Questions tagged [radius]

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

RADIUS is a client/server protocol that runs in the application layer, using UDP as transport. The Remote Access Server, the Virtual Private Network server, the Network switch with port-based authentication, and the Network Access Server (NAS), are all gateways that control access to the network, and all have a RADIUS client component that communicates with the RADIUS server. The RADIUS server is usually a background process running on a UNIX or Microsoft Windows server.[3] RADIUS serves three functions:

  • to authenticate users or devices before granting them access to a network
  • to authorize those users or devices for certain network services and
  • to account for usage of those services.

Source: wikipedia

355 questions
1
vote
1 answer

How does one guarantee a remote client the same local IP address every time when connecting to a VPN?

I need to configure a VPN for secure remote access to a PACS serving DICOM radiological images. The DICOM standard requires that any clients accessing the PACS must be using a fixed IP address that is pre-registered in PACS. I haven't implemented…
Joe Carroll
  • 528
  • 3
  • 11
1
vote
1 answer

Cisco Remote Access VPN authenticating via RADIUS over Site2Site VPN

Is it possible to setup the remote access VPN to athenticate to a RADIUS server that is on the other end of a Site to site VPN on the same ASA? I have an ASA 5505 that is at a branch office with a site to site VPN to head office (with a 5510) i then…
Dan
  • 91
  • 1
  • 3
1
vote
3 answers

Need to setup a RADIUS server to authenticate a Windows client to a Windows server

I have a server that I have technicians who need to be able to access using shared credentials. However, doing that violates our security policy (!). I need each user to be able to authenticate using their own credentials, but the server in…
drosenblatt
  • 13
  • 1
  • 3
1
vote
1 answer

Lotus Notes & Domino RADIUS Integration

Does anyone know if it's possible to have Lotus Notes & Domino do external authentication via RADIUS? Specifically to integrate a 2FA solution.
liehann
  • 11
  • 3
1
vote
2 answers

Can a device (WAP or switch) be configured as an 802.1x supplicant?

We are looking at implementing 802.1x on a wired/wireless network. What I am looking for is a device that can act as a supplicant and once authenticated on the network, is able to pass traffic from any downstream connected device. The point of doing…
Allan Ross
  • 11
  • 2
1
vote
1 answer

Using arpwatch to backtrack proxy access ip to eap-tls certificate

In my network I am using eap-tls authentication (machine certificates) for clients. Those clients are using a squid proxy to access the internet. The proxy is logging the request to the access.log. Now what I want to do is to backtrack from an IP…
HalloDu
  • 121
  • 1
  • 9
1
vote
2 answers

MAC spoofing - keeping the connection alive

Is it possible to keep a connection alive, while spoofing/changing the MAC address of your own network adapter (especially wlan adapter), without needing to re-authenticate against 802.1X RADIUS-server with eap-tls? I need this to secure a network,…
HalloDu
  • 121
  • 1
  • 9
1
vote
1 answer

Need help getting Dynamic VLAN Assignment working with RADIUS and Dell PowerConnect 3524

I'm attempting to get Dynamic VLAN Assignment working on a number of Dell PowerConnect 3524 switches. I've got a two RADIUS servers, both of which I've proved to be working using radtest on Linux. One of the servers (Priority 0) is hosted on the…
Bryan
  • 7,628
  • 15
  • 69
  • 94
1
vote
1 answer

FreeRADIUS Default Answer

We are using FreeRADIUS with a MySQL database, authenticating users. We ran into an issue where are MySQL database was slow causing the max number of threads to be reached. The issue with this is, when the server couldn't answer the requests as…
jinanwow
  • 443
  • 6
  • 15
1
vote
2 answers

How to set Windows to use an external RADIUS server for user authentication to share folder?

Is it possible and if so how, to make users use an external RADIUS server to connect to Windows shares?
MealstroM
  • 1,517
  • 1
  • 17
  • 32
1
vote
1 answer

Vista Enterprise doesn't find logon servers in a network with 802.1x authentication

In a network with 802.1x configuration and a samba server configured in the domain, I have a radius server that delegates the authentication against the samba domain for users (using LDAP). The radius defines which VLAN the user is supposed to have…
jneves
  • 1,041
  • 6
  • 15
1
vote
2 answers

configure a Cisco ASA to use MS-CHAP v2 for RADIUS authentication

Cisco ASA5505 8.2(2) Windows 2003 AD server We want to configure our ASA (10.1.1.1) to authenticate remote VPN users through RADIUS on the Windows AD controller (10.1.1.200) We have the following entry on the ASA: aaa-server SYSCON-RADIUS protocol…
DrStalker
  • 6,946
  • 24
  • 79
  • 107
1
vote
1 answer

Windows XP login using Radius authentication

I would like to use existing Radius server to provide AAA for users which are logging to a Windows XP machine. Cisco can use Radius, Linux (via PAM) as well, is it possible for Windows XP?
L.R.
  • 775
  • 6
  • 11
1
vote
2 answers

8021x wireless clients auto connect prior to user login

I am using a 2008 r2 dc that also performs Radius (NPS), I also have a 2008 r2 certificate authority which is giving out certificates. The computers are getting the certificate and when a user logs into the device (that has previously logged in)…
JohnyV
  • 938
  • 4
  • 26
  • 45
1
vote
2 answers

RADIUS authentication on Cisco switches: how to assign privilege levels?

I need to configure some Cisco switches (IOS 12.x) to authenticate against a RADIUS server; the server is Windows Server 2003's IAS, and it validates users against his Active Directory domain. I know how to configure the switches to validate…
Massimo
  • 70,200
  • 57
  • 200
  • 323