Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
295
Views
0
Helpful
3
Replies

802.1x monitoring

jms112080
Level 1
Level 1

‎02-26-2007 02:45 PM - edited ‎03-09-2019 05:28 PM

I am using IAS to authenticate the machines on my network. What is the best way to monitor any failed authentication attempts at the switches?

Labels:
0 Helpful
3 Replies 3

acomiskey
Level 10
Level 10

‎02-26-2007 06:20 PM

You can alway check the "System" logs in the event viewer of your IAS machine.

0 Helpful

jms112080
Level 1
Level 1
In response to acomiskey

‎02-27-2007 05:59 AM

We use the IAS logs, but when using machine certs as we do for authentication, if a "rogue" machine with no cert plugs in and fails, I have no way to know it ever happened. There is no log entry in IAS when a machine doesn't send some kind of authentication attempt.

0 Helpful

acomiskey
Level 10
Level 10
In response to jms112080

‎02-27-2007 06:17 AM

What about snmp traps?

Try IEEE8021-PAE-MIB or CISCO-PAE-MIB.

0 Helpful
Customers Also Viewed These Support Documents