topic Re: Radius authentication in Network Access Control

Radius authentication

paulnigel — Sun, 10 Mar 2019 21:39:58 GMT

Hi forum,

Is there a way to use Radius to authenticate users(based on windows user accounts) when they are connected to the switches before granting them access to the windows environment?

Re: Radius authentication

darpotter — Tue, 18 Jul 2006 09:19:38 GMT

The most obvious solution would seem to be 802.1x port security. The switch then doesnt give any network access until the AAA server gives back a result.

You could use vlans from ACS so that authenticated users get onto the network where the windows servers reside, and everyone else gets dumped to somewhere else.

The switch needs a pre-configured username/password so that PCs without 802.1x configured can still be authenticated to receive the non-windows vlan assignment.

This stuff is all part of the NAC framework, although you dont need all the extra complexity of posture validation and stuff.

Darran

Re: Radius authentication

paulnigel — Wed, 19 Jul 2006 00:38:00 GMT

Hi Darran,

Thanks for your reply. I will explore the areas you mentioned.

Thanks much & Best regards,

Paul

Re: Radius authentication

jason.nadeau — Wed, 19 Jul 2006 10:55:37 GMT

Disregard above entry is correct.