FreeRadius and Clean Access Manager
Hello, Has anybody set up FreeRadius with Network Admission Control. I have a trouble to set up FreeRadius as an authentication server in Clean Access Manager. It works perfectly with ACS. Thanks for a help Dorota
Has anybody set up FreeRadius with Network Admission Control. I have a trouble to set up FreeRadius as an authentication server in Clean Access Manager.
FreeRADIUS does not support Cisco NAC.
It works perfectly with ACS.
This is because it is a Cisco proprietary protocol. josh. JANET(UK) is a trading name of The JNT Association, a company limited by guarantee which is registered in England under No. 2881024 and whose Registered Office is at Lumen House, Library Avenue, Harwell Science and Innovation Campus, Didcot, Oxfordshire. OX11 0SG
Hello Josh, Actually I give another try just after I wrote to the group and I succeeded. I don't talk about TACACS+ here. Cisco Clean Access can have several authentication servers defined. I do confirm it works with FreeRadius as well. Dorota -----Original Message----- From: freeradius-users-bounces@lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of Josh Howlett Sent: Wednesday, October 31, 2007 11:35 AM To: FreeRadius users mailing list Cc: Josh Howlett Subject: RE: FreeRadius and Clean Access Manager
Has anybody set up FreeRadius with Network Admission Control. I have a trouble to set up FreeRadius as an authentication server in Clean Access Manager.
FreeRADIUS does not support Cisco NAC.
It works perfectly with ACS.
This is because it is a Cisco proprietary protocol. josh. JANET(UK) is a trading name of The JNT Association, a company limited by guarantee which is registered in England under No. 2881024 and whose Registered Office is at Lumen House, Library Avenue, Harwell Science and Innovation Campus, Didcot, Oxfordshire. OX11 0SG - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
But you are just using FreeRADIUS for authentication. I didn't realise it was possible to separate posture assessment from authentication in Cisco NAC. Interesting to hear that you can. josh.
-----Original Message----- From: freeradius-users-bounces@lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of Dorota Kupis Sent: 31 October 2007 18:50 To: FreeRadius users mailing list Subject: RE: FreeRadius and Clean Access Manager
Hello Josh,
Actually I give another try just after I wrote to the group and I succeeded. I don't talk about TACACS+ here. Cisco Clean Access can have several authentication servers defined. I do confirm it works with FreeRadius as well.
Dorota
-----Original Message----- From: freeradius-users-bounces@lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of Josh Howlett Sent: Wednesday, October 31, 2007 11:35 AM To: FreeRadius users mailing list Cc: Josh Howlett Subject: RE: FreeRadius and Clean Access Manager
Has anybody set up FreeRadius with Network Admission Control. I have a trouble to set up FreeRadius as an authentication server in Clean Access Manager.
FreeRADIUS does not support Cisco NAC.
It works perfectly with ACS.
This is because it is a Cisco proprietary protocol.
josh.
JANET(UK) is a trading name of The JNT Association, a company limited by guarantee which is registered in England under No. 2881024 and whose Registered Office is at Lumen House, Library Avenue, Harwell Science and Innovation Campus, Didcot, Oxfordshire. OX11 0SG
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
JANET(UK) is a trading name of The JNT Association, a company limited by guarantee which is registered in England under No. 2881024 and whose Registered Office is at Lumen House, Library Avenue, Harwell Science and Innovation Campus, Didcot, Oxfordshire. OX11 0SG
Hi,
But you are just using FreeRADIUS for authentication. I didn't realise it was possible to separate posture assessment from authentication in Cisco NAC. Interesting to hear that you can.
..i guess we are all looking at development of EAP-TNC with interest..
You betcha! josh. JANET(UK) is a trading name of The JNT Association, a company limited by guarantee which is registered in England under No. 2881024 and whose Registered Office is at Lumen House, Library Avenue, Harwell Science and Innovation Campus, Didcot, Oxfordshire. OX11 0SG
A.L.M.Buxey@lboro.ac.uk wrote:
..i guess we are all looking at development of EAP-TNC with interest..
There's no major reason why the EAP-TNC patches couldn't be in 2.0. I have minor issues with the formatting of the code, but enough people use it that it seems to be OK. Alan DeKok.
participants (4)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Dorota Kupis -
Josh Howlett