802.1x NAP Enforcement

markwilson.it » Microsoft infrastructure architecture considerations: part 3 (controlling network access)

Thu, 21 Aug 2008 11:01:30 GMT

PingBack from http://www.markwilson.co.uk/blog/2008/08/microsoft-infrastructure-architecture-considerations-part-3-controlling-network-access.htm

Network Access Protection (NAP) and my switches

Network Access Protection (NAP) and my switches — Sat, 28 Jun 2008 08:10:54 GMT

PingBack from http://cnnene.net/?p=726

Network Access Protection (NAP) and my switches

PFE Ireland — Fri, 30 May 2008 01:47:05 GMT

I recently gave an overview of NAP at a Windows Server 2008 event.  For the purposes of the event

re: 802.1x NAP Enforcement

Michael Greene — Sun, 08 Oct 2006 05:00:20 GMT

Thanks Mudit. The question was based on trying to leverage NAP with workgroup machines. I have since learned that you can prompt the user for auth if the computer cannot be authenticated.

re: 802.1x NAP Enforcement

mudit.goel — Mon, 25 Sep 2006 20:57:33 GMT

Michael -

Unfortunately, 1x NAP requires an account to be authenticated before it gets access to the network. It could either be a user account or a machine account.

However, if the problem is to avoid having a separate account for every individual (since authentication is not required in your scenario), you can use guest authentication.

For instance, you can use PEAP-EAP-MSCHAPV2, enable guest account in NPS, set a basic password (could be empty if your policies permit it) and then configure each machine to use the empty username (will get mapped to guest account on the backend) and the guest account password.

However, I might be able to help you better if you can explain your scenario better. For instance, why are you using 1x when you dont require authentication on your network.

Thanks,
Mudit Goel
Development Manager,
Windows Enterprise Networking Group

re: 802.1x NAP Enforcement

Michael Greene — Tue, 19 Sep 2006 06:51:13 GMT

Would this scenario work if the NPS policy was set to enforce NAP but not to require authentication? I'm thinking in terms of machines that are not domain members.

Secure Wireless Access NOW!

Network Access Protection (NAP) — Wed, 02 Aug 2006 07:00:36 GMT

A couple weeks ago I wrote and told you about how 802.1x based Network Access Protection (NAP) works.&nbsp;This...