Questions tagged [radius]

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

RADIUS is a client/server protocol that runs in the application layer, using UDP as transport. The Remote Access Server, the Virtual Private Network server, the Network switch with port-based authentication, and the Network Access Server (NAS), are all gateways that control access to the network, and all have a RADIUS client component that communicates with the RADIUS server. The RADIUS server is usually a background process running on a UNIX or Microsoft Windows server.[3] RADIUS serves three functions:

  • to authenticate users or devices before granting them access to a network
  • to authorize those users or devices for certain network services and
  • to account for usage of those services.

Source: wikipedia

355 questions
0
votes
1 answer

Configuring C2950 with 802.1X/PEAP and RADIUS server

I am setting up 802.1X security on a LAN which has a C2950 switch that controls access from the WLAN to the Ethernet LAN. I plan to use PEAP. I read this the Cisco article on configuring 802.1X security the Remote Authentication Dial-In User…
T. Webster
  • 346
  • 3
  • 9
  • 20
0
votes
1 answer

What decides what tunnels inside EAP-TTLS?

If EAP-TTLS is a EAP method that establishes a TLS tunnel, what goes in the tunnel? It could be another EAP method, but it could also be PAP. What decides? The server, the supplicant, or do they somehow negotiate? How does this phase of the protocol…
Phil Frost
  • 647
  • 5
  • 18
0
votes
1 answer

How to compute CRC in radius response

I have two different proprietary software, one is radius module for billing, second is phone station pbx. When client doing a call, pbx sends radius auth packet to the billing. And billing answering. I have problem with radius response. PBX say…
Korjavin Ivan
  • 2,250
  • 2
  • 26
  • 41
0
votes
2 answers

What is the best methodology for managing backups of configuration files on unix/linux systems?

Hey Serverfault community, So what are the best practices for managing backups of various configuration files on a production unix/linux systems? for example, (and why I am asking). I am part of a team managing some production radius…
bobloblaw
  • 5
  • 1
  • 3
0
votes
1 answer

Radius Authorization against ActiveDirectory and the users file

I have a problem with my freeradius server configuration. I want to be able to authenticate users against Windows ActiveDirectory (2008 R2) and the users file, because some of my co-workers are not listed in AD. We use the freeradius server to…
mohrphium
  • 645
  • 2
  • 9
  • 17
0
votes
4 answers

NPS EAP authentication failing after Windows Update

I have a Windows 2008 Std server running NPS. After applying the latest round of updates (including Root Certificates for April 2012 KB931125 (See:http://support.microsoft.com/kb/933430/)), EAP authentication is failing due to being…
sqlreader
  • 281
  • 1
  • 3
  • 8
0
votes
1 answer

Radius + Vyatta Firewall + Citrix Access Gateway

Im having a problem setting up Radius with Citrix Access Gateway. I had it all set up and working fine when I had the Citrix Access Gateway (CAG) on our main LAN but I want to move it into DMZ. I have set up a Vyatta firewall inbetween the Radius…
boburob
  • 1,174
  • 8
  • 23
0
votes
1 answer

freeradius address assignment from ippool

I'm trying to figure out how to assign IP addresses from an ippool to mobile units. Ideally, I would like a unit to receive the same IP at each request. There is no data source to use to populate static entries for each unit, so I would prefer each…
Bittrance
  • 3,070
  • 3
  • 24
  • 27
0
votes
1 answer

WPA2-Enterprise and RADIUS accounting server

Is mandatory to use WPA2-Enterprise to be able to send accounting packages to my RADIUS server from an access point (Meraki)?
PachinSV
  • 193
  • 1
  • 1
  • 9
0
votes
1 answer

How to limit a VPN user to just one host?

I have a Cisco ASA that authenticates off of RADIUS / AD. I need to give a user VPN access but I want to limit their access to only one host. What is the best way to do this?
evolvd
  • 1,384
  • 6
  • 33
  • 58
0
votes
1 answer

RADIUS work flow

I am attempting to create an authentication system for my network via Radius. Eventually, I want all machines on the network to authenticate with Radius before gaining access to any other network resources, and I want to be able to log the activity…
Calvin Froedge
  • 538
  • 1
  • 6
  • 16
0
votes
2 answers

Make user home directory at gdm login

I'm trying to make home directory at (RADIUS) user gdm login. The auth is working right, but when I try gdm says that the user hasn't a home directory. I tried to do that with pam_mkhomedir.so but is not working. My /etc/pam.d/gdm file: PAM-1.0 auth…
Lorenzo
  • 1
  • 2
0
votes
1 answer

Radius authentication for OpenVPN in pfSense

I have a pfSense Firewall with OpenVPN against RADIUS Server configured in a Windows Server 2008 R2. The RADIUS server is configured in pfSense, but when I try the Authentication (Diagnostics -> Authentication) I always get an Authentication Failed…
Mike B
  • 370
  • 2
  • 5
  • 21
0
votes
2 answers

RADIUS against IMEI

I have a base of users that use mobile devices to access back to the office. there is already lots of existing security. however I would like to add some form of RADIUS authentication on the firewall to further protect access. My question is there…
0
votes
1 answer

Running Radius on a Novell Backbone

I am a rookie network engineer and I've been asked to create a secure wireless system intergrated with an existing network. So far I'd decided to use 802.1x secuity with a Radius enabled server over a Novell backbone. My question is: does Novell…
YsoL8
  • 141
  • 1
  • 1
  • 3