Hi, what are the possibilities to test radius without proper equipment (switch)? I'd like to use freeradius for Dell switches to authorise (802.1x) clients with their mac. radtest can't send eap messages. Is there any programs to test it? -- Pozdrawiam Marcin / nicraM
On 25-03-15 08:44, Marcin wrote:
Hi, what are the possibilities to test radius without proper equipment (switch)? I'd like to use freeradius for Dell switches to authorise (802.1x) clients with their mac. radtest can't send eap messages. Is there any programs to test it?
eapoltest is pretty good in this, see http://deployingradius.com/scripts/eapol_test/ -- Herwin Weststrate
Fine tool, thanks. I'm getting to test it, :-) 25 mar 2015 08:56 "Herwin Weststrate" <herwin@quarantainenet.nl> napisał(a):
On 25-03-15 08:44, Marcin wrote:
Hi, what are the possibilities to test radius without proper equipment (switch)? I'd like to use freeradius for Dell switches to authorise (802.1x) clients with their mac. radtest can't send eap messages. Is there any programs to test it?
eapoltest is pretty good in this, see http://deployingradius.com/scripts/eapol_test/
-- Herwin Weststrate - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
How can I simulate that swich asks freeradius that client 01-02-aa-aa-aa-ab on port 4 want to get access on port? 2015-03-25 8:54 GMT+01:00 Herwin Weststrate <herwin@quarantainenet.nl>:
On 25-03-15 08:44, Marcin wrote:
Hi, what are the possibilities to test radius without proper equipment (switch)? I'd like to use freeradius for Dell switches to authorise (802.1x) clients with their mac. radtest can't send eap messages. Is there any programs to test it?
eapoltest is pretty good in this, see http://deployingradius.com/scripts/eapol_test/
-- Herwin Weststrate - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Pozdrawiam Marcin / nicraM
Hi,
How can I simulate that swich asks freeradius that client 01-02-aa-aa-aa-ab on port 4 want to get access on port?
you can use radeaptest and feed it the VSA/TLVs that the switch would actually send. obviously you need to be quite familiar with the switch and have seen eg its 802.1X packets so you know the stuff it sends. alan
At this moment I'd like to check that common attributes port and client-mac. I don't need authenticate with user name and password because most of soho routers does't support 802.1x. I'm going to introduce it with dell powerconnect 3424 switches. 2015-03-25 11:37 GMT+01:00 <A.L.M.Buxey@lboro.ac.uk>:
Hi,
How can I simulate that swich asks freeradius that client 01-02-aa-aa-aa-ab on port 4 want to get access on port?
you can use radeaptest and feed it the VSA/TLVs that the switch would actually send.
obviously you need to be quite familiar with the switch and have seen eg its 802.1X packets so you know the stuff it sends.
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Pozdrawiam Marcin / nicraM
On Wed, Mar 25, 2015 at 11:46:34AM +0100, Marcin wrote:
At this moment I'd like to check that common attributes port and client-mac. I don't need authenticate with user name and password because most of soho routers does't support 802.1x.
If you're not doing 802.1X, radclient will work fine for sending attributes and testing them through the server. Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
On 25 Mar 2015, at 07:54, Matthew Newton <mcn4@leicester.ac.uk> wrote:
On Wed, Mar 25, 2015 at 11:46:34AM +0100, Marcin wrote:
At this moment I'd like to check that common attributes port and client-mac. I don't need authenticate with user name and password because most of soho routers does't support 802.1x.
If you're not doing 802.1X, radclient will work fine for sending attributes and testing them through the server.
http://wiki.freeradius.org/guide/raduat Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
On Wed, Mar 25, 2015 at 08:29:32AM -0400, Arran Cudbard-Bell wrote:
On 25 Mar 2015, at 07:54, Matthew Newton <mcn4@leicester.ac.uk> wrote:
If you're not doing 802.1X, radclient will work fine for sending attributes and testing them through the server.
...or raduat :) Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
Thanks for helping me. 25 mar 2015 13:42 "Matthew Newton" <mcn4@leicester.ac.uk> napisał(a):
On Wed, Mar 25, 2015 at 08:29:32AM -0400, Arran Cudbard-Bell wrote:
On 25 Mar 2015, at 07:54, Matthew Newton <mcn4@leicester.ac.uk> wrote:
If you're not doing 802.1X, radclient will work fine for sending attributes and testing them through the server.
...or raduat :)
Matthew
-- Matthew Newton, Ph.D. <mcn4@le.ac.uk>
Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom
For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk> - List info/subscribe/unsubscribe? See
participants (5)
-
A.L.M.Buxey＠lboro.ac.uk -
Arran Cudbard-Bell -
Herwin Weststrate -
Marcin -
Matthew Newton