Radius for wireless auth

Would the info found on this page:
http://wiki.themoos.net/index.php?ti...and_FreeRADIUS
be the latest available for implementation of FreeRadius with eDirectory?
Thanks
Seb

Sebastian,
It appears that in the past few days you have not received a response to your posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com/ to search the knowledgebase and check the other support options available on that page under "Self Support" and "Support Programs".
- You could also try posting your message again. Make sure it is posted in the correct newsgroup. (http://support.novell.com/forums)
If this is a reply to a duplicate posting, please ignore and accept our apologies and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Similar Messages

Use Tacacs+ for Admin auth & Radius for user Auth?

Can I setup my Aironet 1200 to use TACACS+ for authentication back to the cisco ACS server and RADIUS back to same server for user authentication?
If I setup a server in Server Manager under Radius, then add that same server as a TACACS+ server, it deletes the RADIUS server, so I assume no.

dont know about 1200s but you can do this on 1130AGs. Create a aaa group for authentication via radius, and one for tacacs+ then use aaa groups to point console/vty to the tacacs+ aaa group, and EAP authentication to the radius group.
eg:
aaa group server radius rad-group
server x.x.x.x auth-port xxxx acct-port xxxx
aaa group server tacacs+ admin-access
server x.x.x.x
aaa authentication login eap-method group rad-group
aaa authentication login auth-admin-access group admin-access local
aaa authorization exec default group admin-access local
now under the ssid part of the config have:
dot11 ssid yyyyyy
authentication open (or whatever method you use) eap eap-method
under console/vty etc:
login authentication auth-admin-access
you need some more stuff like radius and tacacs server keys, but the above should get you started. On 1130AGs dont use aaa auth for http(s), looks like it overloads the aaa server at the moment - see field notices - probably doesnt apply to 1200s.

Radius for wireless

Would the info found on this page:
http://wiki.themoos.net/index.php?ti...and_FreeRADIUS
be the latest available for implementation of FreeRadius with eDirectory?
Thanks
Seb

Sebastian,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://support.novell.com/forums)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://support.novell.com/forums/faq_general.html
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Radius for 802.1x; Remote Access and Wireless authentication

Looking to use a single Radius platform for authenticating Remote, wired and wireless users and machines. Anyone with some experience with that use to share some lessons learns...

Hello Richard,
there is a previous post from a user who wants to add authentication to his Cisco ACS Radius server for wireless clients, it might be worth contacting that user to see how he resolved this...here is the link to the thread:
http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Network%20Infrastructure&topic=Getting%20Started%20with%20LANs&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1dd9504e
Also, have a look at the document below, which talks about the issue:
Selecting an EAP Method: the RADIUS Authentication Server Component
http://www.interlinknetworks.com/news/newsletters/20031104/tech.htm
HTH,
GP

Wireless 3850 and Web-Auth for Wireless clients

Hi
I can't get the web-auth feature to work properly on the Catalyst 3850 for wireless clients.
Internet is all tested and there is full IP connectivity.
Issue is when I enable the webauth feature on the SSID. Incidentally when I enable the SSID to use consent it works.
I am using local authentication for the guest users.
When user logs onto the wireless, they get to the landing page, and are able to enter the credentials then there is a 30 second pause. The client detail says WEBAUTH_PEND and then a pop up window comes back as seen below
Config below
interface Vlan302
description **** Wireless Guest ****
ip address 10.145.224.161 255.255.255.224
ip helper-address 10.144.214.134
ip helper-address 172.17.2.56
ip http server
ip http secure server
ip dhcp snooping
wlan XXXXX 2 XXXXXX
aaa-override
accounting-list default
client vlan 302
ip flow monitor wireless-avc-basic input
ip flow monitor wireless-avc-basic output
no security wpa
no security wpa akm dot1x
no security wpa wpa2
no security wpa wpa2 ciphers aes
security dot1x authentication-list WEB_AUTH
security ft
security web-auth
security web-auth authentication-list WEB_AUTH
security web-auth parameter-map vit_web
no shutdown
parameter-map type webauth vit_web
type webauth
security web-auth parameter-map vit_web
user-name Guest1
creation-time 1390837878
privilege 15
password 7 022D0156060F1B351D
type network-user description Temp-Guest-User guest-user lifetime year 0 month 1 day 0 hour 0 minute 0 second 0
user-name Guest2
creation-time 1390838016
privilege 15
password 7 0724244143000D1145
type network-user description Temp-Guest-User guest-user lifetime year 0 month 1 day 0 hour 0 minute 0 second 0
aaa new-model
aaa authentication login WEB_AUTH local
aaa authorization network WEB_AUTH local

Hey Greg,
Did you also define the global webauth parameter? I think I had to do this to get my 5760 "working" or as working as these new controllers can be.
parameter-map type webauth global
type webauth
virtual-ip ipv4 x.x.x.x wlc.whatever.org
max-http-conns 50
Also I had to enable http server in addition to secure server
ip http server
ip http secure-server
Are you using a self signed cert?
I saw windows clients take a long time to load the page when using a self signed cert.
MAC clients dont seem to work if you use the IOS or OSX based logon. You'll need to disable the auto logon and launch a browser for the redirect. There was a bug ID around this MAC problem which was supposedly resolved in 3.3.1SE but I still have the problem.
-Kyle

Sample config for wireless

Hi
Does anyone have a sample config for standalone Cisco AP1252 (Cisco IOS) for AD Authentication for wireless ?
Appreciated your kind reply.

The short version :
in config terminal mode :
-radius-server host auth-port 1812 acct-port 1813 key 0
-aaa authentication dot1x eap_methods group radiusThen you need to configure your ssid for dot1x :-dot11 ssid -authentication open eap eap_methods-authentication network-eap eap_methodsThis is only the part needed for radius interaction. This assumes that you already configured your SSID with according WPA settings.that's about it I think.If you want info about more commands or so, just check out this link :http://www.cisco.com/en/US/docs/wireless/access_point/12.4_10b_JA/configuration/guide/scg12410b-chap11-authtypes.html#wp1002608

NAC for wireless layer 3 oob

Hi,
Anyone implemented nac for wireless layer 3 oob? This is using nac appliance not ise.
What I did is to configure wlc as per layer 2 oob setup. Configure svi 669 (authentication/quarantine vlan) on switches that’s with the wism. Pbr all vlan 669 traffic to test cas untrusted interface.
Problem now I’m not able to get an ip from dhcp after associating. DHCP works when tested on wired. Is there any additional config to be done on WLC or am i doing it right??
The test cas/cam are ugraded to ver 4.8.2.
Regards
Joachim

Everyone can do a mistake and it seems I did a big one :-)
l3 wireless OOB was not supported until last version :
§Wireless L3 OOB RIP has been introduced in 4.8.2.
§In order to support wireless in L3 OOB RIP deployment – DHCP release and renew values were propagated from CAS to the client so that client can perform IP refresh.
§The configuration of WLC and AP’s needs to be done like in Wireless L2 OOB VGW deployments.
§There are no ports in WLC hence Port profile is not required
§WLC allows only two VLAN’s namely Quarantine (Auth) and Access VLAN’s. Hence the support for User role Vlans is not there in Wireless deployments.
§iPhone/iPad support is also not present. Reason being IP address cannot be refreshed in iPhone/iPad due to lack of support for Java Applet/ActiveX.
§The authentication trap control needs to be checked in order for the WLC to send 599.0.4 trap.

Configuring Radius for PC Authentication

Hello. Has anyone configured RADIUS for PC authentication? It would be great if I could do both User and PC authentication but I've read that only one can be used. That being said, every time I add "Domain Computers" to the RADIUS settings I
cannot connect to the wi-fi. "Domain Users" however....works with no problems. I'd appreciated the help!!

Finally resolved this and figured I'd share my results. For starters in NPS on your RADIUS server, you'll want to use "Machine Groups" and tie that to "Domain Computers" which is the default AD group for all PC objects when added to your domain.
On your GPO for the wireless, you would hit edit > advanced > and select "computer authentication". This works well as it also keeps mobile devices off the network.

Using HH4 for Wireless

Hey All,
I will be testing a DrayTek Vigor2860 for work this week.
Because it is not the 2860n it does not have wireless.
Is there anyway to use the DrayTek as Modem and cabled connections and get it connected to the HH4 for the wireless?
Thanks in advance.
Matt

Hi, My name is Eric Moyers. I am a Network Support Engineer in the Cisco Small Business Support Center. Thank you for using the Cisco Community Post Forums.
It is my understanding that from your description you are wanting to use security mode WPA2-Personal but still want to access your radius server for MAC Address connection control.
If I have a radius server already setup, why not use it for the security mode as well?
I have not personally set this exact scenario up, but unless the WAP is using the Radius for its security, instead of WPA2 - Personal, it will not be able to use it for the Connection Control. As a test if you configure it to use Radius and post the results?
Thanks
Eric Moyers .:|:.:|:.
Cisco Small Business US STAC Advanced Support Engineer
Wireless Subject Matter Expert
CCNA, CCNA-Wireless
866-606-1866
Mon - Fri 09:30 - 18:30 (UTC - 05:00)
*Please rate the Post so other will know when an answer has been found.

Can not connect All in one 209b to new router for wireless printing....

Have an HP laptop and All in one priner 209b. All was working fine, wired and wireless printing. Then we had to upgrade our ATT Uverse router. Everything works...even wireless laptop and printer when connected to laptop. However, can't get printer to printer wireless since it has the old router info. I used the disk but when it asks to you to pick the printer, I choose the printer but it says printer now found ??? what ???? and this is with the cable connected. I do not have the wizard on the touch screen but I did reset to factory settings hoping it would load new router info but it does not. How do you manually enter router into for wireless printing. Is it best to delete the printer and reinstall as new...wired and then wireless ???
I am about to call an outsite company and pay the outrageous charge as the help on HP is not working. Thanks

Try this utility:
http://h10025.www1.hp.com/ewfrf/wc/document?docname=c02114394&cc=us&dlc=en&jumpid=reg_r1002_usen&lc=...
007OHMSS
I was a support engineer for HP.
If the advice resolved the situation, please mark it as a solution. Thank you.

I have an IMAC that runs OS 10.6.7. I use Netgear for wireless. My computer keeps losing the network, so I can't use wireless.

I have an IMAC that runs OX 10.6.7. I use NEtgear for wireless. I have a laptop and Ipod that I use on the wireless. Recently, my desktop computer shows that it is searching for the wireless system (on the router). I contacted Netgear. They talked me into buying another router and their technical contract. Nothing is working. I can plug my 5200 modem directly up to my desktop , and the network is fine, but the wireless, of course, is not plugged in. When I go to connect the wireless, it doesn't work. This is not a computer program per se, nor is it a router program because sometimes it will work. It seems to me that the computer and router are not working together to hold the settings.
I have attempted to download the latest software for my computer, i.e., Imac graphics fireware. Each time I try, it says that the extensions are not valid for my computer.
Any suggestions?
Thanks, Vicki

Imac graphics fireware.
Did you mean to say firmware? You should only install firmware updates when offered to you via Software Update; other than that, whatever is offered is not appropriate for your model.
As for your Netgear router - I have a Netgear and set it up manually on their web interface setup site (the address should be in your manual). Did you call your ISP so they will recognize that there is a router involved? Sometimes my iMac also does not want to communicate with the router; however, my Macbook and printer have no problem. I solved the problem by connecting things this way:
cable from wall to modem > cable from modem to router > cable from router to iMac. The other things are wireless.

How to set up Airport Extreme with Charter ARRIS Modem TM902A for the first time for WIRELESS.

How to set up Airport Extreme with Charter ARRIS Modem TM902A for the first time for WIRELESS.
When Charter Tech goes to your site, have them connect the modem up, but do not connect the modem to your iMAC or MacBook Pro. What you want to do is connect the Airport Extreme to the iMac or MacBook Pro first with the Ethernet Cable. You have to do this to configure via Airport Utility to set up the Base Station Name & Base Station Password.
You will then create/configure a Wireless Network, create your Wireless Password that will be entered on each of your Devices, example, Apple Tv, your iPhone, etc., you want to allow access to your Wireless Network you are creating.
Wireless Security will be -> WPA/WPA2 personal or just WPA2
Enter the Wireless Password you want
Verify the Wireless Password (enter it again)
After it is created you will see it on the Airport Utility window with the name you created for it and to the left, will be a Dot (circle that will be yellow).
Next you then want to unplug the power to the Airport Extreme, and then take the end of the Ethernet cable you unplugged from the iMac or Lap top MacBook Pro and connect it to the back of the Modem.
Next unplug the power cord from the modem and wait about 5 minutes, then plug the power back into the Arris Modem and wait until all lights come back on the modem wait
about 5 minutes, then plug the power cord back to the Airport Extreme and you will see it the light blinking yellow. Wait about 5 to 10 minutes, during this time Restart you IMAC or MacBook Pro, and once it is back up click on the Airport Utility and you should see on the Airport Utility screen.
For INTERNET to the left the light should be green and you should see the Airport Extreme also appear and the light to the left on the screen should also be green. If they are, you then should be able to click on the Wireless Symbol on top of bar of the screen and click to select the Wireless Network Name you created.
If you Do Not See the light (Icon) next to INTERNET turn Green, or if you see the Internet Light Green, but the Light (Icon) next to the Airport Extreme is yellow, unplug the power again to the modem and unplug the power again to the Airport extreme and wait about 15 minutes or up to 30 minutes. Then plug the power cord back to the modem wait till all the lights light up then, plug the power cord back into the Airport Extreme and Restart your iMAC or MacBook Pro.
The Airport Extreme light should change from yellow to green. Open up the Airport Utility to see what the indicators are showing they should both be green. Again select Wireless network you created under the Wireless Icon on the top right of the screen. Open Safari and see if you are able to Route to a web page or the apple site should appear.
WHAT TO DO IF YOUR AIRPORT EXTREME WAS PREVIOUSLY SET UP FOR USE WITH ANOTHER CARRIERS ROUTER OR MODEM.
NOTE: If you already had your Airport Extreme connected for example, I previously had ATT Uverse and the Airport Extreme was connected to the Wireless Router Model 3801HGV, I disabled the Uverse Wireless and used the Airport Extreme for the Wireless signal in bridge mode, as the Airport extreme Signal is much stronger than the Uverse router, and I was able to obtain a Wireless signal with the Airport Extreme way much better with no signal loss which was very very frustrating with the Uverse router.
Anyhow if you had it hooked up like this, now that you will be using it with the Charter ARRIS Modem TM902A, you will need to reset the Airport Extreme to clear out the old data it has in memory, with the previous set up otherwise it will not work. Trust me I spent 6 hours trying to make it work reading all Apple Support Community questions and answers relating to this type issue/problem others have been having trying to get their set up working. I tried all the tips, and I finally decided just to see if by chance I would be able to connect with someone with Charter Tech support who might be familiar with Apple to be able to assist me and by luck I did. He told me why it was not working and was all due the previous configuration with the ATT Uverse router was still in memory with the Airport Extreme. Finally it was 10:30 PM when I decided to call Charter Tech Support and I had been working on this since 3:00 pm pacific. I did not call them earlier as all the post I read said they never received any good help from Charter. After calling them I finished up by 11:00 PM and was able to finally connect Apple Tv, iMac, iPhones and Macbook Pro. We love our Apple Product and Happy all is connected with the new
Internet Provider Charter. I must say the speed is way way much better than it ever was with AT&T Uverse.
THIS IS WHAT YOU WILL NEED TO DO:
First you will need to unplug the Airport Extreme, then by taking the tip of a pen or paper clip end you need to push the reset button on the back of the Airport Extreme and hold it
down and at the same time plug the power cord back into the Airport Extreme count to 5 or 10 then release the reset button. Then once he light in front of the Airport Extreme stops blinking you need to plug the Ethernet cable from the Airport Extreme to your iMAC or Macbook Pro, and restart which ever one you have, then open the Airport Utility once it is back up. If you see airport extreme pop up with the old network name or it shows and yellow triangle click on the Airport Extreme ICON it will not let you configure it but will ask if you want to get rid of it or remove and just do it. Then Again restart your iMAC or MacBook Pro, open up Airport Utility again, and on the top left you should see under “Other Airport Base Stations” the MAC ID for the Airport Extreme.
You will then create/configure a Wireless Network, create your Wireless Password that will be entered on each of your Devices, example, Apple TV, your iPhone, etc., you want to allow access to your Wireless Network you are creating.
Wireless Security will be -> WPA/WPA2 personal or just WPA2
Enter the Wireless Password you want
Verify the Wireless Password (enter it again)
After it is created you will see it on the Airport Utility window with the name you created for it and to the left, will be a Dot (circle that will be yellow).
Next you then want to unplug the power to the Airport Extreme, and then take the end of the Ethernet cable you unplugged from the iMac or Lap top MacBook Pro and connect it to the back of the Modem.
Next unplug the power cord from the modem and wait about 5 minutes, then plug the power back into the Arris Modem and wait until all lights come back on the modem wait
about 5 minutes, then plug the power cord back to the Airport Extreme and you will see it the light blinking yellow. Wait about 5 to 10 minutes, during this time Restart you IMAC or MacBook Pro, and once it is back up click on the Airport Utility and you should see on the Airport Utility screen.
For INTERNET to the left the light should be green and you should see the Airport Extreme also appear and the light to the left on the screen should also be green. If they are, you then should be able to click on the Wireless Symbol on top of bar of the screen and click to select the Wireless Network Name you created.
If you Do Not See the light (Icon) next to INTERNET turn Green, or if you see the Internet Light Green, but the Light (Icon) next to the Airport Extreme is yellow, unplug the power again to the modem and unplug the power again to the Airport extreme and wait about 15 minutes or up to 30 minutes. Then plug the power cord back to the modem wait till all the lights light up then, plug the power cord back into the Airport Extreme and Restart your iMAC or MacBook Pro.
The Airport Extreme light should change from yellow to green. Open up the Airport Utility to see what the indicators are showing they should both be green. Again select Wireless network you created under the Wireless Icon on the top right of the screen. Open Safari and see if you are able to Route to a web page or the apple site should appear.

I just got a Charter Modem. Model TM822. While I was moving, my Airport Extreme was still at my old place.
I have a Linksys WRT320N I used for the initial Charter setup.
I can get my Airport to work here, but the Internet light on the Modem flashes Yellow.
Hasn't caused any issues so far but one thing I did notice.
On the Linksys there were 3 DNS servers listed.
The Airport Extreme only lists 2 and i don't see where I could add another, only change whats already there.
I tried everything above, but light on modem still flashes yellow.
I have the technicians cell phone. Told me "that shouldn't be" and gave the same advice listed above.
I'll break down and call Charter one day, see if it's on their end. NSA tracking may need a reset LMAO.

I have a Westell 6100G modem. I want to set up Airport Express for wireless. Can someone tell me how to do it step by step. I'm using an HP with Windows Vista. I'm a tech idiot.

Just got Airport Express to save on GBs of data. I have already a Westell 6100G which is for use as Internet Broadband, via Verizon. How do I set up the Airport Express with this Westell. Do I even still need the Westell, or do I need to also buy a wireless router? I'm a tech idiot and this is driving me nuts.

The Westell 6100G is a combination modem and router or gateway device. The AirPort Express is a wireless router.
Since the Express does not have a built-in modem, you will still need your Westell gateway in order to access the Internet.
Which exact model of AirPort Express do you have. It will be written (in very hard to read type on a label on one of the AirPort's sides). It should look something like: A1392. It may also state a Order#. In that case it would look something like: MC414LL/A
Regardless of which model you have, the basic network configuration would be that you would connect an Ethernet cable between the Westell's Ethernet port and the WAN (circle of dots) port on the Express. (Note: If you have an earlier model of the Express, you would connect the cable to the only Ethernet port on the Express.)
The good news is that you will not have to make any configuration changes to the Westell. We should be able to use it as configured.
What we are going to start with is getting a basic Wi-Fi network that should provide your computer with wireless access to the Internet. Once verified as working, we can fine-tune this network to include wireless security and any other goals that you may have.
Ready to start?
I would recommend that you do the following as a minimum:
Power-down the Westell and computer(s).
While all of the devices are powered-down, perform a "factory default" reset on the AirPort Express base station. This will get it back to its "out-of-the-box" configuration and make setting it up much easier, especially if you use the "Assist me" process within the AirPort Utility. (ref: Resetting an AirPort Base Station or Time Capsule)
Once the reset has completed, remove the AirPort Express from power.
Connect an Ethernet cable between the Westell and the AirPort Express.
Power-up the Westell; wait at least 10-15 minutes to allow it adequate time to initialize.
Power-up the AirPort base station; wait at least 5-10 minutes. Note: The AirPort's status light may continue to flash amber after it has intialized. That is because, there may be some additional configuration items necessary, like setting up wireless security, before the overall setup is completed to get a green status.
Power-up your computer(s).
In this basic configuration, the AirPort base station will broadcast an unsecured wireless network with a Network Name (SSID) of Apple Network NNNNNN. Network clients, connected to the base station either by wire or wireless, should now be able to access the Internet through the ISP's modem. Once Internet connectivity has been verified, you can use the AirPort Utility to configure the base station for wireless security and any other desired options. Please post back your results.

My mac has10.5.8 and should be compatible with new HP officejet pro 8600. I can't get it to install for wireless, nor to work with USB cable. Have tried downloading HP install directly from HP and it still doesn't work.

I just bought a new HP OfficeJet Pro 8600 printer. I have been unable to download the installation for wireless connection even though have had the assistance of Costco tech, HP tech and some advice from Apple. Because the system is MacOs 10.5.8 the error says it is incompatible, even though the product lists compatiblilty with 10.5, 10.6. I was advised 1 option might be to obtain Snow Leopard for installation, however am somewhat reluctant as the bo states 10.5 should work and Snow Leopard is 10.6, which is also listed as compatible. I am unable to get the printer to work even with USB cable. Too much time spent on this and I hate to start over with another printer because I'm afraid I might have the same trouble. Is Snow Leopard something I should get anyway? Help!

Snow Leopard has more compatible Java.
https://discussions.apple.com/docs/DOC-2455
explains more about upgrading to Snow Leopard.
If that doesn't work to fix the problem, then see my FAQ* on printing:
http://www.macmaps.com/printersx.html

How to restart base station from airport utility? I used to be able to do it remotely I currently use a Mac Pro 10.8.4 and have a time machine for wireless 6.3 (630.34). Sometimes I cannot connect to the internet and use network preferences to diagnose t

How to restart base station from airport utility? I used to be able to do it remotely
I currently use a Mac Pro 10.8.4 and have a time machine for wireless 6.3 (630.34). Sometimes I cannot connect to the internet and use network preferences to diagnose the issue. This results in being told to restart the wireless. The airport utility includes the drop down option of restarting but is not clickable so I can't choose it.
With my prior macbook and same time capsule, etc if i had problems connecting to the internet I would run network diagnostics to help out. This included clicking on the airport utility ---> base station --> restart. This worked most of the time.
Bottom line, is there something I am missing in not being able to restart the wi-fi remotely? ]
Thanks in advance

You are likely forgetting a step.
Open AirPort Utility
Click on the Time Capsule icon
Click Edit in the small window that appears
Now click the Base Station menu.....top of the screen....not the Base Station "tab" in the center of the screen
Click Restart

Radius for wireless auth

Similar Messages

Maybe you are looking for