Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
Scribd Logo
Upload

Welcome to Scribd!

  • 192 views

    Windows Server NPS (Radius) With SMB

    Uploaded by

    Ikki Hermany
    This document provides steps to configure Windows Server NPS (Radius) authentication for GUI, web and SSH access on Cisco switches. It involves configuring the switch for Radius authentication, adding a new Radius server on the switch, and configuring the Radius server policies and clients to authenticate to the switch. Key steps include enabling authorization on the switch, adding the Radius server IP and shared secret, creating a new Radius client on the server with the switch hostname and IP, and configuring connection request and network policies with required attributes.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Windows Server NPS (Radius) With SMB

    Uploaded by

    Ikki Hermany
    192 views16 pages
    This document provides steps to configure Windows Server NPS (Radius) authentication for GUI, web and SSH access on Cisco switches. It involves configuring the switch for Radius authentication, adding a new Radius server on the switch, and configuring the Radius server policies and clients to authenticate to the switch. Key steps include enabling authorization on the switch, adding the Radius server IP and shared secret, creating a new Radius client on the server with the switch hostname and IP, and configuring connection request and network policies with required attributes.

    Original Title

    Windows Server NPS (Radius) with SMB

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This document provides steps to configure Windows Server NPS (Radius) authentication for GUI, web and SSH access on Cisco switches. It involves configuring the switch for Radius authentication, adding a new Radius server on the switch, and configuring the Radius server policies and clients to authenticate to the switch. Key steps include enabling authorization on the switch, adding the Radius server IP and shared secret, creating a new Radius client on the server with the switch hostname and IP, and configuring connection request and network policies with required attributes.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    192 views16 pages

    Windows Server NPS (Radius) With SMB

    Uploaded by

    Ikki Hermany
    This document provides steps to configure Windows Server NPS (Radius) authentication for GUI, web and SSH access on Cisco switches. It involves configuring the switch for Radius authentication, adding a new Radius server on the switch, and configuring the Radius server policies and clients to authenticate to the switch. Key steps include enabling authorization on the switch, adding the Radius server IP and shared secret, creating a new Radius client on the server with the switch hostname and IP, and configuring connection request and network policies with required attributes.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 16

    Windows Server NPS

    (Radius) with SMB Switches


    Authentication for GUI, Web and SSH, etc.

    Momotombo, Nicaragua

    1
    Cisco SBSC NICARAGUA • 2016
    1. Configure Switch Security Setting (Radius)

    You can use either Management Access


    or Port Based Access Control

    We need to add a new RADIUS Server point of contact

    2
    Cisco SBSC NICARAGUA • 2016
    2. Fill all the information required for Radius

    IP Address of Radius Server

    Select Plaintext to enter the PSK


    This will be set on Radius Settings

    3
    Cisco SBSC NICARAGUA • 2016
    3. Go to “Management Access Authentication”
    On Application, you can select the
    access method to evaluate with
    Radius Server such as:
    - Console
    - Web Access (http, https)
    - CLI (telnet, SSH)

    To make this works you need to:


    1. Enable “Authorization”
    2. Delete Local value from Selected
    Methods list by click on < button.
    3. Add RADIUS value from Optional
    Methods by click on > button.
    4. Apply the changes.

    4
    Cisco SBSC NICARAGUA • 2016
    4. Open Windows NPS (Radius Server)

    5
    Cisco SBSC NICARAGUA • 2016
    5. Create a new RADIUS Clients

    You will need to expand «Radius Clients


    and Server» option and then right click
    on RADIUS CLIENTS and select New

    6
    Cisco SBSC NICARAGUA • 2016
    6. Fill the information for new Radius Client
    * Friendly Name is referring to Hostname of the Switch

    * Address (IP or DNS) is referring to SW IP address


    * Shared Secret, this will be the PSK set on the SW.

    On Advance Tap we need to select Cisco as Vendor Name:

    7
    Cisco SBSC NICARAGUA • 2016
    7. Verify Radius Policies

    We need to verify two Policies:


    1. Connection Request Policies and
    2. Network Policies
    8
    Cisco SBSC NICARAGUA • 2016
    8.A - Create a new Connection Request Policies
    On Conditions tab you need to add a new condition row,
    just click on Add button and look for the option “Client
    Friendly Name”

    And type the hostname of SW.

    9
    Cisco SBSC NICARAGUA • 2016
    8.B - Verify the Setting tab before save the policy
    We must add the Radius Attributes for:
    1. Standard
    1. Name: Services-Type
    2. Value: administrative
    2. Vendor Specific:
    1. Name: Cisco-AV-Pair
    2. Vendor: Cisco
    3. Value: shell:priv-lvl=15

    10
    Cisco SBSC NICARAGUA • 2016
    9. Network Policies - Overview

    We need to enable the “Ignore user


    account dial-in properties” option
    11
    Cisco SBSC NICARAGUA • 2016
    9. Network Policies - Conditions

    • We need to add:
    • Client friendly name
    • User group to use. 12
    Cisco SBSC NICARAGUA • 2016
    9. Network Policies – Constraints

    • Uncheck everything then select Unencrypted


    authentication (PAP, SPAP)
    13
    Cisco SBSC NICARAGUA • 2016
    9. Network Policies – Settings

    •Select and remove the Framed-Protocol and set Service-Type attributes


    14
    Cisco SBSC NICARAGUA • 2016
    9. Network Policies – Settings * Vendor

    •Select Vendor Specific on the left then click Add


    •Select Cisco for Vendor then click Add
    •Click Add again and enter shell:priv-lvl=15
    15
    Cisco SBSC NICARAGUA • 2016
    9. Network Policies – Settings * Vendor

    •Select Vendor Specific on the left then click Add


    •Select Cisco for Vendor then click Add
    •Click Add again and enter shell:priv-lvl=15
    16
    Cisco SBSC NICARAGUA • 2016

    You might also like