Re: RADIUS Products

["Craig T. Hancock" <chancock () ND EDU>]

Hart, Lee Anne wrote:

> Hello all,
>
> Does anyone have experience using any of the following RADIUS products:
> Microsoft Windows Server 2003 Internet Authentication Service (IAS),
> Novell's BoarderManager, or Steel Belted Radius? We are researching
> different RADIUS products to use with our Nortel network infrastructure
> equipment, but I expect our need will grow in the near future as we
> implement wireless and VPNs. Any information and experiences you have
> are appreciated. Thanks,
>
> Lee Anne Hart
>
> **********
> Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
> http://www.educause.edu/groups/.
Hello Ms Hart,

Here at University of Notre Dame we currently have deployed Microsoft
IAS, for 802.1X project (wireless & wired).
Its been working ok for us, but as far a feature set it lacks the following.
1)  Support of multiple EAP types native support is only PEAP
2)  For PEAP-TTLS you have to MS Certificate Authority (which doesn't
work well in our environment)
3)  Still trying to verify this, but I haven't been able to segment
users by group IAS doesn't seem to
allow for any filters. For example if I wanted authenticated users to be
authorized to a certain network
if they belong to an AD Group
4) Proxying to other Radius systems has been a little unstable not sure
if its the remote Radius
System or IAS.

Besides from those comments above configuration is very straight
forward. I can't speak
on Novell's BoarderManager, but I hear very good things about Steel
Belted Radius, but
its kinda of pricy.

We plan to migrate IAS functionaility to our production radius system
using freeradius. The goal
is to have all network based authtentication (VPN, 8021X, dialup) use it.

Please let me know if you have any further questions

--
******************************************************
Craig T. Hancock
Systems Engineer, Infrastructure Services
Office of Information Technology
University of Notre Dame
******************************************************

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.