Security

Reply
Frequent Contributor I
Posts: 270
Registered: ‎09-24-2010

RADIUS vs LDAP

We currently use RADIUS for wireless authenication for all internal users.  We are using a Server 2008 R2 Standard VM for NPS.  However, Standard edition limits you to a maximum of 50 RADIUS clients.  We could upgrade to Enterprise which has no limit.  But not looking to perform an upgrade just yet.  So my question is, is there any disadvantages to using LDAP for client authenication (vs RADIUS)?

Guru Elite
Posts: 21,291
Registered: ‎03-29-2007

Re: RADIUS vs LDAP

No.  To do your existing encryption, you would have to install a supplicant on all of your clients.

 

If you are thinking long-term you should consider replacing your Win2K server with Clear Pass Policy Manager.  

 

It addresses the biggest concerns with Win2K server like scalability, lack of third-party vendor support, much more granular and flexibile policies, etc.  Worth a look :  http://www.arubanetworks.com/product/clearpass-policy-manager



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Aruba Employee
Posts: 664
Registered: ‎04-15-2009

Re: RADIUS vs LDAP

PEAP w/MSCHAP wont work against LDAP.  You would have to load an EAP-GTC enabled supplicant (The Windows native supplicant doesnt do EAP-GTC) on each device you wanted to allow on your network. 

 

If you have to upgrade, you might want to consider Aruba ClearPass Policy Manager.  It's a full featured RADIUS server and is (IMHO) easier to setup, configure and debug than IAS/NPS (or any other RADIUS vendor's product).

Frequent Contributor I
Posts: 270
Registered: ‎09-24-2010

Re: RADIUS vs LDAP

thanks.  I will contact our rep to check it out.  We might actually own it already..  Doesnt it tie in with Amigopod?

Aruba Employee
Posts: 664
Registered: ‎04-15-2009

Re: RADIUS vs LDAP

Amigopod is now called ClearPass Guest (CPG).  ClearPass Policy Manager (CPPM) is different, but they are from the same family.  In a few months, CPPM and CPG will merge and run on a unified platform, but today they are separate.

 

Check with you account team for more details.

Search Airheads
Showing results for 
Search instead for 
Did you mean: