Re: [RADIATOR] Server 2008 R2 x64 - radsec certificate verify failed

2011-12-14 Thread Röver , Christian
Hello Heikki, thank you for your fast reply. I commented out the two lines you suggested. There is no difference to see in the logs. The stream server always gets disconnected when receiving a request.. Wed Dec 14 09:57:44 2011: DEBUG: Creating StreamServer tcp port 127.0.0.1:2083 Wed Dec 14 09

Re: [RADIATOR] Server 2008 R2 x64 - radsec certificate verify failed

2011-12-14 Thread Heikki Vatiainen
On 12/14/2011 11:52 AM, Röver, Christian wrote: > thank you for your fast reply. I commented out the two lines you suggested. > There is no difference to see in the logs. > The stream server always gets disconnected when receiving a request.. Are the certificates still valid? You could do someth

Re: [RADIATOR] Built-in Radiator CLI tools

2011-12-14 Thread Heikki Vatiainen
On 12/14/2011 08:17 AM, M P wrote: > What is the easiest way or is there any built-in Radiator CLI tools to > get the following information in the Linux environment? There are at least a couple of possible sources for information in Radiator. - SNMP with - Session database, see for example Sessi

Re: [RADIATOR] EAP-PEAP Windows XP Wired Ethernet

2011-12-14 Thread Heikki Vatiainen
On 12/14/2011 08:11 AM, Indrajaya Pitra Perdana wrote: > I try to setup EAP where cisco catalyst 2950 as authenticator and > windows xp as the supplicant, but after i enter the credentials in Win > xp, radiator send eap access challenge but never got replied by win XP > and in the end the windows

Re: [RADIATOR] EAP-PEAP Windows XP Wired Ethernet

2011-12-14 Thread Indrajaya Pitra Perdana
Yup, i already import the root.der in trusted root certification authorities, is Radiator demo certificate include the xpextension? thanks Code: Access-Request Identifier: 33 Authentic: 1<197><232><26>`<178><223>;<31><225><30><138><202>Zv<151> Attributes: NAS-IP-Address = x.x.x

Re: [RADIATOR] EAP-PEAP Windows XP Wired Ethernet

2011-12-14 Thread Heikki Vatiainen
On 12/14/2011 04:33 PM, Indrajaya Pitra Perdana wrote: > Yup, i already import the root.der in trusted root certification > authorities, is Radiator demo certificate include the xpextension? thanks Importing the certificates to trusted root certificate store is required, but you also need to con

Re: [RADIATOR] EAP-PEAP Windows XP Wired Ethernet

2011-12-14 Thread Indrajaya Pitra Perdana
Yup i already did that, but somehow right now my switch stop sending auth request to my radius :-) , let me check it first, thanks a lot /Regards, Indrajaya Pitra Perdana/ On 12/14/2011 9:44 PM, Heikki Vatiainen wrote: On 12/14/2011 04:33 PM, Indrajaya Pitra Perdana wrote: Yup, i already

Re: [RADIATOR] Server 2008 R2 x64 - radsec certificate verify failed

2011-12-14 Thread Röver , Christian
The posted logfile is the full trace 4 logging and the config I posted before is he complete config (I only cut the descriptions and the lines that were commented out). The certificates are all valid and have been verified by the toplevel-ca. Maybe it is useful to know, that we have our own CA. Our

Re: [RADIATOR] TACACS+ and CISCO ASA

2011-12-14 Thread Kim, Steve
My network engineer said they are enabled. However, with authorization enabled on ASA, it frees the ASA. So, he is not sure what to do. Can you share how did you make the ASA worked or what to look for? Thanks, Steve Kim Information Systems Davis Polk & Wardwell LLP 450 Lexington Avenue New York,

Re: [RADIATOR] TACACS+ and CISCO ASA

2011-12-14 Thread Alexander Hartmaier
Our config is: aaa-server tacacs protocol tacacs+ aaa-server tacacs (interface) host tacacs1.our.fqdn key *** aaa-server tacacs (interface) host tacacs2.our.fqdn key *** aaa authentication enable console tacacs LOCAL aaa authentication http console tacacs LOCAL aaa authentication ssh con