What do I have to apply RADIUS server?

Similar Questions

• How to restrict Internet access by using the RADIUS server via switch Catalyst 3560

  Dear all,

  I need a configuration using any. I have a small network of 15 users a 3560, which is in turn connected to a router ISR 2811. Interface fastethernet 0/24 switch 3560 I intend to connect to a unix based server RADIUS. ISP is connected on the opposite side of the 2811 to the fa0/0 interface.

  I want to make is that if someone among the 15 users tries to access the internet, they must be validated in the RADIUS server by their pre-configured user credentials. (I'm going to store 15 user credentials here). If someone else tries to connect (except those 15) he or she should be denied internet access.

  The RADIUS server will be having a login page to type the name of user and password.

  Please guide based on what commands I should inject into the 3560 or what specifically, I need to have to run this task.

  Thanks in advance!

  Samrat.

  I only did this in a very long time, but you probably want to do is activate the web authentication.

  http://www.Cisco.com/c/en/us/TD/docs/switches/LAN/catalyst3560/software/release/12-2_52_se/configuration/guide/3560scg/swwebauth.html

• In Active/Passive Mode Radius server configuration

  We set up (active/active) the two ASA load balancing.  We also configure two Radius servers with load balancing.  At present, the Radius servers are configured with active/active.  Is it possible to configure a Radius Server with (active/passive)?

  RADIUS protocol Radius AAA server
  AAA-server Radius (inside) host XXX.XXX.XXX.XXX
  Timeout 300
  key *.
  RADIUS-common-pw *.

  AAA-server Radius (inside) host XXX.XXX.XXX.XXX
  Timeout 300
  key *.
  RADIUS-common-pw *.

  AAA accounting enable console RADIUS

  Thank you.

  Diane

  Diane,

  Well I'm still not 100% sure that you understand exactly what is happening. Normally, on a single ASA, authentication is always performed on the same radius server until it fails (i.e. active/passive as you call it).

  Now, you mention that you have 2 ASAs in load balancing, so I don't know if you mean that:

  (1) 2 users that connect to the same ASA get authenticated by radius 2 servers different (should never happen)

  or

  (2) when 2 users connect to the cluster, user1 gets redirected to ASA1 and authenticated on Radius1, while User2 will be redirected to ASA2 using Radius2 to auth. This could be normal if both ASAs are set up differently (defined in a different order radius servers) or an ASA had a problem connecting to Radius1, at some point and so it considered out of service.

  In any case, 'sh aaa-server protocol radius' and 'debug RADIUS' can help determine why an asa individual does not use (initially configured) primary radius server.

  HTH

  Herbert

• privilege level of the AAA RADIUS server control

  I had the radius authentication on my switch, but I'm trying to allow two types of connection of users using Windows Active Directory. NetworkUsers that can display the configuration and NetworkAdmins who can do what either. I would like to NetworkAdmins when they log on, go directly to the privilege level 15 but could not get that part to work. Here is my configuration:

  Domain controller for Windows 2008 R2 with NPS installed.

  RADIUS client: I have the IP address of the switch as well as the key. I selected under the name of the Vendor tab in advance of cisco

  Network policies:

  NetworkAdmins which has the Group networkadmin in conditions and under settings I have nothing the standard and for the individual seller I have:

  Cisco Cisco-AV-pair shell: priv-lvl = 15

  My config switch:

  AAA new-model
  !
  !
  RADIUS AAA server group MTFAAA
  Server name dc-01
  Server name dc-02
  !
  Group AAA authentication login NetworkAdmins local MTFAAA
  Group AAA authorization exec NetworkAdmins local MTFAAA

  dc-01 RADIUS server
  address ipv4 10.0.1.10 auth-1645 acct-port of 1646
  7 button *.
  !
  dc-02 RADIUS server
  ipv4 10.0.1.11 address auth-1645 acct-port of 1646
  7 button *.
  !

  No matter what I do, it is not the default privilege level 15 when I login. All thoughts

  You have specified the permission under line vty group? I think it is the authorization exec command. Something like that.

• Test of the RADIUS server options

  Hello

  Does anyone have experience in the radius server availability tests? I have what the switch is used to test the availability of the radius server and what measures he will take after the detection of server are dead? Setup is done with ISE 1.4.

  Hello

  Because how switch contact RADIUS and how to configure the switch for dead timers, I will redirect you on the Cisco documentation which is very simple and complete as well.

  http://www.Cisco.com/c/en/us/products/collateral/iOS-NX-OS-software/iDEN...

  All parameters to mark a server as dead and how long it will be considered as dead are tweak-able. Setting dynamically some servers as dead if no responses may result in better performance of RADIUS response.

  Thank you

  PS: Please don't forget to rate and score as correct answer if this answered your question.

• I currently have a website under Server 2003 IIS 6.0. I'm moving the site to server2008 R2 IIS 7.0. Everything works except the credit card verification.

  I currently have a website under Server 2003 IIS 6.0. I'm moving the site to server2008 R2 IIS 7.0. Everything works except the verification of the credit card at secure.authorize.net. I have a problem connecting to secure.authorize.net. I try to connect to secure.authorize.net via the browser without success. But I can connect to secure.authorize.net with any of the other computers on my network. It seems also secure.authorize.net is only the DNS I can't connect to with server20008. All of the suggestions.

  Source language

  Hi Melvin

  Your question is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public. Please post your question in the following forums.

  Windows Server 2008 R2 General:

  http://social.technet.Microsoft.com/forums/en-us/winservergen/threads

  The official Forums of Microsoft IIS: http://forums.iis.net/

  Concerning

• I have a HP mediasmart server LX195. I want to do a Factory reset on this server. I don't have the original software CD.

  I have a HP mediasmart server LX195.   I want to do a Factory reset on this server.   Factory reset, I mean completely wiping the drive clean and reinstalling the software, like the LX195 server was brand new.   I don't have the original software CD.  Now, before you do a factory reset, I would need to back up my data.   I have a few questions.

  1. I don't have the original software CD LX195 where can I order the original game CD?

  2. is there a preparation I need to do in addition to save my data before I perform a complete reinstallation?

  3. What are the problems, if any, will I have to run by doing a complete reinstall the server LX195?

  Thank you.

  The link below for the guide on Factory Reset and server using HP recovery may be able to help -.

  http://h10025.www1.HP.com/ewfrf/wc/document?DocName=c01691363&cc=us&DLC=en&LC=en&product=3941454

  EDIT: The above guide requires recovery disks.

  If you are in the United Kingdom, please visit http://www.mediasmarthome.com/forum/thread/12084/Need-a-little-help-recovery-CDs/#5876

• I have a 2008 standard server, installing kb2585542 last updated security. error code is 80070005. my server is 32-bit xenon.

  original title: kb2585542

  I have a 2008 standard server, installing kb2585542 last updated security. error code is 80070005. my server is 32-bit xenon.

  THX

  kg

  Hello

  Your question is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for Windows Server on TechNet forum
  http://social.technet.Microsoft.com/forums/en-us/winserverwsus/threads

• What is the date of end SQL server 2008 SP2 support?

  What is the date of end SQL server 2008 SP2 support?

  Have you tried Google? or:

  ASK THE QUESTION IN THE SQL SERVER FORUM:
  http://social.msdn.Microsoft.com/forums/en/category/SQLServer

• Why Vista on my machine seem to take forever to start after updates have been applied?

  Hello

  I have been having this problem for a while now and have had no luck trying to get to the bottom of it.
  When the function my updates to the vista machine, it will take between 10 to 30 minutes to restart.
  There is an error that occurs in the event viewer, but I'm not sure whether or not it is relevant.
  Also as a side note, when I try to enter the boot advanced options, I can not display the options but can select them (if I press on enter safe mode loads)
  A knowledge of a reason why this happens?
  Concerning

  Hello

  Its a well known problem when there are a lot of updates and this is the only time that he
  happens here.

  Try these:

  How to reset the Windows Update components? (Has a Fixit.)
  http://support.Microsoft.com/kb/971058

  Description of the system update for Windows Vista, for Windows Server 2008 analytical tool, for
  Windows 7 and for Windows Server 2008 R2
  http://support.Microsoft.com/kb/947821

  ===============================================

  Also try this resolution of general performance issues:

  Use the startup clean and other methods to try to determine the cause of and eliminate
  the questions.

  ---------------------------------------------------------------

  What antivirus/antispyware/security products do you have on the machine? Be one you have NEVER
  on this machine, including those you have uninstalled (they leave leftovers behind which can cause
  strange problems).

  ----------------------------------------------------

  Follow these steps:

  Start - type this in the search box-> find COMMAND at the top and RIGHT CLICK – RUN AS ADMIN

  Enter this at the command prompt - sfc/scannow

  How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program
  generates in Windows Vista cbs.log
  http://support.Microsoft.com/kb/928228

  Also run CheckDisk, so we cannot exclude as much as possible of the corruption.

  How to run the check disk at startup in Vista
  http://www.Vistax64.com/tutorials/67612-check-disk-Chkdsk.html

  ==========================================

  After the foregoing:

  How to troubleshoot a problem by performing a clean boot in Windows Vista
  http://support.Microsoft.com/kb/929135
  How to troubleshoot performance issues in Windows Vista
  http://support.Microsoft.com/kb/950685

  Optimize the performance of Microsoft Windows Vista
  http://support.Microsoft.com/kb/959062
  To see everything that is in charge of startup - wait a few minutes with nothing to do - then right-click
  Taskbar - the Task Manager process - take a look at stored by - Services - this is a quick way
  reference (if you have a small box at the bottom left - show for all users, then check that).

  How to check and change Vista startup programs
  http://www.Vistax64.com/tutorials/79612-startup-programs-enable-disable.html

  A quick check to see that load method 2 is - using MSCONFIG then put a list of
  those here.
  --------------------------------------------------------------------

  Tools that should help you:

  Process Explorer - free - find out which files, key of registry and other objects processes have opened.
  What DLLs they have loaded and more. This exceptionally effective utility will show you even who has
  each process.
  http://TechNet.Microsoft.com/en-us/Sysinternals/bb896653.aspx

  Autoruns - free - see what programs are configured to start automatically when you start your system
  and you log in. Autoruns also shows you the full list of registry and file locations where applications can
  Configure auto-start settings.
  http://TechNet.Microsoft.com/en-us/sysinternals/bb963902.aspx
  Process Monitor - Free - monitor the system files, registry, process, thread and DLL real-time activity.
  http://TechNet.Microsoft.com/en-us/Sysinternals/bb896645.aspx

  There are many excellent free tools from Sysinternals
  http://TechNet.Microsoft.com/en-us/Sysinternals/default.aspx

  -Free - WhatsInStartUP this utility displays the list of all applications that are loaded automatically
  When Windows starts. For each request, the following information is displayed: Type of startup (registry/Startup folder), Command - Line String, the product name, Version of the file, the name of the company;
  Location in the registry or the file system and more. It allows you to easily disable or remove unwanted
  a program that runs in your Windows startup.
  http://www.NirSoft.NET/utils/what_run_in_startup.html

  There are many excellent free tools to NirSoft
  http://www.NirSoft.NET/utils/index.html

  Window Watcher - free - do you know what is running on your computer? Maybe not. The window
  Watcher says it all, reporting of any window created by running programs, if the window
  is visible or not.
  http://www.KarenWare.com/PowerTools/ptwinwatch.asp

  Many excellent free tools and an excellent newsletter at Karenware
  http://www.KarenWare.com/

  ===========================================

  Vista and Windows 7 updated drivers love then here's how update the most important.

  This is my generic how updates of appropriate driver:

  This utility, it is easy see which versions are loaded:

  -Free - DriverView utility displays the list of all device drivers currently loaded on your system.
  For each driver in the list, additional useful information is displayed: load address of the driver,
  Description, version, product name, company that created the driver and more.
  http://www.NirSoft.NET/utils/DriverView.html

  For drivers, visit manufacturer of emergency system and of the manufacturer of the device that are the most common.
  Control Panel - device - Graphics Manager - note the brand and complete model
  your video card - double - tab of the driver - write version information. Now, click on update
  Driver (this can do nothing as MS is far behind the certification of drivers) - then right-click.
  Uninstall - REBOOT it will refresh the driver stack.

  Repeat this for network - card (NIC), Wifi network, sound, mouse, and keyboard if 3rd party
  with their own software and drivers and all other main drivers that you have.

  Now in the system manufacturer (Dell, HP, Toshiba as examples) site (in a restaurant), peripheral
  Site of the manufacturer (Realtek, Intel, Nvidia, ATI, for example) and get their latest versions. (Look for
  BIOS, Chipset and software updates on the site of the manufacturer of the system here.)

  Download - SAVE - go to where you put them - right click - RUN AD ADMIN - REBOOT after
  each installation.

  Always check in the Device Manager - drivers tab to be sure the version you actually install
  presents itself. This is because some restore drivers before the most recent is installed (sound card drivers
  in particular that) so to install a driver - reboot - check that it is installed and repeat as
  necessary.

  Repeat to the manufacturers - BTW in the DO NOT RUN THEIR SCANNER device - check
  manually by model.

  Look at the sites of the manufacturer for drivers - and the manufacturer of the device manually.
  http://pcsupport.about.com/od/driverssupport/HT/driverdlmfgr.htm

  How to install a device driver in Vista Device Manager
  http://www.Vistax64.com/tutorials/193584-Device-Manager-install-driver.html

  If you update the drivers manually, then it's a good idea to disable the facilities of driver under Windows
  Updates, that leaves about Windows updates but it will not install the drivers that will be generally
  older and cause problems. If updates offers a new driver and then HIDE it (right click on it), then
  get new manually if you wish.

  How to disable automatic driver Installation in Windows Vista - drivers
  http://www.AddictiveTips.com/Windows-Tips/how-to-disable-automatic-driver-installation-in-Windows-Vista/
  http://TechNet.Microsoft.com/en-us/library/cc730606 (WS.10) .aspx

  ===========================================

  Refer to these discussions because many more excellent advice however don't forget to check your antivirus
  programs, the main drivers and BIOS update and also solve the problems with the cleanboot method
  first.

  Problems with the overall speed of the system and performance
  http://support.Microsoft.com/GP/slow_windows_performance/en-us

  Performance and Maintenance Tips
  http://social.answers.Microsoft.com/forums/en-us/w7performance/thread/19e5d6c3-BF07-49ac-a2fa-6718c988f125

  Explorer Windows stopped working
  http://social.answers.Microsoft.com/forums/en-us/w7performance/thread/6ab02526-5071-4DCC-895F-d90202bad8b3

  I hope this helps.

  Rob Brown - Microsoft MVP<- profile="" -="" windows="" expert="" -="" consumer="" :="" bicycle="" -="" mark="" twain="" said="" it="">

• Dell Powerconnect 35xx series features Radius Server behaviorfin

  Hello Dell Community,

  I'm not able to find out how 35xx series switches handle 'server radius deadtime' parameter as described below:

  In the config of switch, I use two hosts(for redundancy) radius. The first has priority of '1' configured RADIUS, the second server is priority '2 '. So normally, if the first sever(priority 1) RADIUS online, auth requests switch are sent to this server all the time. And they really are.

  Now, I have also configured the 'deadtimet 10 radius server', meaning to jump on the radius server does not respond. Does that mean exactly?

  If the radius with priority 1 server is offline for a few seconds, the switch instantly consider this as dead radius server and sent no auth request it for the "period deadtime ' 10 minutes (depending on configuration)? How often switch check for the availability of the radius server host?

  config swtich:

  IP address Port port Prio time - Ret-dead-source IP. Its use
  AUTH Acct Out rans times
  --------------- ----- ----- ------ ------ ------ --------------- ----- -----
  10.10.10.10 1812 1813 global Global Global Global 1 all the
  10.10.10.20 1812 1813 global Global Global Global every 2

  Global values
  --------------

  Waiting period: 2
  Broadcast: 5
  Deadtime: 10
  Source IP: 0.0.0.0
  Source IPv6:

  Retransmission will say the switch many times in an attempt to authenticate to the RADIUS server before moving on to the second server. Timeout is indicative of the switch, the waiting time for a response. Deadtime will subsequently intervene in these two parameters have been exhausted.

  Example config:

  Server radius coverage of console (config) # 3

  Console (config) # timeout 3 radius server

  Deadtimet console (config) # 10 radius server

  Result of config:

  -The client tries to connect.

  -switch attempts to authenticate the server 1.

  -Switch means no RADIUS server 1 for 3 second.

  -Switch waits 3 seconds.

  -Switch attempts to authenticate to the RADIUS server 1 for the second time and does not return to server for 3 seconds.

  -Switch waits 3 seconds.

  -Switch attempts to authenticate to the RADIUS server 1 for the third time and does not return to server for 3 seconds.

  -switch place RADIUS server, one in a State of low/dead for 10 minutes.

  -switch attempts to authenticate to Server 2.

• RADIUS Server - Windows server 2008

  Hello world

  We use the windows 2008 standard server to our domain controller. We have been in for the last two years radius server in our campus. I could see that we can configure the client only 50 radius in NPS. Is it possible to add a plus in windows 2008 standard?

  Please help me

  Teckzx

  This issue is beyond the scope of this site and must be placed on Technet or MSDN
  http://social.technet.Microsoft.com/forums/en-us/home

  http://social.msdn.Microsoft.com/forums/en-us/home

• Cisco Catalyst 2960-S switch configured for 802. 1 x sends a query to access the Radius Server Radius

  Setup

  Cisco Catalyst 2960-S running 15.0.2 - SE8

  Under Centos freeRadius 6.4 RADIUS server

  Client (supplicant) running Windows 7

  When Windows client is connected to the port (port 12 in my setup) with authentication of 802. 1 x active switch, show of Wireshark that catalyst sends ask EAP and the client responds with EAP response. But it made not the request to the Radius server. The RADIUS test utility 'aaa RADIUS testuser password new-code test group' works.
  Here is my config running. Any advice would be greatly appreciated.
  #show running mySwitch-
  mySwitch #show running-config
  Building configuration...

  Current configuration: 2094 bytes
  !
  version 12.2
  no service button
  horodateurs service debug datetime msec
  Log service timestamps datetime msec
  no password encryption service
  !
  hostname myswitch
  !
  boot-start-marker
  boot-end-marker
  !
  activate the password secret 5 $1$ Z1z6$ kqvVYRQdVRZ0h8aDTV5DR0 enable password!
  !
  !
  AAA new-model
  !
  !
  AAA dot1x group group radius aaa accounting dot1x default start-stop radius authentication group!
  !
  !
  AAA - the id of the joint session
  1 supply ws-c2960s-24ts-l switch
  !
  !
  !
  !
  !
  control-dot1x system-auth
  pvst spanning-tree mode
  spanning tree extend id-system
  !
  !
  !
  !
  internal allocation policy of VLAN no ascendant interface FastEthernet0 no stop ip address!
  GigabitEthernet1/0/1 interface
  !
  interface GigabitEthernet1/0/2
  !
  interface GigabitEthernet1/0/3
  !
  interface GigabitEthernet1/0/4
  !
  interface GigabitEthernet1/0/5
  !
  interface GigabitEthernet1/0/6
  !
  interface GigabitEthernet1/0/7
  !
  interface GigabitEthernet1/0/8
  !
  interface GigabitEthernet1/0/9
  !
  interface GigabitEthernet1/0/10
  !
  interface GigabitEthernet1/0/11
  !
  interface GigabitEthernet1/0/12
  switchport mode access
  Auto control of the port of authentication
  dot1x EAP authenticator
  !
  interface GigabitEthernet1/0/13
  !
  interface GigabitEthernet1/0/14
  !
  interface GigabitEthernet1/0/15
  !
  interface GigabitEthernet1/0/16
  !
  interface GigabitEthernet1/0/17
  !
  interface GigabitEthernet1/0/18
  !
  interface GigabitEthernet1/0/19
  !
  interface GigabitEthernet1/0/20
  !
  interface GigabitEthernet1/0/21
  !
  interface GigabitEthernet1/0/22
  !
  interface GigabitEthernet1/0/23
  !
  interface GigabitEthernet1/0/24
  !
  interface GigabitEthernet1/0/25
  !
  interface GigabitEthernet1/0/26
  !
  interface GigabitEthernet1/0/27
  !
  interface GigabitEthernet1/0/28
  !
  interface Vlan1
  IP 10.1.2.12 255.255.255.0
  !
  IP http server
  IP http secure server
  activate the IP sla response alerts
  recording of debug trap
  10.1.2.1 host connection tcp port 514 RADIUS-server host 10.1.2.1 transport auth-port 1812 acct-port 1646 timeout 3 retransmit testing123 key 3.
  Line con 0
  line vty 0 4
  password password
  line vty 5 15
  password password
  !
  end

  interface GigabitEthernet1/0/16
  !
  interface GigabitEthernet1/0/17
  !
  interface GigabitEthernet1/0/18
  !
  interface GigabitEthernet1/0/19
  !
  interface GigabitEthernet1/0/20

  Have you run wireshark on the server because the request to switch? If so you make sure that there is a response from the server? For Windows network POLICY Server (I've never tried Centos), you must ensure that the request is related to a policy which then authenticates, or denies access. Usually, it is a matter of such attributes and the seller.

  Regarding the configuration, it seems a bit out of the AAA. Try to remove the:

  line "aaa dot1x group service radius authentication" and this by using instead:

  "aaa dot1x default radius authentication group". After the dot1x word you are supposed to provide a list of the authentication or the default Word if you do not want to use a list.

• Newbie question on access to the RADIUS server

  I've worked before on RADIUS servers running on Windows but not on Unix. I'm new to an environment without any documentation and I make sure I have access to the GANYMEDE/ACS config.

  I go to my config switch and I see that ' 10.0.0.1 radius-server.

  Then I ssh into ' 10.0.0.1' and I see the below after "method.

  From the bottom, you have an idea on how to access the configuration of the ACS in case I need to change any setting it? I tried http://10.0.0.1 but it does not work.

  -bash-3, $00 ls
  bin features core net sbin TT_DB
  Start the etc. opt system usr lib
  export of CDROM lost + found tftpboot var platform
  dev House Dem proc tmp flight-bash-3. $00 ls
  bin features core net sbin TT_DB
  Start the etc. opt system usr lib
  export of CDROM lost + found tftpboot var platform
  dev House Dem proc tmp flight

  Try http://10.0.0.1:2002 for ACS listening on port default 2002.

  Pete

• Secondary RADIUS server

  I need help on setting up a secondary RADIUS server. I have a primary and secondary school. I would like AAA sending requests to the secondary server when the primary is either down or stopped service on the primary. Any ideas?

  You should consider two methods:

  The old school one like that.

  AAA new-model

  AAA authentication login default group Ganymede + local

  !

  radius-server host 10.1.122.11

  radius-server host 10.2.32.13

  RADIUS-server key abcdef

  If not, try a method of group like this:

  AAA new-model

  AAA server Ganymede group + ABCGROUP

  Server 10.1.1.5

  10.1.1.13 Server

  !

  ABCGROUP line group AAA authentication login default

  !

  GANYMEDE-Server 10.1.1.5 host

  radius-server host 10.1.1.13

  RADIUS-server key abcdef

  !

  Because the shared key (secret) cannot be configured in the configuration group, you must define RADIUS servers again at the end of the config.

  !

  Make sure that you have connectivity at a time before testing. Stop the service on your primary ACS and keep an eye on the reports to see the authentications spent in vain.

  Here; s another tip:

  By fallback authentication 'line', you can immediately distinguish a line Login and Ganymede Login. GANYMEDE will show: "username:" and encourages you to line "password:

  !

  Let me know how things are going.

  See you soon