Quantcast
Channel: Security forum
Viewing all articles
Browse latest Browse all 12072

Expected behaviour - 802.1X - Local X Domain Users

$
0
0

I´m deploying 802.1X and i have all running OK

My DCs/ADs are NPS/RADIUS Servers

My HP Switches are configured OK

My policies are configured to allow "DOmain Users" and "Domain COmputers" to be put in the Corporate production VLAN and personal machines and not-domain-joined machines are in Guest isolated VLAN, no problem. All configs are the default at most.  I´ve created a GPO to force the wired config service to automatic start.

When I turn on a machine - What i see: machine account authentication, that´s OK, authenticated via RADIUS, using AD computer account

What´s is supposed to happen, when:

1) I power on the machine and try to login as a local user? The machine is "de-authenticated" and the machine is moved to Guest VLAN, os to remain in Corop VLAN?

2) I power on the machine, authenticate as machine, logon as a domain user account and authenticated as domain users AND after that, i do a logoff and logon as a local user? The machine is moved to the Gust VLAN on logoff of the domain user?

What i´m seeing here, is checking via HP switch comands, and after the lcoal user login, the machine is authenticated, and the expected behaviour is not this, one, it is?


Viewing all articles
Browse latest Browse all 12072

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>