- Pulse Secure Community
- :
- About IPsec_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
IPsec_
Occasional Contributor
8
Posts
0
Kudos
2
Solutions
01-04-2010
04:09:AM
1) Credetial and host check result are sent in form of EAP messages over dot1x.. 2) IC takes the decision what role to be assigned 3) Then look for radius attribute policy for what VLAN to be sent for this role 4) Once VLAN is sent, switch port goes to that VLAN 5) Machine does broadcast for IP address in that VLAN. 6) Machine get IP address 7) Then gets network access.
... View more
01-04-2010
03:59:AM
IC support SRX on 10.0R1.8 but you can do Source IP enforcement and can not do IPSec enforcement. That is available from 10.1 onwards.
... View more
01-04-2010
03:54:AM
Actually it depends on how you configure host check policy on IC. There are two ways of doing it -- 1) Pre Auth host check--- In this host checking is done and depending on its result end user is prompted for credential. So first host check then credential. 2) Post Auth host check--- In this credential screen is provided first and then after successful authetication host checking is done.
... View more
01-04-2010
03:50:AM
Few questions--- 1) How fast you get IP when port is not dot1x ? 2) What is the OAC Status under Connection information ? 3) If its open and authenticated then try ipconfig/release and ipconfig/renew. Does it get you IP address immediately ?
... View more
01-04-2010
03:45:AM
With UAC firewall gives access based on combination of resource and ROLE ( not just resource). IC pushes ROLE information to the firewall along with resource subnet. So if user is in remediation vlan and for that role if access is deined , user wont be able to access resource. So firewall doesn't need to know the VLAN id or subnet of remediation VLAN. Decision is done on basis of ROLE. Thats why it is so independent of network subent or source IP .
... View more
01-04-2010
03:40:AM
IC doesn't push 200 policies to Firewall. It pushes one policy ( From/To Zone Combination). Then IC sends session information for each user logged in to firewall. For each session , this policy gets evaluated to take decision on access.
... View more
10-04-2009
03:57:AM
Hi, Create a new local auth server with store password in clear text checked. Then create local user here and attach this auth server to realm. Avaya phone should be able to authenticate.
... View more
08-04-2009
05:09:AM
Check IC side event logs. I hope you have added Cisco 2950 as radius client. Check ping reachablity between Infranet Controller and cisco switch.
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
