https://vlan51.com/tags/nps/Recent content in Nps on vlan51Hugoen-gbMon, 01 Jan 2024 00:00:00 +0000https://vlan51.com/aruba-provision/802-1x-port-authentication/Mon, 01 Jan 2024 00:00:00 +0000https://vlan51.com/aruba-provision/802-1x-port-authentication/<p>How to configure 802.1x port authentication on HPE Aruba ArubaOS-Switch, with MAC authentication for devices that do not support 802.1x (such as printers), and LLDP-MED bypass for VoIP phones.</p> <p>This guide covers the switch configuration and the Microsoft NPS (Network Policy Server) setup for automatic EAP-RADIUS authentication of PCs, MAC authentication for printers, and voice VLAN bypass for Avaya handsets.</p> <p><strong>Prerequisites:</strong> Microsoft NPS installed and registered in Active Directory, a PKI in place with client certificates deployed to machines you want to authenticate via 802.1x.</p>https://vlan51.com/aruba-provision/radius-login/Mon, 01 Jan 2024 00:00:00 +0000https://vlan51.com/aruba-provision/radius-login/<p>How to configure RADIUS authentication for switch management logins on HPE Aruba ArubaOS-Switch using Microsoft NPS, allowing administrators to log in with Active Directory credentials.</p> <h2 id="switch-configuration">Switch configuration <a class="anchor" href="#switch-configuration" aria-label="Link to this section">#</a></h2> <div class="code"> <div class="code-bar"><span>cli</span><button class="copy" type="button" aria-label="Copy to clipboard">Copy</button></div><pre><code>radius-server host 192.168.50.80 key reallysecretkey aaa authentication login privilege-mode aaa authentication console login radius local aaa authentication console enable radius local aaa authentication telnet login radius local aaa authentication telnet enable radius local aaa authentication web login radius local aaa authentication web enable radius local aaa authentication ssh login radius local aaa authentication ssh enable radius local</code></pre></div> <p>The <code>local</code> fallback ensures you can still log in if the RADIUS server is unreachable. Do not remove it.</p>https://vlan51.com/comware-v7/radius-login/Mon, 01 Jan 2024 00:00:00 +0000https://vlan51.com/comware-v7/radius-login/<p>How to configure RADIUS management login on HPE Comware v7 using Microsoft NPS.</p> <blockquote> <p>This covers the Comware configuration only. For the NPS server setup, see the <a href="https://vlan51.com/aruba-provision/radius-login">ArubaOS-Switch RADIUS login guide</a> which covers the NPS side in full.</p> </blockquote> <h2 id="configuration">Configuration <a class="anchor" href="#configuration" aria-label="Link to this section">#</a></h2> <p>Create a RADIUS scheme:</p> <div class="code"> <div class="code-bar"><span>cli</span><button class="copy" type="button" aria-label="Copy to clipboard">Copy</button></div><pre><code>radius scheme nps primary authentication x.x.x.x primary accounting x.x.x.x key authentication simple reallysecurekey key accounting simple reallysecurekey user-name-format without-domain</code></pre></div> <p>Apply to the default domain:</p>