Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [radius]

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

0
votes
0answers
18 views

Seamless EAP roaming with 802.11r only on server side

I have a moving device on a network of several hundreds meters, with multiple WiFi routers covering the area, connected to the same controller. The security and authentication protocol is WPA2-EAP ...
1
vote
0answers
18 views

Auth through EAP-TLS for non-domain printer

I cannot find a proper tutorial on how to solve my problem. Our company uses for authentication EAP-TLS for wireless. Now I plan to implement 802.1X for ethernet wired connections for enhanced ...
0
votes
0answers
13 views

About setting RADIUS attribute in user file

In user file If I set RADIUS attribute Tunnel-Type = 13, getting the data as 0d 00 00 00 instead of 00 00 00 0d but when I set Egress-VLANID = 822083648 i.e 31 00 00 00 64 I getting it in correct ...
-3
votes
1answer
127 views

FreeRADIUS, windows 10

I'm following this example to setup a RADIUS server. I'm on Windows 10, and I don't have MD5 option. Does it matter? When I connect to the switch, the LAN says "trying to authenticate", so I'm ...
0
votes
1answer
105 views

RADIUS server work flow

I need to clarify network workflow of RADIUS solution. Does the NAS ask each single request first from the RADIUS server? I know that RADIUS can perform authentication and accounting, but I don't know ...
0
votes
1answer
83 views

Point to site configuration VNET connection VPN accessing

I have two vnet created with 2 virtual networks gateways(vnet1 and vnet2) having point to site configuration one with the radius authentication and other with route based vpn configuration .I have ...
2
votes
1answer
51 views

Can I use Kerberos for EAP without the RADIUS server getting anything but a ticket?

I would like to use Kerberos with FreeRADIUS, but I don't want FreeRADIUS to have access to any passwords (hashed or otherwise), especially because such passwords may not exist if smart card ...
0
votes
0answers
29 views

Is it possible to change a session's life time in FreeRadius?

What I want to do is temporarily allowing a user's access for a short time, say 2 minutes, and if the user takes further authentication process, the user's access can be allowed without limit. I ...
0
votes
1answer
132 views

apt-get can install a package, why a library is not found when I build the source?

I installed freeradius 2.1.12 to my ubuntu machine: apt-get install freeradius Then I downloaded its source, apt-get source freeradius build the source: cd freeradius-2.1.12+dfsg ./configure --...
0
votes
1answer
771 views

How to configure hotspot on a Mikrotik router to provide user and password to other wireless routers?

I have recently purchased a Mikrotik router (RB-951G). There are multiple wireless routers available in my network. They are located in multiple floors. I have connected them to a Cisco small business ...
1
vote
2answers
53 views

EAP (Re)authentification every 8:20 hours

I have a network that uses Freeradius and hostapd to authentificate. Every ~ 8:20 hours (30000 sec or 500 min) a connected station disconnects (gets disconnected?) and a new (Re?)authentification ...
1
vote
2answers
665 views

How to Stop Hacking of WPA2-Enterprise Network

Our private network consists of a Netgear router flashed with DD-WRT, a QNAP server, a dumb 8 port switch, and a number of Ethernet connected laptops, desktops and 2 x WiFi mobile devices. A while ...
0
votes
0answers
434 views

Use two Auth-Type PAP and EAP with FreeRadius

I've freeradius server which uses MySQL to store the data. following is my database radcheck table +-----+----------+--------------------+----+--------------+ | id | username | attribute |...
1
vote
1answer
48 views

User Login/logout accounting to enforce max session time?

I'd like to set up a home system where users (i.e., house kids) have a given max time of computer use per day/week/whatever, and after that time they're logged off. They should be able to log in and ...
1
vote
1answer
90 views

Add Accounting Radius in the RAS (VPN) Configuration

I'm trying to create a powershell script for configuring a specific VPN remote access server in a Windows Server 2012-R2, the following command works fine but how can i configure accounting radius too?...
1
vote
1answer
298 views

Why is sn required by inetOrgPerson?

I'll preface this by saying that I'm fairly new to using LDAP and really have no formal training with it. Pretty much exactly what the topic title says. Is there any real reason that surname is a ...
0
votes
0answers
586 views

Certificates for PEAP an in a Windows Server 2016 NPS + WPA2 Enterprise setup

Was wondering if anybody had some information on how to order certificates from CAs for a PEAP setup on Windows Server with Network Policy Server. Currently running a test setup on a self-signed cert. ...
1
vote
0answers
1k views

Windows Network Policy Server is not logging bad passwords in NPS logs

I have an NPS server for RADIUS from an Aruba controller. Accounting and authentication logging is turned on and working, except for when the logon fails because of bad password. Security Logs All ...
1
vote
0answers
3k views

Trust root or leaf certificate in 802.1x setup?

I am setting up 802.1x via wired or wireless (WPA2 Enterprise) connections in our office, backed by a OneLogin RADIUS server. The certificate is not self-signed, so it's not clear to me whether it's ...
0
votes
1answer
3k views

Failed Authentication Against Windows Server 2012 R2 RADIUS Using PAP

I am trying (unsuccessfully) to remotely authenticate onto a Linux-based network switch against Windows Server 2012 R2 RADIUS using PAP. The following event logs appear: Event 1 The audit log was ...
1
vote
0answers
36 views

WPA2-Enterprise won't work with Win8.1 Client?

I'm the administrator of a relatively small wireless network, with unmanaged, BYOD devices that connect via WPA2-Enterprise (PEAP/MSCHAP authentication), controlled by a cloud RADIUS server. Yes, I ...
-2
votes
1answer
306 views

ISP broadband user Authentication

How does an ISP authenticate a broadband user via its radius server or any other methods. Will it would be possible for me to locate this server eg- packet capture,by halfbridge mode, ip tracert? Is ...
1
vote
0answers
10k views

RADIUS server is not responding. How does it work, and how can I bypass?

First, let me set the stage here. I am in a short-term apartment rental in a building that offers wifi access (through a provider) for $30/month. This service operates a lot like a hotel wifi service....
0
votes
1answer
2k views

FreeRADIUS: custom SQL counter only partially working

I want to add to my FreeRADIUS installation a custom SQL check counter. Basically it's the same as Max-Daily-Session but limited to the current Called-Station-Id. I added this to sql/mysql/counter....
1
vote
0answers
152 views

Log on screen issue Windows 7 wireless user after joining new domain

In our college domain changed new due to centralized process. For the security update, wireless security changed WPA2/Enterprise wireless connection mode. Now the machines connected through wireless ...
0
votes
1answer
956 views

pfSense OpenVPN Server uses PAP Authentication…is this secure?

I have followed many guides online including: http://blog.stefcho.eu/?p=545 I'm setting up openvpn and radius authentication on a pfsense box. All the guides suggest to use PAP authentication. I'm ...
3
votes
1answer
7k views

OpenWRT WPA2-Enterprise & RADIUS - config is not applied

i'm currently using OpenWrt Backfire 10.03 on an Asus WL-500G Premium v1. Scenario is like that: AP should connect to a RADIUS server via wired ethernet and perform authentication requests. I'm ...
0
votes
1answer
530 views

RADIUS and Active Directory

I have an ASUS RT-AC66U Wireless Access Point. It has the option for a RADIUS server. Does this work the same with Active Directory? I have Windows Server 2012 R2 DC and it has the LDAP service ...
17
votes
3answers
40k views

What does the RADIUS server do in a WPA2 Enterprise setup?

I'd like to upgrade my WiFi from "WPA2 Personal" to "WPA2 Enterprise" mode because I know that in principle, on a WiFi secured with "WPA2 Personal", devices who know the PSK can sniff on each other's ...
3
votes
1answer
1k views

Can I use RADIUS for strongswan - psk configured?

I'm a beginner for the strongswan server. And I was looking through the configuration examples from the strongswan.org. It seems the strongswan server should be configured to use EAP authentication ...
0
votes
1answer
2k views

In the context of using RADIUS for WPA2 enterprise, what does a “client certificate” mean, if anything?

I'm trying to set up a RADIUS server for WPA2 enterprise authentication. I'm new to all this. I understand that the server has a "server certificate", which I assume plays a role similar to that ...
3
votes
0answers
523 views

What is required to authenticate user against RADIUS server

I am trying to build a captive portal for my wireless network. For the captive portal, I will be using a linksys router flashed with dd-wrt firmware (with chillispot). For the authentication, I will ...
1
vote
1answer
4k views

Using OpenSSH Server without local user

Currently I've noticed when I use the OpenSSH Server with PAM and for instance RADIUS while I can get the user to authenticate successfully with PAM, I still need a local user account in /etc/passwd, ...
1
vote
0answers
588 views

Authenticate WiFi with certificate instead of password

Is it possible (read done without a massive amount of work) to set up a wireless network that checks for a certificate instead of asking for a password? To be clear: I would like to download a ...
1
vote
1answer
1k views

Radiusd keeps getting restarted by launchd

I am reading these errors in the system log file. I have researched this introduction to radius in order to find a solution as to why Radiusd keeps getting restarted by launchd, but I haven't found a ...
0
votes
1answer
651 views

Wifi Multi-AP Roaming, connected to single authentication server

We are thinking of setting up a configuration where 10 or so wifi APs are setup in our building all with the same SSID for roaming, connected to a wired ethernet for backhaul. Our solution requires a ...
2
votes
1answer
2k views

How to see on which Access Point I am connected that is setup on RADIUS server?

There are some access point with the same name of SSID in my office. All of them are setup on RADIUS server, with Authentication Method: WPA2-Enterprise. How can I see which Access Point I'm ...
0
votes
2answers
2k views

What EAP type to use on Public Wifi 802.1X?

I understand you cannot use EAP-TLS for public wifi because the clients will not have their own certificates, therefore what EAP do you use, so that mutual authentication can take place?
1
vote
2answers
407 views

Public wifi, role of the firewall/gateway?

On a public wifi, like the type you find at an airport, when an unauthenticated user first connects to the network is it the gateway which detects they are unauthorised or the AAA server located ...
4
votes
2answers
2k views

Does 802.1X and RADIUS prevent rogue APs?

I was discussing with a colleague today and he seemed to think that if you use 802.1X it allows users to realise if they are connecting to a rogue access point. I dont understand this though, surely ...
-1
votes
1answer
478 views

Does RADIUS monitor billing info for public wifi hotspots?

Im just trying to work out where in the wireless hotspot architecture one would conduct billing and user account monitoring?
3
votes
2answers
2k views

Is there an open source software to run a 802.1x authenticator (ie. NAS) within Linux? [closed]

I have the following setup: ____________ [Windows PC1] ---------| | | Linux Box |----------[Internet] [Windows PC2] ---------|____________| ...
8
votes
1answer
18k views

DD-WRT: Anyone know how to get RADIUS on the router so I don't need to rely on an external server?

Ideally, in my environment, the radius server would run on the router, so that we can save power. Now, I've heard of people using freeRadius, which I've heard is great, but is kind of a pain to set ...