Access Control MAC address by Radius doesn't work

Hi,
How I can try if my Airport TimeCapsule can ping to my windows 2008 server with Radius?
I snnifed the lan on Radius server and I only saw the broadcast messages of the airport.
I have wpa personal with mac addres filter by radius, but doesn't works and I can access with any pc without check de mac.
Anyone can help me please?
Regards!!

I am not so familiar with setup of wireless with Radius.. The Apple routers are not enterprise class but very much domestic.. so the enterprise level login seems to be problematic.
Give us a couple of screenshots of the setup and that might help determine the issue.
There is some info with help on setting it up here.
Multiple airport Extremes and RADIUS
Using windows server will of course make life that much harder.

Similar Messages

Mavericks, AppleTV-3, Accessibility Zoom, Zoom Style: Full Screen, doesn't work at all. Help.

I'm a teacher using an AppleTV 3 (latest updates) to project & teach FCP X in a large iMac lab. Using my Macbook Pro (late 2011), I could use any of the Zoom, Zoom Styles. However, since upgrading to Mavericks, I have an issue when projecting my laptop screen to white screen. The problem is when using Accessibility Zoom, Zoom Style: Full Screen, doesn't work at all. Strangely, Zoom Style: Picture in Picture works fine. I've tried other macs running Mountain Lion, both work without issue. Please help. This is killing my effectiveness.

George Johnson wrote:
Is the page size of the PDF 8.5 inches wide? What do you have set for the "Acrobat > Preferences > Page Display > Custom Resolution" setting? What is the pixels/inch spec for your display?
I have a 13" MacBook Pro. The display is 1280x800 pixels and about 11-1/4 inch wide.
1280 pixels / 11.25 inch = 113.8 pixels/inch
When calibrated using the method I mentioned above, my custom resolution setting in Acrobat is 114 pixels/inch, which is close enough to the spec of 113 for this display.
Yes its 8.5 wide I printed a test page its formatted 8.5 by 11
Acrobat does a little differently. Word and other applications, for example 100% means to physically see right, & left edge, and top & bottom. you see the entire page without scrolling. an 8.5 by 11 page. If you want to see 8.5 width you set page width which for Portriat page its 292%
My monitor settings 1920 by 1200
DPI system default 131 custom 110
Also on Mac what you see on screen depends upon the Printer used. (Just FYI only)

Airplay mirroring on Mac Mini (late 2012) doesn't work, extended display does...

Airplay mirroring on Mac Mini (late 2012) doesn't work, extended display does... What's going wrong here?
Details: OS X Yosemite 10.10
Apple TV 3rd generation, version 7.0
Switching Airplay on on Mac Mini works. It goes automatically on extended display mode. Switching to mirroring works for about 1 sec and then it switches back to extended display mode. On my tv screen i see my second desktop. Funny detail: it has the desktop background i used previously. Another funny detail: I had exactly the same problem when i used the previous versions of OS X and the Apple TV software...
Who can help, please!

I also have been having problems with Airplay on my 2014 Mac Mini see Mac Mini 2014 Airplay Display Disconnect Bug?
I"ve also noticed that my Apple TV (3rd Gen) does not appear in the iTunes Airplay list on my Mac Mini whereas it does on my MacBook.
I've booked a call with Apple Support for next Sunday to discuss the issue.
If I get any useful info I will pass it on.

What should I do if the iphoto keeps on saying that "Plz wait for import to complete" when i click the close button but it is not importing photos? How can I close the iPhoto? I try to switch my mac off but it doesn't work. Thanks.

What should I do if the iphoto keeps on saying that "Plz wait for import to complete" when i click the close button but it is not importing photos? How can I close the iPhoto? I try to switch my mac off but it doesn't work. Thanks.

You should be able to select Force Quit from the menu beneath the Apple icon in Finder
and choose to Quit iPhoto from there, without messing up the Mac OS X in the process.
OS X - Support
Not sure if rebuilding the iPhoto library would help this issue. However if you had to
turn off the computer without the correct method (unplug, etc; instead of menu choice)
the system may have accrued damages and should be checked, maybe repaired by
use of the Disk Utility in the system. Or restart the computer in Safe Boot mode, then
run 'repair disk permissions' while it is running in that reduced mode; then restart after.
•Understanding Safe Mode - tuts+ computer skills tutorial:
http://computers.tutsplus.com/tutorials/understanding-safe-mode--mac-59897
•OS X: What is Safe Boot, Safe Mode?
Suggestions on how to use Safe Mode in article, to resolve issues, may be helpful.
There likely are other means to rectify troublesome applications, including reinstall.
Be sure to backup your music, image, video, and other work on an external drive
or suitable device as a precaution against loss should there be a hard drive failure.
iPhoto - Mac Apps - Apple Support
There should be some tips and help information using iPhoto via this tiny Support link.
Good luck & happy computing!

Using NAR to restrict access by MAC address

Hello All,
We have a solution where home users connect via ATM onto our network. Currenty their radius requests are passed onto Cisco ACS 3.3 and they are authenticated using RSA SecurID Fobs to an ACE server.
I am trying to look at an alternative to using a SecurID fob and restrict the end user's access based on MAC address.
I found this on the online documentation for ACS 3.3
"About Non-IP-based NAR Filters
A non-IP-based NAR filter (that is, a DNIS/CLI-based NAR filter) is a list of permitted or denied "calling"/"point of access" locations that you can use in restricting a AAA client. However, by entering an IP address in place of the CLI you can use the non-IP-based filter even when the AAA client does not use a Cisco IOS release that supports CLI or DNIS. In another exception to entering a CLI, you can enter a MAC address to permit or deny; for example, when you are using a Cisco Aironet AAA client. The format of what you specify in the CLI boxCLI, IP address, or MAC addressmust match the format of what you receive from your AAA client. You can determine this format from your RADIUS Accounting Log."
If I specify a clients MAC in any of the non IP NAR options (CLI, Port, DNIS)access is refused. I am using radius IETF and the only time I can see the MAC in the radius accounting logs is when I turn on the option to log cisco-av-pair. Nothing is being logged under CLI or DNIS, so I don't think I can restrict access based on MAC using a non IP NAR. Has anyone implemented what is referred to in the documentation above? Is it just applicable to cisco Aironet? Any ideas?
Thanks.

A NAR is a definition, which you make in Cisco Secure ACS, of additional conditions that must be met before a user can access the network. Cisco Secure ACS applies these conditions using information from attributes sent by your AAA clients. So it is not device specific.

Transfer address book from M-access to Mac address book

Hi,
I have a relatively new MacBook pro 17", and i am new to the whole operating system.
My old laptop running on Windows XP has all my houses address's for friends and everyone on it stored in Microsoft Access, and i wish to transfer this to the mac addresss book.
can anyone help me with this?
I would also like to say that when i have tried opening up the address's in M-Access i have exported them as a .txt file yet Mac Address book does not recognise this.
I have already also managed to transfer email address's from Microsoft outlook and this worked fine.
If you know the answer would you mind emailing me to
[email protected]
MacBook pro 17" Mac OS X (10.4.8) 2.33ghz 2gb X1600-256vram

no, from Microsoft access i can not export a text file,
for some reason it doesn't have this option
thanks

Restricting access via MAC address?

Hello,
Could someone please tell me how to restrict access to my wireless network (and internet sharing) by only allowing computers with a certain MAC address to join?
I'm kinda stumbling around here
Thanks,
Jonny

Sorry if I wasn't being specific enough...
I have my eMac set up as a Software Base Station, which streams internet & Airtunes to an Airport Express. I have it set up this way, because my ADSL modem is connected via USB (so it's a bit of a workaround). As a result, I have Internet Sharing switched on, so I can access it from all my other macs.
What I want to do is to stop other people from accessing my eMac's internet connection. If I set up a WEP password for Internet Sharing, I lose my Airtunes facility... so I was thinking another way might be to restrict access to the connection via MAC address. I only want my other airport card-equipped macs to access the internet connection and network generally.
Surely it's possible?

Block internet access by MAC address all the time

I want to be able to block MAC addresses from accessing the internet but allow them to use the network.
I can do this in other router interfaces but the BT Home Hub 2.0 has a VERY un user friendly interface and will not allow advanced internet access or other settings to be modifyed to suit my needs.
I am at an intermediate level at understanding network equipment and an expert at residential networking.

Not sure about the home hub 2, but on the home hub 1 you can use a "user defined" firewall setting to block access to a computer by specifying its IP address.
Source LAN
Interface 192.168.1.xxx (address you wish to block)
Destination WAN
Service ANY
Action Deny
You can tell the home hub to always use this IP address for the device you are trying to block.
There is probably a similar setting on the home hub 2.
By default I block all Internet access for devices, then I have rules to allow HTTP, HTTPS, POP3 and a couple of others.
I also have UpnP disabled.
This prevents any computer on the network accessing any non-standard ports.
There are some useful help pages here, for BT Broadband customers only, on my personal website.
BT Broadband customers - help with broadband, WiFi, networking, e-mail and phones.

I transferred my files from a G4 to a new macbook pro, but I can't access my old songs in itunes. I click on the mac tab to access mp3 and acc but it doesn't work. Any suggestions?

I transferred my files from a G4 to a new macbook pro, but I can't access my old songs in itunes. I clicked on library in itunes and get the mac page to access mp3 and acc files but it doesn't work. Any suggestions?

They maybe corrupt, try transferring again from the g4. If iTunes is giving you an error then you need to authorize your computer with the same iTunes account as previously. Also, you could try exporting your iTunes library via iTunes on the g4.

Broadcast Storm Control - Mac-address flooding

Hi Friends,
We would like to configure broadcast storm control in our LAN to detect/avoid mac-address flooding. What is the best way and Can I know how to decide the raising threshold & falling threshold values ?.. Please suggest.
Regards,
S.Tamilvanan

Hello,
the best way is to monitor your network fir 5-6 days in order to find out the normal pattern of broadcast traffic. Then based on results form this monitoring process you can set the thresholds of broadcast traffic.

[SOLVED] Setting up Mandatory Access Control (MAC)

Hi,
I know it's not the Arch way to ask for instructions but I am very new to Arch and I don't want to screw up the kernel.
From the wiki, I read that Arch has removed Apparmor as well as TOMOYO. I have googled high and low, but I cannot understand why this isn't a security hole. Arch only seems to be using Discretionary Access Control (DAC).
I looked up both Apparmor and TOMOYO in the wiki, but all the instructions pertain to kernels < 3.16, which I'm using.
Linux sim74stic 3.16.3-1-ARCH #1 SMP PREEMPT Wed Sep 17 21:54:13 CEST 2014 x86_64 GNU/Linux
The only options are to either build a custom kernel, which gets complicated for me as I would need to take care of NVIDIA drivers (I have laptop, hence I need to configure with Bumblebee), or to use linux-lts kernel, which is old.
Can anyone tell me if not using MAC is a security loophole, or point me in the right direction on how to install one if it is?
Last edited by prakharsingh95 (2014-10-06 21:27:49)

prakharsingh95 wrote:Can you elaborate on whether MAC is really needed
It's a really tough one as to whether MAC is really needed or not, and it's not something I really know that well
prakharsingh95 wrote:or is Arch secure enough (regular desktop usage) without it? If I can get away without it, I would rather stay away and enjoy my Arch installation, but I don't want to leave my PC unsecured either.
Any operating system is secure for regular day-to-day use, as long as you're careful (firewall, not clicking unknown links without research first etc). This includes Windows.
For both of your above questions, it depends on what your environment you're in. Because I'm surrounded by Ethical Hackers as part of what I do, I should really switch over to a hardened kernel, but I will also have to go to the trouble of configuring the user-space tools for it to be useful. That last sentence is important, because if you have SELinux compiled in, but not configured, you might as well not have it there.
prakharsingh95 wrote: Do I simply install this (linux-pax) from the AUR and it will automatically patch my kernel keeping my current modules or should I (can I?) modify the PKGBUILD for NVIDIA, Xorg and additionally add Apparmor?
Whilst the PKGBUILDs for linux-pax and linux from [core] look similar, they produce different packages with different results. As a result, you'll have to compile the nVidia modules for it. That's true for any (patched) kernel, be it CK, BFS, PaX, CK-PaX, TRESOR, etc.
If you're not up to writing your the modules, there's the nvidia-dkms package, which should be able to compile the nVidia modules for your system.
prakharsingh95 wrote:If it's that simple, can I simply get linux-selinux from the AUR and it will get me up and running with 3.14 + my modules + SELinux?
On paper, it is that simple, as long as you know how to build the modules you need. I'd use nvidia-dkms, but it's up to you on how you do this.
This is an example guide outlining the steps you could take to installing linux-selinux.
Last edited by clfarron4 (2014-10-06 13:42:43)

MAC Address in Radius Accounting Start Record

what's the MAC Address AVP that appears in accounting start record used for ?

Vikram,
Are you performing webauth or is this for an auth-proxy session? If a user authenticates via dot1x then the calling station id is the mac address, if the user is peforming webauth or if this for an auth-proxy session then the ip address of the client is sent.
Thanks,
Tarik

ITunes keeps freezing no matter what I try. No that it controls all my music, and doesn't work, what am I supposed to do?

It seems that iTunes doesn't want to work. I've reinstalled, ugraded and restarted my computer. But nothing seems to work iTunes keeps freezing. Now it's just a useless app on my computer. It controls all the music and it's taken many hours to be bothered to use it, now that I depend on it it doesn't work. Is there another more reliable program that organizes and transfers music to iPods? Or am I just stuck with the music thats on my iTunes?
I'm not really impressed and that my family has many apple products that are mainly run by this one piece of software is mind bogglling.
Are there older versions of iTunes to use? because before this last update I had no issues.

If you mean that Find My Phone is asking for a password to a different Apple ID to your current Apple ID and that ID is a previous version of your current ID, not an entirely different one.
The only solution is to change your Apple ID back to its previous state with Apple at My Apple ID using your current password, you don’t need access to this address if it’s previously been used with your Apple ID, once you have saved these details enter the password as requested on your device and then turn off "find my phone" and delete the account from your device.
You should then change your Apple ID back to its current state, save it once again and then log back in using your current Apple ID. Finally, turn "find my phone" back on once again.
This article provides more information about Activation Lock

Controlling Preferences on Computer List Doesn't Work

Hi All,
I'm sure I am doing something dopey, but I can't figure out what.
I have an Xserve running Server OS 10.4.11 and a lab on a subnet, 17 clients running OS 10.5.7. These computers are connected to en1 via a switch, and receiving IP addresses via DHCP (in the 192.168 range). Share points work fine, as does web accesses and network user accounts.
There are two computer lists in the room - one is for a "teacher station," and the other 16 machines are on a seperate "Lab" computer list. On the "teacher station," when I open Directory Utility, I enter the name of the server, it finds it right away and preferences are controlled. All is well.
However, the other clients' Directory Utility cannot find the OD master. Further, when I am in "Workgroup Manager," I note that if I browse for clients using the "..." button, none of those 16 iMacs appear in the list. I added the machines manually, entering their MAC addresses, but it does not appear to be effective.
I am looking to see what is different between the teacher station and the 16 student machines and can only see one thing, which is the NetBIOS name - for the student machines, it is identical ("lab") but since there is no Windows anywhere to be found in the setup, I don't understand why this would be the issue. Nor do I understand where I would make this change if I needed to - changing it locally is not effective, and it is all "dimmed" or "greyed out" anyway.
What am I missing?
Many thanks!

Can you reduce it down to a 20-line test case? If so, post it.

Mac app store still doesn't work properly

Hi any concern,
Thank you before,has been almost 3 week.Yesterday I did Re-install OS X take almost 20 hours and then restart automatic around 6 am.But still when I click (update),(Install),(get) or any buttons doesn't work at all this happen on Mac App Store.On ITunes was Ok.I check on Console:
4/17/15 7:31:08.503 PM com.apple.WebKit.WebContent[567]: ERROR: ITSExceptionHandler: {message:"TypeError: 'null' is not an object (evaluating 'document.querySelector("#header").addClassName')", url:"https://se.itunes.apple.com/htmlResources/2A05/da-storefront-autoinstallations.j s", lineNumber:"376"}
4/17/15 7:31:14.489 PM com.apple.WebKit.WebContent[567]: ERROR: ITSExceptionHandler: {message:"TypeError: 'null' is not an object (evaluating 'document.querySelector("#header").addClassName')", url:"https://se.itunes.apple.com/htmlResources/2A05/da-storefront-autoinstallations.j s", lineNumber:"376"}
4/17/15 7:34:16.802 PM Final Cut Pro Trial[576]: The function `CGContextErase' is obsolete and will be removed in an upcoming update. Unfortunately, this application, or a library it uses, is using this obsolete function, and is thereby contributing to an overall degradation of system performance.
4/17/15 7:35:18.194 PM WindowServer[89]: Warning: Program "Dock" posted a mouse-down, blocking hardware events, but did no further mouse activity.
Please any idea?.Thank you

I have followed the other discussions and done the suggested updates or deletes and to no avail.
Unless you tell us exactly what you have tried, we have no way of knowing exactly which updates or deletes? aren't working for you.
Try installing the combo > Mac OS X 10.6.8 Update Combo
It's ok to do this even though you are already running v10.6.8.
Restart your Mac after the combo is installed, try the App Store.

Access Control MAC address by Radius doesn't work

Similar Messages

Maybe you are looking for