- Community Home
- >
- Networking
- >
- Legacy
- >
- Switches, Hubs, Modems
- >
- Re: 802.1x Problem on Remote Site
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-01-2008 07:48 AM
тАО11-01-2008 07:48 AM
802.1x Problem on Remote Site
I have a strange Problem at a Remote Site.
It's a Branch Office with only one 2610-48-PWR Switch.
The Win XP Clients (with SP3) and the Users are successfully authenticated at the Windows IAS Server and the IDM but the Network Port seems not be change into the right VLAN so that the Clients won't get an IP-Address via DHCP.
If I put static IP-Address to the Client and try to ping Ressources from the right VLAN the will be timed out. So the Client wille be in the wrong VLAN.
This behavior occured also on the AP530 Access Point at this site.
I tested the RADIUS Authentication and get all right informations for the User. So it might be something between the RADIUS Server and the Remote Site I think.
I hope you can help me. Thanx.
Alen
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-01-2008 08:39 AM
тАО11-01-2008 08:39 AM
Re: 802.1x Problem on Remote Site
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-01-2008 08:40 AM
тАО11-01-2008 08:40 AM
Re: 802.1x Problem on Remote Site
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-01-2008 09:04 AM
тАО11-01-2008 09:04 AM
Re: 802.1x Problem on Remote Site
check
ip helper address command on switch
check
config)# sh vlans ports xxx
with command port vlan status
check
remote active directory rule (in radius service)for user or user group rule
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-02-2008 03:07 AM
тАО11-02-2008 03:07 AM
Re: 802.1x Problem on Remote Site
I attached you the # sh run Output.
The IAS Server Log said, that the User was granted, so the authentication will be successfully.
The IP-Helper on the switch is not active because it's not a routing switch. I installed a DHCP Relay on the Firewall wich works fine for the Guests-VLAN.
# sh vlans ports xxx cannot check at the moment because I am back in the Headquarter.
I can check the same issue next week at a another Branch Office.
Alen
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-02-2008 10:18 PM
тАО11-02-2008 10:18 PM
Re: 802.1x Problem on Remote Site
I think one radius server headquarter residing and one radius server residing branch office
where is residing dhcp server/servers
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-02-2008 10:33 PM
тАО11-02-2008 10:33 PM
Re: 802.1x Problem on Remote Site
and all switch sh run print
I check all config for you
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-03-2008 12:21 AM
тАО11-03-2008 12:21 AM
Re: 802.1x Problem on Remote Site
Here the Topology Layout
AP530 --> 2610-48-PWR --> Firewall Branch
Firewall Branch --> VPN --> Firewall HQ
Firwa├Г┬╢├Г┬╢ HQ --> IAS1 / IAS2
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-03-2008 12:28 AM
тАО11-03-2008 12:28 AM
Re: 802.1x Problem on Remote Site
if the microsoft policiy has been changed from the default settings, sometimes the wrong policy is used
see http://technet.microsoft.com/en-us/library/cc786978.aspx search for "third party"
reset the microsoft RRAS policy to the defaults (or maybe change policy order or even delete).
hope this helps
Pieter
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-03-2008 12:30 AM
тАО11-03-2008 12:30 AM
Re: 802.1x Problem on Remote Site
no the RADIUS Server will work fine.
I tested it yesterday in the Headquarter.
The authentication is correct and the VLAN's on the switches in the HQ were also set correctly but not at the Branch Office Side :(