Security

last person joined: 15 hours ago 

Enterprise security using ClearPass Policy Management, ClearPass Security Exchange, IntroSpect, VIA, 360 Security Exchange, Extensions and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

RADSEC over IPv6 - possible?

  • 1.  RADSEC over IPv6 - possible?

    Posted Dec 02, 2019 08:09 AM

    Running CPPM 6.8.3 trying to establish a RADSEC link to a remote box runnig radsecproxy 1.8.1 When creating a RADIUS proxy host am trying to specify an IPv6 address. Irrespective of whether I wrap []'s round the address or not I get an invalid address error. CPPM set up with IPv4 and IPv6 addresses.

     

    So, can you specify an IPv6 address for RADSEC?

    if yes, could set up a DNS entry wihy only an AAAA record in it to use I guess.

    If not, in CPPM 6.8.4 ?

     

     



  • 2.  RE: RADSEC over IPv6 - possible?

    Posted Dec 02, 2019 08:27 AM
    RADIUS with IPv6 is not supported today.


  • 3.  RE: RADSEC over IPv6 - possible?

    Posted Dec 02, 2019 08:59 AM
    :-( 6.8.4 ?


  • 4.  RE: RADSEC over IPv6 - possible?

    Posted Dec 02, 2019 11:37 AM

    We do not release major features in patches.



  • 5.  RE: RADSEC over IPv6 - possible?

    Posted Dec 09, 2019 09:11 AM

    Actually RADSEC over IPv6 does work. Whats broken is inputting an IPv6 numeric address. If you specify a DNS entry with an AAAA record the tunnel is established.

     

    now have 

     

    cppm ( 6.8.3) radsec proxy -> Ubuntu 16.04 ( radsecproxy 1.8.1) -> UoY T1 FreeRadius servers 

     

    Happy bunny

    A



  • 6.  RE: RADSEC over IPv6 - possible?

    Posted Dec 09, 2019 01:06 PM

    It is not supported. Please do not use it.