Is UAC able to support linux clients?

[michael.saw_]

Hi,

Is UAC able to support linux clients?

Anyone can share some kb or links on how UAC is able to support linux clients?

[Screenie_]

http://www.juniper.net/techpubs/software/uac/4.1xrelnotes/j-ic-uac-4.1R1-b17057-supportedplatforms.p... ?

[michael.saw_]

Hi Screenie,

Thanks for the info.
We read on UAC Agentless on the whitepaper below.

Here's the whitepaper that we were looking through as well:
http://www.juniper.net/us/en/local/pdf/whitepapers/2000309-en.pdf

Is it recommended/feasible to use the native 802.1x supplicant in Redhat in this case?
https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Deployment_Guide/sec-...

[kalagesan_]

Hi Michael,

Layer 2 dot1x authentication is not supported  in Linux , only Layer 3 connection is supported using the L3 Java Based Persistent Client.

Hence using  the native 802.1x supplicant in Redhat is not recommended.

Hope this clarifies your query, 

Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!

Regards,
Kannan

[kalagesan_]

Hi Michael,

Layer 2 dot1x authentication is not supported in Linux , only Layer 3 connection is supported using the L3 Java Based Persistent Client.

Hence using the native 802.1x supplicant in Redhat is not recommended.

Hope this clarifies your query,

Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!
Regards,
Kannan

[michael.saw_]

Hi Kannan,

Thanks!

Can we know why Redhat 802.1x supplicant is not recommended?

What are the L3 Java Based Persistent Client would be recommended for UAC?

[Raveen_]

Hi

UAC appliance is a Radius server and is compliant with radius rfc.

As long as supplicant follows EAP and RADIUS RFCs, UAC would honour the radius request and it does not care about the OS platform used.

However, host checking is not possible unless you use Odyssey or Pulse, which is not supported in Linux.

In short, for your use-case you could use any supplicant on Linux that follows EAP and Radius RFCs for your dot1x authentication.

Hope this clarifies!

Note: If this answers your question, you could mark this as accepted solution that way it would help others as well.

Regards,

Raveen

[michael.saw_]

Hi Raveen,

Noted. We would skip Host checking on Linux.

What are the linux 802.1x clients that are supported with UAC on 802.1x?
Is there any links on this?

[Raveen_ · Accepted solution]

Hi Michael,

In my earlier reply I stated that UAC supports any supplicant that follows EAP and RADIUS RFCs.

We do not test or qualify any linux based supplicants, hence you would not see them in supported platform document.

However, I could find a list of supplicants tested by Juniper EX team.

Refer KB19654:

http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB19654&max-yv=1&enablesaml=yes

You could try with open1x and Xsupplicant for linux platform.

Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!

Regards,

Raveen