Questions tagged [radius]

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

RADIUS is a client/server protocol that runs in the application layer, using UDP as transport. The Remote Access Server, the Virtual Private Network server, the Network switch with port-based authentication, and the Network Access Server (NAS), are all gateways that control access to the network, and all have a RADIUS client component that communicates with the RADIUS server. The RADIUS server is usually a background process running on a UNIX or Microsoft Windows server.[3] RADIUS serves three functions:

  • to authenticate users or devices before granting them access to a network
  • to authorize those users or devices for certain network services and
  • to account for usage of those services.

Source: wikipedia

355 questions
0
votes
1 answer

Log usernames in squid for clients connected in WiFi with Radius

I am looking for a solution to a problem: Clients connect to the WiFi network using a Radius server and then use the Internet through a transparent Squid server that logs access. I would like to find a system to display the username logged in Squid…
Chris
  • 1
0
votes
1 answer

Some Macs not authorizing via 802.1x

Hello I have a really weird issue with some macs not being able to connect to 801.1x in some areas on campus. They however can connect in other places on campus. The configs for both switches are the same and we cannot figure out what is going on.…
0
votes
1 answer

RADIUS Will Not Authenticate For Console & SSH

I am trying to RADIUS authenticate on my HP ProCurve 2910al W14.38 with both console and SSH. My show authentication shows the following: Access Task | Login Primary Login Secondary Enable Primary Enable…
JukEboX
  • 815
  • 4
  • 17
  • 46
0
votes
1 answer

Advice on deploying services like NTP, DNS, Radius etc for a small NOC

network engineer here. I recently deployed a small office network and was asked to help out with deployment of some of the services. I have two ESXi servers on my hands and I need to deploy NTP, Radius, Syslog and some management software. I would…
0
votes
1 answer

How Windows check radius server certificate?

How Windows check radius server certificate (for wifi connections)? Does it look only on CN field from radius server certificate and not look at Subject Alternative Name field altogether? I did some tests, and Windows accept radius server…
Raf
  • 173
  • 7
0
votes
1 answer

What is expected value of SMD5-Password in freeradius' user config file?

I am using freeradius v2.1.12 on Ubuntu v14.04. Here is /etc/freeradius/users: test SMD5-Password := "{SMD5}xbYqJDY4gqVyE8Vhty//QnRlc3RpbmcxMjM=" I get this value by using the perl script from http://www.openldap.org/faq/data/cache/418.html, I…
my_question
  • 151
  • 1
  • 1
  • 3
0
votes
1 answer

Linux: Chilispot or FreeRadius

Has anybody installed Chilispot or FreeRadius on Ubuntu? If yes, where are the traps? How is your experience? Peace Ice
Ice
  • 404
  • 1
  • 7
  • 16
0
votes
1 answer

Asus AC5300 WPA2 enterprise hourly disconnection

I have an Asus RT-AC5300 running the latest stock firmware setup with WPA2 Entreprise. I can connect to the Wi-Fi with the radius server without any issue but I get disconnected every single hour. I set the network key rotation interval to 0 on all…
Ajite
  • 1
0
votes
2 answers

Can I Specify an Existing ACL using a Radius AV Pair?

I am able to specify access-lists for VPN users on my IAS radius server using avpairs like: Cisco-AVpair = "ip:outacl[#number]={standard-access-control-list | extended-access-control-list}" So for example: ip:inacl#101=deny tcp 192.168.1.0…
Kyle Brandt
  • 83,619
  • 74
  • 305
  • 448
0
votes
1 answer

Strongswan Installation for CentOS 7

I'm want to use IKEv2 VPN on a CentOS 7.* VMs, and I want to Authenticate the users with our RADIUS server. Currently, I'm using yum install strongswan command to install the strongswan repo, but it doesn't load the eap-radius plugin by default. is…
Varun Taliyan
  • 26
  • 1
  • 7
0
votes
1 answer

How do I add RADIUS clients to Windows NPS without a known IP or DNS?

When trying to add a RADIUS client to Windows NPS, it REQUIRES an IP address. What if this IP address is known? i.e. using cloud based WAPs with WPA Enterprise authentication? i.e. CloudTrax, Ubiquiti Unifi, etc...
Novox
  • 474
  • 1
  • 9
  • 27
0
votes
1 answer

proxy.conf file in freeradius

I am working on free radius management System which I developing it with PHP language. my system will be available on the cloud, suppose there are company1 and company2 which will use our system. company1 will have database1 which will contain…
M.Bwe
  • 3
  • 4
0
votes
1 answer

How to clone and restore FreeRadius setup in another server?

I have an up and running Freeradius instance in Ubuntu server with several configuration changes. Is there a standard way of cloning this radius server to another server with same configurations. My current idea is to install Freeradius to the…
Channa
  • 101
  • 2
0
votes
1 answer

RADIUS server on VPN set up

Just a quick question, hoping for a quick answer. I'm studying for my MCSA and I'm a little confused about RADIUS. Currently I have a VPN server set up with RRAS and NPS on my home server lab. Does that make the VPN Server a RADIUS server if it's…
Zach85
  • 19
  • 1
  • 1
  • 5
0
votes
1 answer

Freeradius radclient unsupported attribute

I want to send disconnect-message to NAS using radclient program but when I want to disconnect one user using this command echo user-name=zaib | radclient -x 192.168.3.1 disconnect "muh" the debug mod show this error rad_recv: Disconnect-NAK…