cancel
Showing results for 
Search instead for 
Did you mean: 

Is UAC able to support linux clients?

SOLVED
Highlighted
Regular Contributor

Is UAC able to support linux clients?

Hi,

 

Is UAC able to support linux clients?

Anyone can share some kb or links on how UAC is able to support linux clients?

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Regular Contributor

Re: Is UAC able to support linux clients?

Hi Michael,

 

In my earlier reply I stated that UAC supports any supplicant that follows EAP and RADIUS RFCs.

We do not test or qualify any linux based supplicants, hence you would not see them in supported platform document.

 

However, I could find a list of supplicants tested by Juniper EX team.

Refer KB19654:

 

http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB19654&max-yv=1&enablesaml=yes

 

You could try with open1x and Xsupplicant for linux platform.

 

Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!

 

Regards,

Raveen

 

 

 

 

View solution in original post

8 REPLIES 8
Highlighted
Contributor

Re: Is UAC able to support linux clients?

Highlighted
Regular Contributor

Re: Is UAC able to support linux clients?

Hi Screenie,

Thanks for the info.
We read on UAC Agentless on the whitepaper below.

Here's the whitepaper that we were looking through as well:
http://www.juniper.net/us/en/local/pdf/whitepapers/2000309-en.pdf

Is it recommended/feasible to use the native 802.1x supplicant in Redhat in this case?
https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Deployment_Guide/sec-...
Highlighted
Super Contributor

Re: Is UAC able to support linux clients?

Hi Michael,

 

Layer 2 dot1x authentication is not supported  in Linux , only Layer 3 connection is supported using the L3 Java Based Persistent Client.

 

Hence using  the native 802.1x supplicant in Redhat is not recommended.

 

Hope this clarifies your query, 

 

Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!

Regards,
Kannan

 

 

 

Highlighted
Super Contributor

Re: Is UAC able to support linux clients?

Hi Michael,

Layer 2 dot1x authentication is not supported in Linux , only Layer 3 connection is supported using the L3 Java Based Persistent Client.

Hence using the native 802.1x supplicant in Redhat is not recommended.

Hope this clarifies your query,

Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!
Regards,
Kannan

 

 

Highlighted
Regular Contributor

Re: Is UAC able to support linux clients?

Hi Kannan,

Thanks!

Can we know why Redhat 802.1x supplicant is not recommended?


What are the L3 Java Based Persistent Client would be recommended for UAC?

Highlighted
Regular Contributor

Re: Is UAC able to support linux clients?

Hi

 

UAC appliance is a Radius server and is compliant with radius rfc.

As long as supplicant follows EAP and RADIUS RFCs, UAC would honour the radius request and it does not care about the OS platform used.

 

However, host checking is not possible unless you use Odyssey or Pulse, which is not supported in Linux.

 

In short, for your use-case you could use any supplicant on Linux that follows EAP and Radius RFCs for your dot1x authentication.

 

Hope this clarifies!

 

Note: If this answers your question, you could mark this as accepted solution that way it would help others as well.

 

Regards,

Raveen

Highlighted
Regular Contributor

Re: Is UAC able to support linux clients?

Hi Raveen,

Noted. We would skip Host checking on Linux.

What are the linux 802.1x clients that are supported with UAC on 802.1x?
Is there any links on this?
Highlighted
Regular Contributor

Re: Is UAC able to support linux clients?

Hi Michael,

 

In my earlier reply I stated that UAC supports any supplicant that follows EAP and RADIUS RFCs.

We do not test or qualify any linux based supplicants, hence you would not see them in supported platform document.

 

However, I could find a list of supplicants tested by Juniper EX team.

Refer KB19654:

 

http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB19654&max-yv=1&enablesaml=yes

 

You could try with open1x and Xsupplicant for linux platform.

 

Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!

 

Regards,

Raveen

 

 

 

 

View solution in original post