Questions tagged [radius]

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

RADIUS is a client/server protocol that runs in the application layer, using UDP as transport. The Remote Access Server, the Virtual Private Network server, the Network switch with port-based authentication, and the Network Access Server (NAS), are all gateways that control access to the network, and all have a RADIUS client component that communicates with the RADIUS server. The RADIUS server is usually a background process running on a UNIX or Microsoft Windows server.[3] RADIUS serves three functions:

  • to authenticate users or devices before granting them access to a network
  • to authorize those users or devices for certain network services and
  • to account for usage of those services.

Source: wikipedia

355 questions
2
votes
2 answers

Windows 7 Wifi Certificate Trust Anchor

When attempting to connect to our company wireless while not on the domain, I receive a message saying that our RADIUS server provided a valid certificate issued by our root CA, but that the root CA is not configured as a valid trust anchor (on a…
zach
  • 31
  • 2
  • 3
2
votes
2 answers

Restrict FreeRADIUS clients to access service from different LANs with same user and password

I have FreeRADIUS installed on my server, and also have two LANs (or may be more) managed by this server. Let's say LAN A:192.168.1.0, and LAN B: 192.168.2.0. I'm using FreeRADIUS in combination with postgres database. In my radcheck table I have…
artaxerxe
  • 541
  • 2
  • 10
  • 22
2
votes
1 answer

How to use different network policies for administrative logins and wireless users?

I'm using a RADIUS server (NPS on Windows 2008 R2) to centrally manage authentication for a bunch of Cisco devices, including switches and wireless access points; I'm currently using RADIUS to authenticate IOS console/SSH logins, and provide…
Massimo
  • 70,200
  • 57
  • 200
  • 323
2
votes
0 answers

Macs to work on 802.1X wired network

We are in the process on 802.1X for all our wired clients. We are using NPS on Server 2008R2 as our Radius server. All our windows clients authenticate using just a computer certificate issued by our local CA. The problem is that our CTO uses a mac…
NickDa
  • 87
  • 1
  • 2
  • 5
2
votes
1 answer

Configure VPN on ASA to log accounting via NPS

Currently we have VPN setup on an ASA 5510. I have it set to use NPS for RADIUS authentication, but I've never really configured much as far as accounting. I'm wanting to set this up to be able to tell more of what people are doing/accessing when…
Don
  • 838
  • 8
  • 19
  • 33
2
votes
3 answers

Server 2008 VPN authentication WITHOUT Active Directory

First the set up. 15 workgroup users, and we have a Watchguard firewall with VPN. Currently using the Watchguard to authenticate users for VPN access, but the boss wants to use server 2008 as the authentication server. The watchguard allows a…
2
votes
2 answers

Meraki's Accounting-Requests to RADIUS server

I'm running a RADIUS server with some Meraki APs, the process of Authentications is fine... But it seems that the Meraki Cloud Controller is just sending the authentication packets and not the accounting requests. I've tested the RADIUS sending…
PachinSV
  • 193
  • 1
  • 1
  • 9
2
votes
0 answers

Windows 7 / Windows Vista won't connect to 802.1x RADIUS Server

I've deployed Radius and have no problems connecting with TTLS, PEAP, or MD5 using linux, mac, and windows xp. For Windows 7 and Vista, I'm never prompted with the dialog box to enter username & password after configuring 802.1x support on the…
Calvin Froedge
  • 538
  • 1
  • 6
  • 16
2
votes
1 answer

Mac address filtering radius server

I would like to use the radius server on mac os x server (10.6.8) to allow users to access wireless. However the restriction i would like to use is Mac address filtering. Is this possible? how can i do this if it is?
Gatura
  • 573
  • 3
  • 10
  • 24
2
votes
4 answers

Has anyone had luck running 802.1x over ethernet using the stock Windows or other free supplicant?

I just wanted to see if anyone else has had luck implementing 802.1x over ethernet. So here's my basic setup. Switch sends out 3 eapol messages spaced out 5 seconds apart. if there's no response the machine gets put on a guest vlan with restricted…
Chris Hupman
  • 184
  • 5
2
votes
2 answers

Problem with network policy rule in Network Policy Server

Trying to configure RADIUS for a college network, and have run into the following frustration: I can't set an "AND" condition for group membership of authenticated objects in the network policy rules, e.g. I'm trying to create a NPS rule that says,…
Rob Moir
  • 31,884
  • 6
  • 58
  • 89
2
votes
0 answers

Coovachilli Mac Authentication

I'm running coovachilli 1.2.5 and want to use mac authentication. I'm using --macauth --macreauth --macpasswd macpass in my command line. Based on tcpdump, and on my radius log, my MAC address is being authenticated and Radius is responding with…
rday
  • 121
  • 7
2
votes
2 answers

Cannot register RADIUS server in Active Directory, Windows Server 2008 r2

I'm trying to set up a RADIUS server in Windows 2008 R2 following the guide Install Windows 2008 R2 NPS for RADIUS Authentication for Cisco Router Logins. What I can't do is to register the RADIUS server to the Active Directory service which is…
Eric Herlitz
  • 588
  • 2
  • 9
  • 19
2
votes
3 answers

Windows RADIUS Server: Sync between RADIUS servers?

We will be setting up a tertiary RADIUS server at a remote site. Up until now, changes to the RADIUS database has been done manually, since it was only 2 servers. With a third one coming online I wanted to see if there is some way to sync the…
Josh Brower
  • 1,669
  • 3
  • 18
  • 29
2
votes
4 answers

How can I revoke access for a user across different systems?

We are going to let one of our sysadmins go in a few weeks. He has access to our entire infrastructure, so we'll have to reset the passwords on everything. This is going to be really time consuming though, with the number of servers and devices out…
zippy
  • 1,718
  • 3
  • 21
  • 36