About eshaq786

eshaq786 · 08-31-2023

HiI am trying to get Duo 2FA working on my NPS server which handles user certificate authentication from our VPN which is a windows client connecting into a Fortigate.There doesnt seem to be a way to make this work. So far I have NPS working and auth...

eshaq786 · 08-09-2022

HiWe have setup 2FA on our switches using Duo auth proxy. This is working fine.However we would like to be able to add a static account with no 2FA so that our security scanning tool can login to the device to retrive config details etc. This login w...

eshaq786 · 10-04-2020

Hi Sorry for re-posting but not sure why Cisco removed my previous post. Im stuck in a situation where I cannot upgrade the firmware on my switch even though I've run the command to cleanup old files etc. I've followed the instructions to copy the bi...

eshaq786 · 10-03-2020

Hi Sorry for re-posting but not sure why Cisco removed my previous post. Im stuck in a situation where I cannot upgrade the firmware on my switch even though I've run the command to cleanup old files etc. I've followed the instructions to copy the bi...

eshaq786 · 08-15-2019

HiI had a cisco 9500-48y4c randomly reboot yesterday for no reason. The only thing the logs show is that the evaluation licence expired just before it decided to reboot. Can anyone look at the log and figure out what caused it and how to fix it? This...

eshaq786 · 09-21-2023

UPDATE:Thought I would answer my own question as i appear to have got it working.It does appear that the Duo Auth Proxy does support certificate authentication when that primary request is passed to an NPS server that is configured to accept certific...

eshaq786 · 11-09-2022

HiShould have specified that I am not using TACACS to manage the switches.

eshaq786 · 08-09-2022

This is my existing VTY configline con 0password 7 xxxxxlogging synchronouslogin authentication No-Radius-Loginline vty 0 4password 7 xxxxxxtransport input sshline vty 5 15password 7 xxxxxxtransport input sshIf i issue just a line VTY 15, will that c...

eshaq786 · 08-09-2022

Can i use this method but use a static username stored locally on the device? Furthermore, can i then restrict this so that only a specified ip address can login using this method as it would be deemed insecure since it had no 2FA.

eshaq786 · 10-04-2020

That installed correctly. Thanks for your help. I do agree, it should have rejected it from the start. Would've saved me a lot of time.

Member Since	‎02-02-2017 01:44 AM
Date Last Visited	‎01-12-2024 12:06 AM
Posts	18
Total Helpful Votes Received	12

User Statistics

User Activity

Certificate authentication with NPS and 2FA by Duo

2FA + Static Login with IP Restriction

Cisco 9200 IOS Out of Space

Cisco 9200 IOS Out of Space

Cisco 9500 Crash After Evaluation License Expired.

Re: Certificate authentication with NPS and 2FA by Duo

Re: 2FA + Static Login with IP Restriction

Re: 2FA + Static Login with IP Restriction

Re: 2FA + Static Login with IP Restriction

Re: Cisco 9200 IOS Out of Space