Questions tagged [radius]

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

RADIUS is a client/server protocol that runs in the application layer, using UDP as transport. The Remote Access Server, the Virtual Private Network server, the Network switch with port-based authentication, and the Network Access Server (NAS), are all gateways that control access to the network, and all have a RADIUS client component that communicates with the RADIUS server. The RADIUS server is usually a background process running on a UNIX or Microsoft Windows server.[3] RADIUS serves three functions:

  • to authenticate users or devices before granting them access to a network
  • to authorize those users or devices for certain network services and
  • to account for usage of those services.

Source: wikipedia

355 questions
0
votes
1 answer

freeradius radacct table is empty and fortigate

I configured freeradius with mysql and fortigate when I authorize one user every thing go fine but the radacct table is empty and there is no data was inserted into it I don't know where is the wrong even if I uncommented sql int…
0
votes
0 answers

Radius - Run second instance as a service - Centos 6.8

The server (Centos 6.8) already has a single instance of Radius running as a service. I have created a second instance and am able to make it run successfully with: radiusd -X -d /etc/raddb2 I now need to make this second instance run as a…
Leon
  • 101
  • 2
0
votes
1 answer

Can I demand both MAC and credentials to access network using MS RADIUS server?

Is is possible to demand both of these types of authorization? I know Microsoft NPS can use MAC address or credentials to approve access however can I demand both of these simultaneously? Thanks, Majzlik
Majzlik
  • 3
  • 3
0
votes
4 answers

Network Policy Server error message 'Negotiation failed. No available EAP methods'

I am trying to change our wireless access points to use RADIUS. I have installed Network Policy Server on a server and pointed our wireless access points RADIUS settings to it. I have allowed all Domain Users in the policy. However when a client…
user6888062
  • 245
  • 1
  • 6
  • 12
0
votes
2 answers

how to configure windows login to get OTP as password

I searched a little and understand that its possible,But i couldn't find any clue of how to do it.Also can i use any server that works or it must be something like SafeNet's blackShield server? What i'm looking for is not how to develop it.I'm…
0
votes
0 answers

RADIUS Server for unauthorized device control using 802.1x

I have a closed network for security cameras. I want only for authorized cameras to be able to connect to the Network Switch. If the Switch supports 802.1x authentication, and so do the cameras, could I use a RADIUS Server to control access of these…
0
votes
2 answers

How to give static local IP address to RADIUS Server software and IIS Server Website?

I have following network topology: Whenever I turn on my Server all the local IP addresses (in the form 10.0.0.X) of RADIUS Server and IIS Server changes or sometimes port is assigned to SVCHost process of Windows. I am a beginner in networking…
0
votes
0 answers

Delegating authentication in Windows AD domain

In a Windows AD domain, when the client (user) authenticates against the Domain Controller, is it possible to delegate the authentication to another LDAP/RADIUS server? We have a ton of services in our network and we need to authenticate against a…
David
  • 387
  • 1
  • 7
  • 16
0
votes
0 answers

How to connect wireless APs to the same Radius server if the sevrer is on a different subnet?

I am trying to create the following setup. I have a pfSense firewall with two NIC (Internet - WAN/LAN - Switch). I am setting up VLANs on the switch so I end up with 3 subnets. A subnet for servers and administrador PCs 192.168.100.0/24, a subnet…
0
votes
1 answer

High load and Cpu on Radius server- Supplicant issue?

We have a Wireless Lan controller set to authenticate users against (Lucent) Radius server. The username and password is stored in a database. About once a week the cpu on the radius/java process spikes to %100 cpu and all users for REALM-X get…
jouell
  • 621
  • 1
  • 5
  • 20
0
votes
1 answer

Multi-factor auth with Kerberos and RADIUS

I am looking for a solution in order to allow a multi-factor authentication for a Kerberos-based logon service. By reading some articles, I found some good references about RADIUS, that provides a set of features in order to achieve this…
vdenotaris
  • 123
  • 2
  • 8
0
votes
1 answer

FreeRadius configure two different authentication types

Have a particular scenario in that we would like to use FreeRadius to log into switchs using Kerberos credentials and network devices using EAP-TLS. Currently have this configured and working, but only one at a time. So I can log into switch's using…
mflammia
  • 1
  • 2
0
votes
1 answer

radtest no response from outside localhost

I have set up freeradius in a Microsoft Azure VM. When I radtest from 127.0.0.1, it sends Access-Accept. But when I run radtest from another computer, freeradius doesn't respond. I am running freeradius in debug mode to see any debug output. I have…
0
votes
1 answer

NPS Server 2012 with ASA as Radius client not working, Server 2008 Working

for some time I have been using 2008 R2 as my Radius server and I have a Cisco ASA FW who is configured as Radius client and working ok. I have introduced another Windows 2012 DC, and also configured the same policy straight from the book for…
0
votes
1 answer

For 802.1x PEAP RADIUS Authentication, do you use a different certificate per server?

Consider an environment that uses 802.1x PEAP authentication via RADIUS. Typically, this is to authenticate wireless clients. In this environment there are multiple RADIUS servers and clients will be served by whichever is available. I have seen two…
alifen
  • 165
  • 3
  • 11