Questions tagged [radius]

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

RADIUS is a client/server protocol that runs in the application layer, using UDP as transport. The Remote Access Server, the Virtual Private Network server, the Network switch with port-based authentication, and the Network Access Server (NAS), are all gateways that control access to the network, and all have a RADIUS client component that communicates with the RADIUS server. The RADIUS server is usually a background process running on a UNIX or Microsoft Windows server.[3] RADIUS serves three functions:

  • to authenticate users or devices before granting them access to a network
  • to authorize those users or devices for certain network services and
  • to account for usage of those services.

Source: wikipedia

355 questions
1
vote
1 answer

NPS server Active Directory registration & WIFI RADIUS

Background (I'm new to this, so bear with me): So, I set up an NPS server vm in an AD domain to try out RADIUS client WAPs. The NPS is installed alongside an AD CS server (enterprise, plus one offline). I configured the NPS server with RADIUS…
amrobx
  • 11
  • 2
1
vote
1 answer

Locking down specific VPN users or any other alternatives?

I am looking for solutions on locking down VPN connections from clients to our untrusted testing domain. Basically a remote access option that we can give our clients to road test our software before we make a release to them. We have a tested way…
Qwerty
  • 1,504
  • 2
  • 15
  • 24
1
vote
0 answers

Authenticating devices instead of users via PEAP/Radius

Our Cisco Aironet AP uses Radius to authenticate against our Active Directory via our Network Policy Server (NPS). For my users, on their domain-managed laptops and BYO devices (such as laptops, smartphones, tablets, etc.) this works fine. However,…
Martijn Heemels
  • 7,728
  • 7
  • 40
  • 64
1
vote
1 answer

LDAP authentication using RADIUS server

I have a RADIUS server with a custom authentication method. I have a Mysql-Database with passwords of a Django CMS which are hashed in PBKDF2_SHA256, so I had to write a custom authentication script. My RADIUS auth sections looks like the…
Drudge
  • 135
  • 1
  • 2
  • 12
1
vote
1 answer

EAP-TLS: is it possible eavesdropping when sharing client certificate?

I want to know how to share a network of WPA2 enterprise with EAP-TLS, authenticating users with a common certificate. They share the same certificate. I'm afraid they can monitor each other. Is that possible? In EAP-TLS, do clients encrypt…
jumeno
  • 25
  • 6
1
vote
1 answer

Cisco 1841 banner info

I am using a Cisco 1841 router. I have programmed radius settings onto it which is always used to login if the radius server is present. If the radius server is down or not present it then converts to the line con 0 password. Is there a way to…
Robert S
1
vote
2 answers

Point of Shared Secrets on RADIUS Servers over a Cisco Switch

I was wondering what the point of Shared Secrets are on RADIUS servers if I set the secret in the Cisco switch configuration. If the supplicant wanting to be authenticated does not have to know it, what is the point? Thanks
Alex
  • 11
  • 3
1
vote
2 answers

Radius server test tool

Is there any good tool to test Radius server? (linux|windows|unix) Authorisation check is a minimum requirement.
TiFFolk
  • 1,077
  • 3
  • 15
  • 25
1
vote
2 answers

Nagios-Plugin "check_radius" missing in Ubuntu 14.04?

Since I asked this question already on askubuntu but nobody answered for a week perhaps here somebody knows the answere (https://askubuntu.com/questions/462162/nagios-plugin-check-radius-missing-in-ubuntu-14-04). I recently updated our Nagios-Server…
cljk
  • 225
  • 1
  • 10
1
vote
0 answers

Troubleshooting 802.1x authentication issue relating to signal strength

My setup: Windows 2008 R2 server with the NPS role configured for RADIUS _PEAP/MSCHAPV2. I have a WPA2 Enterprise network configured on the Ubiquity controller. 3 Ubiquity UniFi LR access points. At certain distances from an access point, and…
MSD
  • 41
  • 3
1
vote
1 answer

802.1x auth without certificate on clients

I'm trying to implement WPA-Enterprise authentication on my UniFi Controller (3.1.10) without the need for certificates on clients. My RADIUS server will be Windows Server 2012R2 with NPS role installed. All I want is for my devices (Macs + Android)…
jlwoff
  • 21
  • 1
  • 1
  • 4
1
vote
0 answers

Server 2008 RADIUS on auth non-domain computers

I have read a few articles about the web regarding this, but I seem to be unable to find a definitive answer for my question. I have an Aruba Networks controller configured to hit a RADIUS server enabled via NPS service on a 2008r2 server. We have a…
1
vote
1 answer

Authentication to Squid proxy with a RADIUS-authenticated client

I want to set up a wireless environment where WPA2-Enterprise is used for authentication to a FreeRADIUS server (using EAP-TTLS or PEAP), and the wireless client is seamlessly routed through and authenticated to a Squid proxy. I can get the…
Robin McCorkell
  • 273
  • 1
  • 10
1
vote
1 answer

Managing Active Directory account access across multiple forests / customers

We do managed IT services for a number of small / medium business. I'm looking to find a solution to manage our access to our clients' AD forest's in a scalable fashion. Right now, we manually create our own login in AD, with sufficient rights. As…
1
vote
0 answers

How do I set up an 802.1X infrastructure for use with OS X and iPads?

At my workplace I have been tasked with setting up machine certificate based 802.1X wireless authentication for our Apple devices. It seems like on the client side this will be handled by Profiles (specifically a System Profile as it is the device…