About pras_2903_

pras_2903_ · ‎11-21-2012

DHCP is configured on the core switches. I tried with OS windows 7 64 bit and Windows XP 32 bit. The current deployment is that the only the UAC internal is connected to the core switches which is kept in management vlan. All the subnets are accessible to the management vlan when the 802.1x is not enabled Regards Prasanth George

pras_2903_ · ‎11-20-2012

Dear all, I am trying to deploy UAC 802.1x. I have successfly integrated active directory/Windows NT authentication realm with the company active directory. I have also added the switch to radius and created all the user roles etc based on the quick guide. The main issue i am facing is that once i assign the port under 802.1x, the PC is not able to reach any of the subnets, default gateway nor the UAC. I happen to get the APIPA ip address 169.254.x.x. if I remove my network cable and connect again.I have cross-checked the UAC quick guide and the settings. All seems ok. All the switches deployed in the company are Juniper JUNOS 10.4. UAC version is 3.1R3. I am deploying agentless authentication. Can anyone guide me what could be issue? Secondly, using web access of any switches if my port is assigned on vlan 10 initially, i get the subnet of vlan 10. However if my port is changed to vlan 20 using webaccess, my ip address still remains that of vlan 10 (no reachability anywhere), i have to enable/disable my network adaptor so as to get correct subnet. Is this normal for Juniper switches? Is there a workaround?. In cisco basically when we change a vlan, we shut and no shut in cli. I am not familiar with Juniper switches. Please guide me. Prasanth George

pras_2903_ · ‎09-29-2012

I did a trial test today testing with one user vlan and the remediation vlan. If the policies are fulfilled I am placed on correct vlan. If i do not have the required policy, I loose my network connectivity with the agent replying my security policies are not complying. I already have both the vlans mapped under the radius attributes. User profile on vlan 10 and remediation profile on vlan 210. Any help with this regard? Regards Prasanth George

pras_2903_ · ‎09-27-2012

I am to deploy IC4500 in a customer site. The plan of deployment is 802.X. I have only the IC4500 ( No infranet Controller) I have 4 user vlans. I have created on the core another vlan for remediation. So in total I got five vlans. 1) Should the IC controller internal interface connected to the core be trunk or access? Switches are all juniper 2) Since the remediation vlan is l3 interface on the core, if the user is placed on this vlan provided that he doesnot fullfil the policy, wouldn;t the user still be able to reach all the subnets? 3) Is certificate necessary in my senario 4) Cisco IP phones are deployed in the network. How can I bypass the ip phones from UAC 5) Can anyone provide step by step configuration on deploying the UAC for 802.1x. I went through documents in Juniper, unfortunately everything involves the Infranet Controller Regards Prasanth George

pras_2903_ · ‎05-01-2012

Dear Raveen, Could you also please give me a link to how to configure a cluster using an example. I am pretty new to Juniper hardware. Regards Prasanth George

pras_2903_ · ‎05-01-2012

Dear Raveen,, Thanks a lot for the info. So when i begin configuring the the first hardware for the first time then I have to choose standalone. Install the 2000 user licence and microsoft SOH. Do the needed configuration. Then begin configuring the second hardware as standalone.Then install the cluster license for it and then create the cluster. Am i right? what is the microsoft SOH license used for? If my first node fails will the licenses be automatically migrated to the second node? I am readiing about Cluster Active/ Passive and Cluster Active/Active. In my senario only Active/Passive will work right? Regards Prasanth George

pras_2903_ · ‎04-30-2012

hi, Could anyone tell me the steps how to go in installing the below device and licences IC4500 Infranet Controller 4500 Hardware Base Unit 2 IC4500-ADD-2000E Add 2000 simultaneous endpoints to IC4500 1 IC4500-SOH Adds Microsoft SOH/NAP Agent integration capabilities to the IC4500 1 IC4500-CL Allow clustering to another IC4500 for up to 5000 endpoints 1 The plan is to configure a cluster. Should both devices for the first time be configured as standalone and then later do the cluster? Regards Prasanth George

Re: UAC IC4500 802.1x

UAC IC4500 802.1x

Re: UAC deployment

UAC deployment

Re: Configuration of IC 4500

Re: Configuration of IC 4500

Configuration of IC 4500