Switching

Hi all,


Is there any one here can give some url how to configure Windows server 2012 if i want test it for wired 802.1x? Currently i'm try to replicate as JNCIE-ENT self bundle in my virtual lab. Is it same step if i follow the url below or u have another url that easy and more clear to follow.


http://elder-usr.blogspot.com/2017/04/implementing-8021x-windows-2012r2-cisco.html


Thanks and appreciate any feedback

Hey Kronicklez, 

Is there any way to get in touch with you outisde of these forums? I have a few questions regarding some of your earlier posts on MX480 AMS NAT.

------------------------------
CHUCK GREVE
------------------------------

Original Message:
Sent: 03-20-2022 20:06
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi all,


Is there any one here can give some url how to configure Windows server 2012 if i want test it for wired 802.1x? Currently i'm try to replicate as JNCIE-ENT self bundle in my virtual lab. Is it same step if i follow the url below or u have another url that easy and more clear to follow.


http://elder-usr.blogspot.com/2017/04/implementing-8021x-windows-2012r2-cisco.html


Thanks and appreciate any feedback

Hi @CHUCK GREVE, you have the option to send private messages to other members once you have added them as a contact. You can do this by visiting other members' profiles.​

------------------------------
Michael Pappas
------------------------------

Original Message:
Sent: 03-22-2022 14:18
From: CHUCK GREVE
Subject: Wired 802.1x with Windows Server 2012?

Hey Kronicklez, 

Is there any way to get in touch with you outisde of these forums? I have a few questions regarding some of your earlier posts on MX480 AMS NAT.

------------------------------
CHUCK GREVE

Original Message:
Sent: 03-20-2022 20:06
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi all,


Is there any one here can give some url how to configure Windows server 2012 if i want test it for wired 802.1x? Currently i'm try to replicate as JNCIE-ENT self bundle in my virtual lab. Is it same step if i follow the url below or u have another url that easy and more clear to follow.


http://elder-usr.blogspot.com/2017/04/implementing-8021x-windows-2012r2-cisco.html


Thanks and appreciate any feedback

Hi 
I always follow https://youtu.be/6Oy3Rnle4CQ
There're 3 part. It's quite clear and easy to understand

Hope this help!


------------------------------
Wipawee Paiboonsematus
------------------------------

Original Message:
Sent: 03-20-2022 20:06
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi all,


Is there any one here can give some url how to configure Windows server 2012 if i want test it for wired 802.1x? Currently i'm try to replicate as JNCIE-ENT self bundle in my virtual lab. Is it same step if i follow the url below or u have another url that easy and more clear to follow.


http://elder-usr.blogspot.com/2017/04/implementing-8021x-windows-2012r2-cisco.html


Thanks and appreciate any feedback

Hi Bro Lomo,


Very2 appreciate that url. It very clear the guide. Let me try first.


Thanks again.
Original Message:
Sent: 03-23-2022 01:18
From: Wipawee Paiboonsematus
Subject: Wired 802.1x with Windows Server 2012?

Hi 
I always follow https://youtu.be/6Oy3Rnle4CQ
There're 3 part. It's quite clear and easy to understand

Hope this help!


------------------------------
Wipawee Paiboonsematus

Original Message:
Sent: 03-20-2022 20:06
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi all,


Is there any one here can give some url how to configure Windows server 2012 if i want test it for wired 802.1x? Currently i'm try to replicate as JNCIE-ENT self bundle in my virtual lab. Is it same step if i follow the url below or u have another url that easy and more clear to follow.


http://elder-usr.blogspot.com/2017/04/implementing-8021x-windows-2012r2-cisco.html


Thanks and appreciate any feedback

Hi Lomo,

I'm already follow exactly as per youtube url but still fail authentcate dot1x. It said "authenticated failed". By the way i'm using vQFX as switch and simulate in Eve-NG. Do u know whether it due to vQFX limitation?


Thank and appreciate anyone feedback.
Original Message:
Sent: 03-23-2022 01:18
From: Wipawee Paiboonsematus
Subject: Wired 802.1x with Windows Server 2012?

Hi 
I always follow https://youtu.be/6Oy3Rnle4CQ
There're 3 part. It's quite clear and easy to understand

Hope this help!


------------------------------
Wipawee Paiboonsematus

Original Message:
Sent: 03-20-2022 20:06
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi all,


Is there any one here can give some url how to configure Windows server 2012 if i want test it for wired 802.1x? Currently i'm try to replicate as JNCIE-ENT self bundle in my virtual lab. Is it same step if i follow the url below or u have another url that easy and more clear to follow.


http://elder-usr.blogspot.com/2017/04/implementing-8021x-windows-2012r2-cisco.html


Thanks and appreciate any feedback

Hi 
Please share me a log message on event viewer to see more details due to authentication failed

------------------------------
Wipawee Paiboonsematus
------------------------------

Original Message:
Sent: 03-26-2022 03:34
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi Lomo,

I'm already follow exactly as per youtube url but still fail authentcate dot1x. It said "authenticated failed". By the way i'm using vQFX as switch and simulate in Eve-NG. Do u know whether it due to vQFX limitation?


Thank and appreciate anyone feedback.
Original Message:
Sent: 03-23-2022 01:18
From: Wipawee Paiboonsematus
Subject: Wired 802.1x with Windows Server 2012?

Hi 
I always follow https://youtu.be/6Oy3Rnle4CQ
There're 3 part. It's quite clear and easy to understand

Hope this help!


------------------------------
Wipawee Paiboonsematus

Original Message:
Sent: 03-20-2022 20:06
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi all,


Is there any one here can give some url how to configure Windows server 2012 if i want test it for wired 802.1x? Currently i'm try to replicate as JNCIE-ENT self bundle in my virtual lab. Is it same step if i follow the url below or u have another url that easy and more clear to follow.


http://elder-usr.blogspot.com/2017/04/implementing-8021x-windows-2012r2-cisco.html


Thanks and appreciate any feedback

Hi @Lomo


Below is my vQFX config. Regarding the log message i will send later.

{master:0}[edit system]
root@EX1# run show configuration system radius-server | display set
set system radius-server 10.10.10.1 port 1812
set system radius-server 10.10.10.1 secret "$9$CIeqpORreW-VYhSVYgojiAp0BhSlKMXNd"
set system radius-server 10.10.10.1 timeout 3
set system radius-server 10.10.10.1 retry 3
set system radius-server 10.10.10.1 source-address 10.100.0.1


root@EX1# run show configuration interfaces xe-0/0/2.0 | display set
set interfaces xe-0/0/2 unit 0 family ethernet-switching interface-mode access
set interfaces xe-0/0/2 unit 0 family ethernet-switching vlan members user

set access radius-server 10.10.10.1 port 1812
set access radius-server 10.10.10.1 secret "$9$YN4JD.PQ9A0ikA0BIrl24aZikmfT3/C"
set access radius-server 10.10.10.1 source-address 10.100.100.254
set access profile dot1xgroup authentication-order radius
set access profile dot1xgroup radius authentication-server 10.10.10.1


root@EX1# run show configuration protocols dot1x | display set
set protocols dot1x authenticator authentication-profile-name dot1xgroup
set protocols dot1x authenticator interface xe-0/0/2.0 supplicant multiple
set protocols dot1x authenticator interface xe-0/0/2.0 guest-vlan guest
deactivate protocols dot1x authenticator interface xe-0/0/2.0 guest-vlan
set protocols dot1x authenticator interface xe-0/0/2.0 server-fail vlan-name guest
deactivate protocols dot1x authenticator interface xe-0/0/2.0 server-fail ​​
Original Message:
Sent: 03-28-2022 00:10
From: Wipawee Paiboonsematus
Subject: Wired 802.1x with Windows Server 2012?

Hi 
Please share me a log message on event viewer to see more details due to authentication failed

------------------------------
Wipawee Paiboonsematus

Original Message:
Sent: 03-26-2022 03:34
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi Lomo,

I'm already follow exactly as per youtube url but still fail authentcate dot1x. It said "authenticated failed". By the way i'm using vQFX as switch and simulate in Eve-NG. Do u know whether it due to vQFX limitation?


Thank and appreciate anyone feedback.
Original Message:
Sent: 03-23-2022 01:18
From: Wipawee Paiboonsematus
Subject: Wired 802.1x with Windows Server 2012?

Hi 
I always follow https://youtu.be/6Oy3Rnle4CQ
There're 3 part. It's quite clear and easy to understand

Hope this help!


------------------------------
Wipawee Paiboonsematus

Original Message:
Sent: 03-20-2022 20:06
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi all,


Is there any one here can give some url how to configure Windows server 2012 if i want test it for wired 802.1x? Currently i'm try to replicate as JNCIE-ENT self bundle in my virtual lab. Is it same step if i follow the url below or u have another url that easy and more clear to follow.


http://elder-usr.blogspot.com/2017/04/implementing-8021x-windows-2012r2-cisco.html


Thanks and appreciate any feedback

Hi 
set protocols dot1x authenticator interface xe-0/0/2.0 guest-vlan guest < this line can delete 
set interfaces xe-0/0/2 unit 0 family ethernet-switching vlan members user < this line can delete 

and please show the output of "show dot1x interface ge-0/0/1.0 detail" and "event viewer is really important"
some authentication filed can be due due to mis-configuration on wired client (802.1x setup). Is it a windows client and which windows version?

------------------------------
Wipawee Paiboonsematus
------------------------------

Original Message:
Sent: 03-28-2022 06:49
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi @Lomo


Below is my vQFX config. Regarding the log message i will send later.

{master:0}[edit system]
root@EX1# run show configuration system radius-server | display set
set system radius-server 10.10.10.1 port 1812
set system radius-server 10.10.10.1 secret "$9$CIeqpORreW-VYhSVYgojiAp0BhSlKMXNd"
set system radius-server 10.10.10.1 timeout 3
set system radius-server 10.10.10.1 retry 3
set system radius-server 10.10.10.1 source-address 10.100.0.1


root@EX1# run show configuration interfaces xe-0/0/2.0 | display set
set interfaces xe-0/0/2 unit 0 family ethernet-switching interface-mode access
set interfaces xe-0/0/2 unit 0 family ethernet-switching vlan members user

set access radius-server 10.10.10.1 port 1812
set access radius-server 10.10.10.1 secret "$9$YN4JD.PQ9A0ikA0BIrl24aZikmfT3/C"
set access radius-server 10.10.10.1 source-address 10.100.100.254
set access profile dot1xgroup authentication-order radius
set access profile dot1xgroup radius authentication-server 10.10.10.1


root@EX1# run show configuration protocols dot1x | display set
set protocols dot1x authenticator authentication-profile-name dot1xgroup
set protocols dot1x authenticator interface xe-0/0/2.0 supplicant multiple
set protocols dot1x authenticator interface xe-0/0/2.0 guest-vlan guest
deactivate protocols dot1x authenticator interface xe-0/0/2.0 guest-vlan
set protocols dot1x authenticator interface xe-0/0/2.0 server-fail vlan-name guest
deactivate protocols dot1x authenticator interface xe-0/0/2.0 server-fail ​​
Original Message:
Sent: 03-28-2022 00:10
From: Wipawee Paiboonsematus
Subject: Wired 802.1x with Windows Server 2012?

Hi 
Please share me a log message on event viewer to see more details due to authentication failed

------------------------------
Wipawee Paiboonsematus

Original Message:
Sent: 03-26-2022 03:34
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi Lomo,

I'm already follow exactly as per youtube url but still fail authentcate dot1x. It said "authenticated failed". By the way i'm using vQFX as switch and simulate in Eve-NG. Do u know whether it due to vQFX limitation?


Thank and appreciate anyone feedback.
Original Message:
Sent: 03-23-2022 01:18
From: Wipawee Paiboonsematus
Subject: Wired 802.1x with Windows Server 2012?

Hi 
I always follow https://youtu.be/6Oy3Rnle4CQ
There're 3 part. It's quite clear and easy to understand

Hope this help!


------------------------------
Wipawee Paiboonsematus

Original Message:
Sent: 03-20-2022 20:06
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi all,


Is there any one here can give some url how to configure Windows server 2012 if i want test it for wired 802.1x? Currently i'm try to replicate as JNCIE-ENT self bundle in my virtual lab. Is it same step if i follow the url below or u have another url that easy and more clear to follow.


http://elder-usr.blogspot.com/2017/04/implementing-8021x-windows-2012r2-cisco.html


Thanks and appreciate any feedback

Hi lomo,


The line config already deactivate so no issue. The client i'm test using Windows 7-Pro 32bit and Windows 10. The result still same. The vent viewer u referring to client right?


Thanks
Original Message:
Sent: 03-29-2022 02:42
From: Wipawee Paiboonsematus
Subject: Wired 802.1x with Windows Server 2012?

Hi 
set protocols dot1x authenticator interface xe-0/0/2.0 guest-vlan guest < this line can delete 
set interfaces xe-0/0/2 unit 0 family ethernet-switching vlan members user < this line can delete 

and please show the output of "show dot1x interface ge-0/0/1.0 detail" and "event viewer is really important"
some authentication filed can be due due to mis-configuration on wired client (802.1x setup). Is it a windows client and which windows version?

------------------------------
Wipawee Paiboonsematus

Original Message:
Sent: 03-28-2022 06:49
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi @Lomo


Below is my vQFX config. Regarding the log message i will send later.

{master:0}[edit system]
root@EX1# run show configuration system radius-server | display set
set system radius-server 10.10.10.1 port 1812
set system radius-server 10.10.10.1 secret "$9$CIeqpORreW-VYhSVYgojiAp0BhSlKMXNd"
set system radius-server 10.10.10.1 timeout 3
set system radius-server 10.10.10.1 retry 3
set system radius-server 10.10.10.1 source-address 10.100.0.1


root@EX1# run show configuration interfaces xe-0/0/2.0 | display set
set interfaces xe-0/0/2 unit 0 family ethernet-switching interface-mode access
set interfaces xe-0/0/2 unit 0 family ethernet-switching vlan members user

set access radius-server 10.10.10.1 port 1812
set access radius-server 10.10.10.1 secret "$9$YN4JD.PQ9A0ikA0BIrl24aZikmfT3/C"
set access radius-server 10.10.10.1 source-address 10.100.100.254
set access profile dot1xgroup authentication-order radius
set access profile dot1xgroup radius authentication-server 10.10.10.1


root@EX1# run show configuration protocols dot1x | display set
set protocols dot1x authenticator authentication-profile-name dot1xgroup
set protocols dot1x authenticator interface xe-0/0/2.0 supplicant multiple
set protocols dot1x authenticator interface xe-0/0/2.0 guest-vlan guest
deactivate protocols dot1x authenticator interface xe-0/0/2.0 guest-vlan
set protocols dot1x authenticator interface xe-0/0/2.0 server-fail vlan-name guest
deactivate protocols dot1x authenticator interface xe-0/0/2.0 server-fail ​​
Original Message:
Sent: 03-28-2022 00:10
From: Wipawee Paiboonsematus
Subject: Wired 802.1x with Windows Server 2012?

Hi 
Please share me a log message on event viewer to see more details due to authentication failed

------------------------------
Wipawee Paiboonsematus

Original Message:
Sent: 03-26-2022 03:34
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi Lomo,

I'm already follow exactly as per youtube url but still fail authentcate dot1x. It said "authenticated failed". By the way i'm using vQFX as switch and simulate in Eve-NG. Do u know whether it due to vQFX limitation?


Thank and appreciate anyone feedback.
Original Message:
Sent: 03-23-2022 01:18
From: Wipawee Paiboonsematus
Subject: Wired 802.1x with Windows Server 2012?

Hi 
I always follow https://youtu.be/6Oy3Rnle4CQ
There're 3 part. It's quite clear and easy to understand

Hope this help!


------------------------------
Wipawee Paiboonsematus

Original Message:
Sent: 03-20-2022 20:06
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi all,


Is there any one here can give some url how to configure Windows server 2012 if i want test it for wired 802.1x? Currently i'm try to replicate as JNCIE-ENT self bundle in my virtual lab. Is it same step if i follow the url below or u have another url that easy and more clear to follow.


http://elder-usr.blogspot.com/2017/04/implementing-8021x-windows-2012r2-cisco.html


Thanks and appreciate any feedback

Hi 
Event viewer is on MS server. You will see client request and the details both authentication success/failed



------------------------------
Wipawee Paiboonsematus
------------------------------

Original Message:
Sent: 03-29-2022 06:22
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi lomo,


The line config already deactivate so no issue. The client i'm test using Windows 7-Pro 32bit and Windows 10. The result still same. The vent viewer u referring to client right?


Thanks
Original Message:
Sent: 03-29-2022 02:42
From: Wipawee Paiboonsematus
Subject: Wired 802.1x with Windows Server 2012?

Hi 
set protocols dot1x authenticator interface xe-0/0/2.0 guest-vlan guest < this line can delete 
set interfaces xe-0/0/2 unit 0 family ethernet-switching vlan members user < this line can delete 

and please show the output of "show dot1x interface ge-0/0/1.0 detail" and "event viewer is really important"
some authentication filed can be due due to mis-configuration on wired client (802.1x setup). Is it a windows client and which windows version?

------------------------------
Wipawee Paiboonsematus

Original Message:
Sent: 03-28-2022 06:49
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi @Lomo


Below is my vQFX config. Regarding the log message i will send later.

{master:0}[edit system]
root@EX1# run show configuration system radius-server | display set
set system radius-server 10.10.10.1 port 1812
set system radius-server 10.10.10.1 secret "$9$CIeqpORreW-VYhSVYgojiAp0BhSlKMXNd"
set system radius-server 10.10.10.1 timeout 3
set system radius-server 10.10.10.1 retry 3
set system radius-server 10.10.10.1 source-address 10.100.0.1


root@EX1# run show configuration interfaces xe-0/0/2.0 | display set
set interfaces xe-0/0/2 unit 0 family ethernet-switching interface-mode access
set interfaces xe-0/0/2 unit 0 family ethernet-switching vlan members user

set access radius-server 10.10.10.1 port 1812
set access radius-server 10.10.10.1 secret "$9$YN4JD.PQ9A0ikA0BIrl24aZikmfT3/C"
set access radius-server 10.10.10.1 source-address 10.100.100.254
set access profile dot1xgroup authentication-order radius
set access profile dot1xgroup radius authentication-server 10.10.10.1


root@EX1# run show configuration protocols dot1x | display set
set protocols dot1x authenticator authentication-profile-name dot1xgroup
set protocols dot1x authenticator interface xe-0/0/2.0 supplicant multiple
set protocols dot1x authenticator interface xe-0/0/2.0 guest-vlan guest
deactivate protocols dot1x authenticator interface xe-0/0/2.0 guest-vlan
set protocols dot1x authenticator interface xe-0/0/2.0 server-fail vlan-name guest
deactivate protocols dot1x authenticator interface xe-0/0/2.0 server-fail ​​
Original Message:
Sent: 03-28-2022 00:10
From: Wipawee Paiboonsematus
Subject: Wired 802.1x with Windows Server 2012?

Hi 
Please share me a log message on event viewer to see more details due to authentication failed

------------------------------
Wipawee Paiboonsematus

Original Message:
Sent: 03-26-2022 03:34
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi Lomo,

I'm already follow exactly as per youtube url but still fail authentcate dot1x. It said "authenticated failed". By the way i'm using vQFX as switch and simulate in Eve-NG. Do u know whether it due to vQFX limitation?


Thank and appreciate anyone feedback.
Original Message:
Sent: 03-23-2022 01:18
From: Wipawee Paiboonsematus
Subject: Wired 802.1x with Windows Server 2012?

Hi 
I always follow https://youtu.be/6Oy3Rnle4CQ
There're 3 part. It's quite clear and easy to understand

Hope this help!


------------------------------
Wipawee Paiboonsematus

Original Message:
Sent: 03-20-2022 20:06
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi all,


Is there any one here can give some url how to configure Windows server 2012 if i want test it for wired 802.1x? Currently i'm try to replicate as JNCIE-ENT self bundle in my virtual lab. Is it same step if i follow the url below or u have another url that easy and more clear to follow.


http://elder-usr.blogspot.com/2017/04/implementing-8021x-windows-2012r2-cisco.html


Thanks and appreciate any feedback

Hi,

Can you share you configuration on the switch-side, so we can see if something is missing.

Br
Robert
Original Message:
Sent: 03-26-2022 03:34
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi Lomo,

I'm already follow exactly as per youtube url but still fail authentcate dot1x. It said "authenticated failed". By the way i'm using vQFX as switch and simulate in Eve-NG. Do u know whether it due to vQFX limitation?


Thank and appreciate anyone feedback.
Original Message:
Sent: 03-23-2022 01:18
From: Wipawee Paiboonsematus
Subject: Wired 802.1x with Windows Server 2012?

Hi 
I always follow https://youtu.be/6Oy3Rnle4CQ
There're 3 part. It's quite clear and easy to understand

Hope this help!


------------------------------
Wipawee Paiboonsematus

Original Message:
Sent: 03-20-2022 20:06
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi all,


Is there any one here can give some url how to configure Windows server 2012 if i want test it for wired 802.1x? Currently i'm try to replicate as JNCIE-ENT self bundle in my virtual lab. Is it same step if i follow the url below or u have another url that easy and more clear to follow.


http://elder-usr.blogspot.com/2017/04/implementing-8021x-windows-2012r2-cisco.html


Thanks and appreciate any feedback

Hi 
I would recommend to take a look on event viewer first. It tells you everything 
I already check your configuration. It looks good.
I have no 802.1x in my configuration right now. or please follow Junos® OS User Access and Authentication Administration Guide for Junos OS (juniper.net) to recheck your configuration

------------------------------
Wipawee Paiboonsematus
------------------------------

Original Message:
Sent: 03-28-2022 09:26
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi,

Can you share you configuration on the switch-side, so we can see if something is missing.

Br
Robert
Original Message:
Sent: 03-26-2022 03:34
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi Lomo,

I'm already follow exactly as per youtube url but still fail authentcate dot1x. It said "authenticated failed". By the way i'm using vQFX as switch and simulate in Eve-NG. Do u know whether it due to vQFX limitation?


Thank and appreciate anyone feedback.
Original Message:
Sent: 03-23-2022 01:18
From: Wipawee Paiboonsematus
Subject: Wired 802.1x with Windows Server 2012?

Hi 
I always follow https://youtu.be/6Oy3Rnle4CQ
There're 3 part. It's quite clear and easy to understand

Hope this help!


------------------------------
Wipawee Paiboonsematus

Original Message:
Sent: 03-20-2022 20:06
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi all,


Is there any one here can give some url how to configure Windows server 2012 if i want test it for wired 802.1x? Currently i'm try to replicate as JNCIE-ENT self bundle in my virtual lab. Is it same step if i follow the url below or u have another url that easy and more clear to follow.


http://elder-usr.blogspot.com/2017/04/implementing-8021x-windows-2012r2-cisco.html


Thanks and appreciate any feedback

Hi Lomo,


After do some test with freeradius then it work. So look like the url youtube is cannot work with juniper or have something missing step on windows server in that video.


Thanks
Original Message:
Sent: 03-31-2022 04:27
From: Wipawee Paiboonsematus
Subject: Wired 802.1x with Windows Server 2012?

Hi 
I would recommend to take a look on event viewer first. It tells you everything 
I already check your configuration. It looks good.
I have no 802.1x in my configuration right now. or please follow Junos® OS User Access and Authentication Administration Guide for Junos OS (juniper.net) to recheck your configuration

------------------------------
Wipawee Paiboonsematus

Original Message:
Sent: 03-28-2022 09:26
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi,

Can you share you configuration on the switch-side, so we can see if something is missing.

Br
Robert
Original Message:
Sent: 03-26-2022 03:34
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi Lomo,

I'm already follow exactly as per youtube url but still fail authentcate dot1x. It said "authenticated failed". By the way i'm using vQFX as switch and simulate in Eve-NG. Do u know whether it due to vQFX limitation?


Thank and appreciate anyone feedback.
Original Message:
Sent: 03-23-2022 01:18
From: Wipawee Paiboonsematus
Subject: Wired 802.1x with Windows Server 2012?

Hi 
I always follow https://youtu.be/6Oy3Rnle4CQ
There're 3 part. It's quite clear and easy to understand

Hope this help!


------------------------------
Wipawee Paiboonsematus

Original Message:
Sent: 03-20-2022 20:06
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi all,


Is there any one here can give some url how to configure Windows server 2012 if i want test it for wired 802.1x? Currently i'm try to replicate as JNCIE-ENT self bundle in my virtual lab. Is it same step if i follow the url below or u have another url that easy and more clear to follow.


http://elder-usr.blogspot.com/2017/04/implementing-8021x-windows-2012r2-cisco.html


Thanks and appreciate any feedback

Hi,

Not sure if this is completely what you are looking for. It depends on what you would like to authenticate.
For this example, it will auth the client certificate that has been issued via AD-enrollment.
EX-switch config:
Radius settings:
set access radius-server 10.50.0.68 secret "X"
set access radius-server 10.50.0.68 timeout 5
set access radius-server 10.50.0.68 retry 10
set access radius-server 10.50.0.68 source-address 10.17.0.90
set access profile profile1 authentication-order radius
set access profile profile1 radius authentication-server 10.50.0.68

Port and 802.1x
set interfaces interface-range User_802_1X_POC member ge-2/0/3
set interfaces interface-range User_802_1X_POC description "Enforce 802.1x machine auth"
set protocols dot1x authenticator authentication-profile-name profile1
set protocols dot1x authenticator interface User_802_1X_POC supplicant multiple
set protocols dot1x authenticator interface User_802_1X_POC retries 2
set protocols dot1x authenticator interface User_802_1X_POC quiet-period 15
set protocols dot1x authenticator interface User_802_1X_POC transmit-period 7
set protocols dot1x authenticator interface User_802_1X_POC reauthentication 7200
set protocols dot1x authenticator interface User_802_1X_POC server-timeout 5
set protocols dot1x authenticator interface User_802_1X_POC maximum-requests 3
set protocols dot1x authenticator interface User_802_1X_POC guest-vlan GUESTVLAN
set protocols dot1x authenticator interface User_802_1X_POC server-reject-vlan GUESTVLAN
set protocols dot1x authenticator interface User_802_1X_POC server-fail use-cache
set protocols dot1x authenticator interface User_802_1X_POC server-fail-voip permit

The radius used is Microsoft NPS on Win2019. The radius will send the user-vlan to the authenticated computer.
Overall details:
Conditions:
NAS Port Type: Ethernet
Machine Groups. DOMAIN\Domain Computers

Extensible auth proto method: Microsoft: Protected EAP (PEAP)
NAS port type: ethernet
Auth method: EAP
Framed-proto: PPP
Service-type: Framed
Encryption: Enabled
...and here is added attributes that should be sent to the switch. These are configured on the radius as well, pre-defined options with custom vlan name (not vlan tag).
Tunnel-Medium-Type: 802
Tunnel-Pvt-Group-ID. MyUserVLAN
Tunnel-type: Virtual LANs (VLAN)

I hope this will help. There is a lot of information out there but not that easy to map everything together for a particular use-case.

//Rob


​
Original Message:
Sent: 03-20-2022 20:06
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi all,


Is there any one here can give some url how to configure Windows server 2012 if i want test it for wired 802.1x? Currently i'm try to replicate as JNCIE-ENT self bundle in my virtual lab. Is it same step if i follow the url below or u have another url that easy and more clear to follow.


http://elder-usr.blogspot.com/2017/04/implementing-8021x-windows-2012r2-cisco.html


Thanks and appreciate any feedback

Hi RJ,


I think no issue configuration on junos portion. I just wan to know configuring on windows server part because based on youtube url it just simple but not sure whether it just for cisco with windows server only.


Thanks
Original Message:
Sent: 04-06-2022 04:49
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi,

Not sure if this is completely what you are looking for. It depends on what you would like to authenticate.
For this example, it will auth the client certificate that has been issued via AD-enrollment.
EX-switch config:
Radius settings:
set access radius-server 10.50.0.68 secret "X"
set access radius-server 10.50.0.68 timeout 5
set access radius-server 10.50.0.68 retry 10
set access radius-server 10.50.0.68 source-address 10.17.0.90
set access profile profile1 authentication-order radius
set access profile profile1 radius authentication-server 10.50.0.68

Port and 802.1x
set interfaces interface-range User_802_1X_POC member ge-2/0/3
set interfaces interface-range User_802_1X_POC description "Enforce 802.1x machine auth"
set protocols dot1x authenticator authentication-profile-name profile1
set protocols dot1x authenticator interface User_802_1X_POC supplicant multiple
set protocols dot1x authenticator interface User_802_1X_POC retries 2
set protocols dot1x authenticator interface User_802_1X_POC quiet-period 15
set protocols dot1x authenticator interface User_802_1X_POC transmit-period 7
set protocols dot1x authenticator interface User_802_1X_POC reauthentication 7200
set protocols dot1x authenticator interface User_802_1X_POC server-timeout 5
set protocols dot1x authenticator interface User_802_1X_POC maximum-requests 3
set protocols dot1x authenticator interface User_802_1X_POC guest-vlan GUESTVLAN
set protocols dot1x authenticator interface User_802_1X_POC server-reject-vlan GUESTVLAN
set protocols dot1x authenticator interface User_802_1X_POC server-fail use-cache
set protocols dot1x authenticator interface User_802_1X_POC server-fail-voip permit

The radius used is Microsoft NPS on Win2019. The radius will send the user-vlan to the authenticated computer.
Overall details:
Conditions:
NAS Port Type: Ethernet
Machine Groups. DOMAIN\Domain Computers

Extensible auth proto method: Microsoft: Protected EAP (PEAP)
NAS port type: ethernet
Auth method: EAP
Framed-proto: PPP
Service-type: Framed
Encryption: Enabled
...and here is added attributes that should be sent to the switch. These are configured on the radius as well, pre-defined options with custom vlan name (not vlan tag).
Tunnel-Medium-Type: 802
Tunnel-Pvt-Group-ID. MyUserVLAN
Tunnel-type: Virtual LANs (VLAN)

I hope this will help. There is a lot of information out there but not that easy to map everything together for a particular use-case.

//Rob


​
Original Message:
Sent: 03-20-2022 20:06
From: Unknown User
Subject: Wired 802.1x with Windows Server 2012?

Hi all,


Is there any one here can give some url how to configure Windows server 2012 if i want test it for wired 802.1x? Currently i'm try to replicate as JNCIE-ENT self bundle in my virtual lab. Is it same step if i follow the url below or u have another url that easy and more clear to follow.


http://elder-usr.blogspot.com/2017/04/implementing-8021x-windows-2012r2-cisco.html


Thanks and appreciate any feedback