Questions tagged [radius]

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

RADIUS is a client/server protocol that runs in the application layer, using UDP as transport. The Remote Access Server, the Virtual Private Network server, the Network switch with port-based authentication, and the Network Access Server (NAS), are all gateways that control access to the network, and all have a RADIUS client component that communicates with the RADIUS server. The RADIUS server is usually a background process running on a UNIX or Microsoft Windows server.[3] RADIUS serves three functions:

  • to authenticate users or devices before granting them access to a network
  • to authorize those users or devices for certain network services and
  • to account for usage of those services.

Source: wikipedia

355 questions
0
votes
0 answers

how to select the ISE proxy sequence based on an LDAP lookup?

I am currently setting up a VOIP network for my customer, which includes 802.1x and MAB authentication. The normal auth sequence goes like this: The switch detects a new machine with no 802.1x protocol setup, sends a MAB request to the ISE…
Adalcar
  • 101
  • 1
0
votes
0 answers

Certificates issue during RADIUS authentication using NPS server with PEAP MSCHAPv2

I am using NPS as a RADIUS server to authenticate some devices using PEAP MSCHAPv2. I have an issue during the server authentication, I am using a chain of trust certificates, with 1 server cert, 1 intermediate cert and 1 CA cert. The problem is…
0
votes
0 answers

Multiple authentication mechanisms on HPE switch

Question Is there a way to configure multiple authentication mechanisms for SSH logins on an HPE switch? Either I did not find that in the manuals yet, or there is no information on that topic. This is what I want to do: 1. Authenticate users in…
TomS
  • 175
  • 1
  • 1
  • 9
0
votes
0 answers

Radius authorized WiFi clients cannot access network

I am using Fortigate + FortiAP and a Radius (WS 2019 NPS) for authorization. I can access the WiFi, I receive IP from dhcp (which is in the network), however I cannot go anywhere else. I cannot even ping the default gateway, nor dhcp server from my…
Artur
  • 17
0
votes
0 answers

Windows NPS Logs - How to decode the class (25) attribute?

I'm wondering if there is a specific format for the "Class" attribute in Windows NPS logs. Specifically, I'm looking at logs from Windows Server 2019 which are under %SystemRoot%\System32\LogFiles\NPS and have the filename format of INYYMMDD.log…
0
votes
0 answers

Why I am getting wrong IP address when connected to the freeradius server with VLAN attribute set

I am new to the Freeradius I am trying to connect to the Unifi AP through freeradius authentication. I can connect to it successfully and access local services. but I am not getting the correct IP address. SSID is in VLAN 31 with IPs ranging in…
0
votes
1 answer

Mikrotik Ovpn with RADIUS

I need to setup OpenVPN server on a Mikrotik router. The authentication for the clients needs to be done by a Windows RADIUS server. My problem is that the Mikrotik uses the unencryptrd PAP protocol to comunicate with the RADIUS server when…
Smoke
  • 66
  • 2
0
votes
0 answers

Wifi connection fails until user logs in, then drops when the log out

Scenario: We have a number of PCs (50+) on a small corporate network, running Windows 10, MS server 2012 running the normal services (AD, DHCP, DNS etc) and a Ubiquity based network and wireless APs. Wifi authenticates through RADIUS. We are in the…
0
votes
1 answer

Same FQDN for different IP depending on connection

I run a Kerberos / LDAP user authentication on Debian, which works nicely for decades. I now would like to use notebooks, which may connect by wire or by WiFi. I'm stuck thinking how to set up this infrastructure, and I refuse to believe that there…
Lars Hanke
  • 285
  • 3
  • 16
0
votes
2 answers

How to show an internal static page to IP addresses list?

I have a ubuntu 22.04 server, a list of ip addresses of users on my local network and I want to redirect http/https traffic from this list to a local informative html page. Similar to how a hotspot would. I have tried with apache2, squid, wpad (252…
acgbox
  • 376
  • 1
  • 5
  • 21
0
votes
0 answers

Hostapd RADIUS Attributes - FramedIP

So I recently started playing with Hostapd and I finally got 802.1x working. The issue is, I have an authenticating proxy server where I'm sending my RADIUS Acct and while it's logging the authenticated user, it's not logging an IP address. So I…
Flynn15
  • 1
  • 1
0
votes
0 answers

How to assign user role when authenticating Cisco switch with Radius server and LDAP?

I'm setting the Radius server to remote login by LDAP user. I use freeRadius. The problem is default user role is network-operator. I want to know how to upgrade user role to network-admin. I've searched for a few days but no proper solution or any…
hoa.le
  • 1
0
votes
0 answers

Windows Server 2016 - Error EapHost when connecting to NPS from Cisco Access Point

I have a simple setup: Cisco Access Point (old one AIR-CAP3502I-E-K9), and it is connected to an older Cisco Switch, and to the switch, the same VLAN, I have a Windows 2016 server. The server has RADIUS, NPS, to authenticate clients connecting to…
Delpux
  • 1
  • 1
0
votes
0 answers

How to add user to Radius using MD5?

I've installed Radius it works ok with no issues. The only problem I can only add users in clear text Is there any way to add them using MD5 or any encryption type ? I'm using radius with MariaDB and Daloradius Best Regards
0
votes
1 answer

pam radius bypass same local user (exception user)

Pam Radius login works with the following configuration. However, it would be necessary for some users to perform local authentication. How can I solve this? [xxxxxxxxxxx ~]# cat /etc/pam.d/sshd #%PAM-1.0 auth [success=done default=bad…
dilen7
  • 1
  • 1