Citrix Access Gateway

Im having a problem setting up Radius with Citrix Access Gateway. I had it all set up and working fine when I had the Citrix Access Gateway (CAG) on our main LAN but I want to move it into DMZ. I ...
0
votes
1answer
1k views

freeradius address assignment from ippool

I'm trying to figure out how to assign IP addresses from an ippool to mobile units. Ideally, I would like a unit to receive the same IP at each request. There is no data source to use to populate ...
0
votes
1answer
563 views

WPA2-Enterprise and RADIUS accounting server

Is mandatory to use WPA2-Enterprise to be able to send accounting packages to my RADIUS server from an access point (Meraki)?
2
votes
2answers
1k views

Meraki's Accounting-Requests to RADIUS server

I'm running a RADIUS server with some Meraki APs, the process of Authentications is fine... But it seems that the Meraki Cloud Controller is just sending the authentication packets and not the ...
3
votes
1answer
6k views

Sign an OpenSSL .CSR with Microsoft Certificate Authority

I'm in the process of building a Debian FreeRadius server that does 802.1x authentication for domain members. I would like to sign my radius server's SSL certificate (used for EAP-TLS) and leverage ...
11
votes
7answers
26k views

Why would you use EAP-TTLS instead of PEAP?

As I understood EAP-TTLS and PEAP share same level of security when implemented in wireless networks. Both only provide server side authentication via certificate. The drawback of EAP-TTLS can be ...
1
vote
2answers
3k views

Radius over WAN

I have a couple of small-business routers (Cisco RV120W) that I use at some of our smaller offices configured with a site-to-site VPN to allow connectivity for devices & such between my main ...
1
vote
2answers
2k views

Windows XP will not connect to Enterprise Wireless

We run a Radius server (Windows Server 2008 R2 running NPS). My goal is to push out GPOs to wireless users with the network information. I am successfully doing this with Windows 7 clients, iOS ...
-1
votes
2answers
242 views

RADIUS hardware on the client side?

From the wikipedia page on RADIUS: http://en.wikipedia.org/wiki/RADIUS It says: RADIUS is a client/server protocol that runs in the application layer, using UDP as transport. The Remote Access ...
3
votes
1answer
1k views

Is a PKI required when authenticating a Cisco Aironet AP via radius against AD

We're a small office and have a Cisco Aironet 1250 access point set to WPA-PSK. Now that we've deployed Active Directory I'd like start authenticating my users via radius instead of a PSK. To this ...
2
votes
0answers
860 views

Windows 7 / Windows Vista won't connect to 802.1x RADIUS Server

I've deployed Radius and have no problems connecting with TTLS, PEAP, or MD5 using linux, mac, and windows xp. For Windows 7 and Vista, I'm never prompted with the dialog box to enter username & ...
5
votes
1answer
11k views

Testing radius server from Mac OS X client

I have a radius server set up on a server running Ubuntu 11.04. I have configured my switch to use the authentication server's IP (192.168.1.2) for RADIUS / 802.1x authentication, and I created a ...
0
votes
1answer
4k views

How to limit a VPN user to just one host?

I have a Cisco ASA that authenticates off of RADIUS / AD. I need to give a user VPN access but I want to limit their access to only one host. What is the best way to do this?
0
votes
1answer
430 views

RADIUS work flow

I am attempting to create an authentication system for my network via Radius. Eventually, I want all machines on the network to authenticate with Radius before gaining access to any other network ...
3
votes
1answer
80 views

Is there such a thing as “server sliding” (or similar), and if so, what is it?

I am not a network engineer, but rather a translator, so I apologize in advance if this is a rather obvious question to some of you. Normally Google can answer my questions, but in this case I'm ...
0
votes
2answers
757 views

Make user home directory at gdm login

I'm trying to make home directory at (RADIUS) user gdm login. The auth is working right, but when I try gdm says that the user hasn't a home directory. I tried to do that with pam_mkhomedir.so but ...
4
votes
2answers
21k views

Why would NPS suddenly stop authenticating users?

We use a computer running Windows Server 2008 (32-bit) with the RRAS and NPS roles to authenticate users for VPN and wireless access over RADIUS. This configuration has been working great for more ...
7
votes
1answer
11k views

Third Party Wildcard Certificates for use with Microsoft NPS / RADIUS / PEAP

I want to replace the SSL certificate that is used for PEAP on our NPS server that is doing RADIUS authentication for our Cisco WLCs. The current certificate is a SSL certificate that does Client ...
1
vote
1answer
1k views

How do I setup dynamic VLAN assignment on an autonomous Cisco 1142n?

I've gotten my Cisco 1142n autonomous AP configured with every option under the sun, but I still can't get dynamic VLAN assignment working! I verified the following: I give priority to VLAN ...
5
votes
4answers
893 views

Radius feedback from AP to WiFi client

We have the following setup at our company: a gateway PC with CentOS (gw), running Radius and some traffic filtering programs. All of our employees connect wirelessly, and we have a WPA2 Enterprise ...
2
votes
1answer
487 views

Mac address filtering radius server

I would like to use the radius server on mac os x server (10.6.8) to allow users to access wireless. However the restriction i would like to use is Mac address filtering. Is this possible? how can i ...
0
votes
1answer
2k views

Radius authentication for OpenVPN in pfSense

I have a pfSense Firewall with OpenVPN against RADIUS Server configured in a Windows Server 2008 R2. The RADIUS server is configured in pfSense, but when I try the Authentication (Diagnostics -> ...
2
votes
2answers
8k views

Problem with network policy rule in Network Policy Server

Trying to configure RADIUS for a college network, and have run into the following frustration: I can't set an "AND" condition for group membership of authenticated objects in the network policy rules,...
8
votes
2answers
5k views

Smart card authentication to a Cisco switch?

We have our Cisco network devices configured to authenticate network administrators using their domain accounts via RADIUS running on a Windows 2008R2 server with the network protection role. This ...
0
votes
2answers
3k views

Configuring Cisco Switch and ASA/VPN devices to authenticate with W2008R2 NPS RADIUS

I am currently having issues with being able to authenticate with RADIUS from our Cisco devices…it seems to partially work but I’m missing something apparently, hoping some experts can point me in the ...
2
votes
0answers
2k views

Coovachilli Mac Authentication

I'm running coovachilli 1.2.5 and want to use mac authentication. I'm using --macauth --macreauth --macpasswd macpass in my command line. Based on tcpdump, and on my radius log, my MAC address is ...
1
vote
1answer
4k views

Where can I find the users file for FreeRADIUS in Ubuntu?

I'm using Ubuntu 10.10. I'm trying to learn how to configure a RADIUS server, but I'm having trouble with creating new users to authenticate. Almost all of the tutorials I've found online mention ...
0
votes
2answers
881 views

RADIUS against IMEI

I have a base of users that use mobile devices to access back to the office. there is already lots of existing security. however I would like to add some form of RADIUS authentication on the firewall ...
1
vote
1answer
1k views

How does one guarantee a remote client the same local IP address every time when connecting to a VPN?

I need to configure a VPN for secure remote access to a PACS serving DICOM radiological images. The DICOM standard requires that any clients accessing the PACS must be using a fixed IP address that is ...
2
votes
2answers
4k views

Cannot register RADIUS server in Active Directory, Windows Server 2008 r2

I'm trying to set up a RADIUS server in Windows 2008 R2 following the guide Install Windows 2008 R2 NPS for RADIUS Authentication for Cisco Router Logins. What I can't do is to register the RADIUS ...
1
vote
1answer
2k views

Cisco Remote Access VPN authenticating via RADIUS over Site2Site VPN

Is it possible to setup the remote access VPN to athenticate to a RADIUS server that is on the other end of a Site to site VPN on the same ASA? I have an ASA 5505 that is at a branch office with a ...
0
votes
3answers
3k views

Need to setup a RADIUS server to authenticate a Windows client to a Windows server

I have a server that I have technicians who need to be able to access using shared credentials. However, doing that violates our security policy (!). I need each user to be able to authenticate ...
0
votes
1answer
90 views

Running Radius on a Novell Backbone

I am a rookie network engineer and I've been asked to create a secure wireless system intergrated with an existing network. So far I'd decided to use 802.1x secuity with a Radius enabled server over a ...
0
votes
1answer
922 views

Lotus Notes & Domino RADIUS Integration

Does anyone know if it's possible to have Lotus Notes & Domino do external authentication via RADIUS? Specifically to integrate a 2FA solution.
0
votes
1answer
1k views

DD-WRT + TekRADIUS: Having issues getting it to work

Has anyone else gotten it to work? My setup: Router: Netgear WNR3500v2 WAN IP: y.y.y.y Radius: off Wireless Security: Security Mode: WPA2 Enterprise WPA Algorithms: AES ...
1
vote
2answers
809 views

Can a device (WAP or switch) be configured as an 802.1x supplicant?

We are looking at implementing 802.1x on a wired/wireless network. What I am looking for is a device that can act as a supplicant and once authenticated on the network, is able to pass traffic from ...
4
votes
3answers
11k views

How to integrate RADIUS with Kerberos?

We've got properly configured LDAP+Kerberos on our wired network. Now we want our users to log in to our WiFi network by using their normal credentials. I've found lots of HOWTOS about LDAP+RADIUS ...
1
vote
1answer
845 views

Using arpwatch to backtrack proxy access ip to eap-tls certificate

In my network I am using eap-tls authentication (machine certificates) for clients. Those clients are using a squid proxy to access the internet. The proxy is logging the request to the access.log. ...
1
vote
2answers
245 views

MAC spoofing - keeping the connection alive

Is it possible to keep a connection alive, while spoofing/changing the MAC address of your own network adapter (especially wlan adapter), without needing to re-authenticate against 802.1X RADIUS-...
0
votes
1answer
210 views

Will RADIUS allow me to have authentication from an SBS domain in a 2003 domain?

I'm no RADIUS expert. But my understanding is that RADIUS can use Active Directory as a 'realm' to authenticate. This got me thinking - We have 3 separate clients in one building, and we manage the ...
2
votes
3answers
10k views

Windows RADIUS Server: Sync between RADIUS servers?

We will be setting up a tertiary RADIUS server at a remote site. Up until now, changes to the RADIUS database has been done manually, since it was only 2 servers. With a third one coming online I ...
1
vote
1answer
3k views

Need help getting Dynamic VLAN Assignment working with RADIUS and Dell PowerConnect 3524

I'm attempting to get Dynamic VLAN Assignment working on a number of Dell PowerConnect 3524 switches. I've got a two RADIUS servers, both of which I've proved to be working using radtest on Linux. ...