Questions tagged [radius]

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

RADIUS is a client/server protocol that runs in the application layer, using UDP as transport. The Remote Access Server, the Virtual Private Network server, the Network switch with port-based authentication, and the Network Access Server (NAS), are all gateways that control access to the network, and all have a RADIUS client component that communicates with the RADIUS server. The RADIUS server is usually a background process running on a UNIX or Microsoft Windows server.[3] RADIUS serves three functions:

  • to authenticate users or devices before granting them access to a network
  • to authorize those users or devices for certain network services and
  • to account for usage of those services.

Source: wikipedia

355 questions
0
votes
1 answer

How to configure FreeRADIUS with EAP-TLS and group-based authorization?

I configured FreeRADIUS to use EAP-TLS for certificate based authentication (self-signed certificates). Authentication works fine, except that I'd like to add group-based authorization. More specifically, I need to use the Class attribute to be sent…
0
votes
1 answer

How to configure FreeRADIUS for use with strongSwan group selection?

Building a VPN service with strongSwan, I need to distinguish between several groups of users where each group is assigned a certain subnet with certain permissions (i.e. "group x" has access only to a specific part of the local subnet, e.g.…
0
votes
0 answers

Can NPS, RADIUS, and 802.1x Assign Multiple VLANs To A Single User?

I will be using Network Policy Server (NPS) with a RADIUS server to assign each user to a VLAN when they successfully authenticate to the network using 802.1x. In Active Directory Directory Services (AD) there will be users that are members of…
Bill Vallance
  • 227
  • 2
  • 8
0
votes
1 answer

Requesting access to a Radius server after having requested a previous (succeful) access to another Radius server

I don't know if this idea is non-sense but I was wondering if it was possible. I have a FreeRadius server backed by a LDAP server with uses EAP-TTLS (that is, username+password) to authenticate. So when users connect to a 802.1x switch, they are…
Osqui
  • 135
  • 1
  • 8
0
votes
1 answer

Freeradius 3.0.12 doesn't send any data through mysql

After upgrading from v 2.x, freeradius stopped working for me. I have done multiple tshooting steps which led me to believe that the application is not sending any data through MySQL, even though it states to do so. So what I've discovered is that…
naven
  • 1
  • 1
  • 2
0
votes
1 answer

Different SSLSocket with Radius Server

I want to make a server and client application. All clients connect to the server via wifi. I want to protect the network with SSL Certificate. I found 2 alternatives: By using SSLSocket (javax.net.ssl.SSLSocket). By using Radius Server. My…
koding
  • 3
  • 1
0
votes
1 answer

FreeRADIUS - Use different pipeline for different clients

I currently have a FreeRADIUS setup using EAP-TTLS. I'd like to set it up such that requests coming from localhost use PAP, but that other requests still use EAP-TTLS. How do I select authentication method used on a per-client basis?
Tim Morris
  • 135
  • 5
0
votes
3 answers

Radius server benchmark

I wrote some module for FreeRadius and need to check it's performance. Using radclient is not OK because radius server is multi threaded and radclient not - it waits for an answer for previous request before sending next one. Do anyone have any…
Mike
  • 374
  • 1
  • 3
  • 13
0
votes
1 answer

Why is radtest not working, and returning an error about radclient?

I've installed Free Radius following these steps: sudo apt install freeradius freeradius-config sudo sed -i '1s/^/steve Cleartext-Password := "testing"\n/' /etc/freeradius/3.0/users sudo systemctl stop freeradius.service sudo usermod -a -G ssl-cert…
0
votes
1 answer

802.1x and NPS to secure wired intranet

I want to secure our network from unmanaged device (for example a user brings a laptop from home and connects it to a port in a meeting room). As far as I understood I can use 802.1x and a RADIUS server even if I'm not connecting through a VPN or a…
0
votes
1 answer

Strongswan cannot authenticate with FreeRADIUS server: DNS error

I'm trying to set up RADIUS auth with my Strongswan server. I get the following error: Jun 2 20:51:47 nl1 charon: 17[LIB] resolving 'radius.server.com' failed: Name or service not known Jun 2 20:51:47 nl1 charon: 14[IKE] initiating EAP_RADIUS…
Keanu
  • 1
  • 1
0
votes
1 answer

RADIUS configurations on Server 2008 R2 - WiFi issue

I have configured WiFi authentication on FortiGate 100D through RADIUS on Windows server 2008 R2. When I'm trying to connect to the wifi from a PC (Win 10), it works only when I check "Use my Windows user account" checkbox. If I put domain\user and…
Oleg
  • 1
0
votes
1 answer

Can I make cisco router to act like a radius server?

I need to configure local radius authentication on my cisco router. I have web application in which we have implemented dual factor authentication it works fine with other radius server like freeRadius. I managed to send Access-Request to the cisco…
ananetworking
  • 33
  • 1
  • 6
0
votes
1 answer

How to export MS IAS Radius Login Events to a remote system

Is there a way to (export|pull) MS IAS radius login events (to|from) a remote system ? I can see that the logs are stored in plain text in a file called system32/logfiles/nap On the Windows 2008 server. Am I right in saying that these logs can't…
user29430
0
votes
0 answers

nginx captive portal radius authentication

I have multiple Ruckus Access Point and I want to provide a custom captive portal for guest authentication. The thing I want is to check if user currently has access - then switch him to the site he wants and if not - show captive portal. Can I do…