I've configured for BOYD and set the time out to 7 days. As a test I've signed onto the BOYD and it works, but I then changed my password and the connection continues to work. We would like the AP to re-authenticate when someones credentials change?

[AnonymousM]

We eventually want the BOYD to not expire at all. We have a 60 day password policy which is the only time we're expecting the user to need to sign into the connection again.?

[AnonymousM]

I’ve taken a look at the radius server configuration and there doesn’t appear to be a CoA option there. Looks like it might not work that way for an External Radius server.



Mike Twist
IT Site Manager

[AnonymousM]

Sorry, i'm not very fluent with HM NG.

So you had to tell the APs where to point the .1X auth attempts. It may have been moved to External RADIUS Servers.

[AnonymousM]

I’ve found the right place then, but it’s empty. There are “no records found”?
The radius server in our configuration is on-prem and not Aerohive. Would that make a difference?



Mike Twist
IT Site Manager
Cash Processing Solutions
Mike.Twist@cps.world
+44 1256 373773
+44 7393 253473
www.cps.world


************************************************************ This e-mail is sent on behalf of Cash Processing Solutions Limited.
The e-mail and any attached files are strictly confidential and are intended solely for the attention of the addressee.
If you have received this email in error, please notify the sender and then delete the e-mail and any attachments.
Where the content of this email is personal or otherwise unconnected with Cash Processing Solutions Limited or its customers' business, Cash Processing Solutions Limited accepts no responsibility or liability for such content.
You are advised to ensure that you have adequate virus protection as Cash Processing Solutions Limited does not accept liability for any viruses.
Cash Processing Solutions Limited (company No.10069434) is registered in England with their registered office at: Matrix House, Basing View, Basingstoke, Hampshire RG21 4DZ.
************************************************************
#_Single_Disclaimer_1.0

[AnonymousM]

It's your radius configuration. You can simply edit from your Network Policy too.

If HM Classic though, it's under Advanced Configuration -> Authentication -> AAA Client Settings.

HM NG Common Objects -> Authentication -> AAA Server Settings.

[AnonymousM]

Hi Brian,

Thanks for your info. I’m struggling to find the AAA client settings. I can find the AAA server settings (configure>common objects>authentication) but we don’t have anything listed there.

Regards,
Mike


Mike Twist
IT Site Manager