IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [radius]

69 questions
0
votes
0 answers

How feasible would it be to sniff traffic between an Authentication Server and a RADIUS server in a corporate setting?

For WPA enterprise in the corporate world, is the RADIUS server connected to the Authenticator/Access Point wirelessly or 'wiredly' for most situations? If they are connected wirelessly, does this mean that it becomes somewhat trivial to sniff the…
Lew Wei Hao
  • 429
  • 5
  • 13
0
votes
2 answers

The benifits of Full NAC solution VS simple radius server

In case we want to enable dot1x authentication on the wired network without using host checker,do we still need NAC solution or just simple AAA server to authenticate the host and dynamic VLAN assignment? Any added value for the NAC solution in this…
Mr.lock
  • 345
  • 5
  • 14
0
votes
1 answer

Secure way to save the local credentials?

In the network administration world, normally we configure the network devices to use an AAA server (Radius or tacacs+). As a backup, in case the AAA server is not reachable, we configure the network device to use its local database (local username…
Mr.lock
  • 345
  • 5
  • 14
0
votes
2 answers

2FA using Kerberos and SSO within CDE

I was wondering if anyone is using Kerberos for their 2FA solution into their CDE for PCI DSS compliance. Also, what does PCI DSS say about SSO once 2FA has occurred through a Radius Server?
Scott
  • 1
  • 2
0
votes
0 answers

RADIUS for Access Point Authentication with Google Apps For Business

We're looking to move our current access points from using a static password potentially to RADIUS. However, the closest to a directory service we have is Google Apps for Business, which does support being a SAML Identity Provider, etc. There are a…
crovers
  • 6,311
  • 1
  • 19
  • 29
0
votes
1 answer

Should each radius client have its own key?

If I have many Cisco switches connected to Windows radius, should I assign a different key to each switch? Is it a best practice? If I leave the key same on every host, it would ease my deployment.
deleteme
  • 13
  • 3
0
votes
1 answer

2FA with Windows NPS

I would like to set up two-factor authentication for my Wireless users. I have an Windows NPS server that is currently authenticating my wireless users and I want to add certificates or any other second factor for authentication. Microsoft NPS…
Roman_T
  • 113
  • 2
0
votes
1 answer

Which method of WPA2 enterprise is more secure: TTLS or PEAP

Say we have two WPA2 enterprise setups using a RADIUS server. If both implementations use MSCHAPV2 and the same credentials. Which of the two would be more secure and how are these two implementations actually different. The difference between these…
Corne
  • 11
  • 1
  • 6
-1
votes
1 answer

RADIUS use outside of network AAA

I've seen RADIUS used for wireless authentication, but are there any other use cases that RADIUS works well in? Has anyone had experience with using RADIUS for AAA between two applications? I'm assuming this is possible, but wanted to to see if…
Contego
  • 145
  • 1
  • 5
1 2 3 4
5