Adding a Radius Server

CIS225 – Unit 4 Graded Exercise – Adding a Radius server

In this lab you will be adding a Radius server for network security that will prevent non-customers from tapping into your network by requiring network authentication through a centralized network server before a user can access your network.

For this lab you will use your assigned student number. When you see a blank in an IP address simply, write in your student number.

10._____.0.0/16

Task 1 – Setting up the network

You will be creating the network shown below in this lab.

Initially you will have three routers connected with serial ports to allow your network to communicate between routers and out to the Internet.

Connect your DSL home network to the R1 multi-user cloud and your Cable home network to your R2 multi-user cloud.

You will now add a Radius Server to your R1 router using the G0/1 port.

Go to End Devices and select a server. Drag it onto your desktop

Connect your server to the router using a copper cross-over cable.

Program your router as follows:

R1# configure terminal

R1(config)# interface G0/1

R1(config-if)# ip address 10.___.50.1 255.255.255.0

R1(config-if)# no shutdown

Program your server with the static address

Now you will program your server as a Radius Server

Open your server and go to the services tab. Select the AAA service. Turn it on.

Program your Radius server with the following information. The client IP address will be the IP from your home wireless routers in your network. You may need to check the status tab from your wireless router to verify the IP address for the wireless router. Take a screenshot.

On your wireless routers change your wireless security to WPA2 Enterprise with a RADIUS server address of 10.___.50.10. Click the save settings button at the bottom of the page.

Go to your laptop, tablet, and cellphone for your DSL and Cable networks in your wireless interface and change the authentication from WPA2-PSK to WPA2 with a username of user1 and a password or password.

Verify that you can ping the Radius server (ping 10.___.50.10) from your laptop on both networks. Take a screenshot of each.

Deliverables for Task 1

· Screenshot of working network

· Screenshot of AAA tab on your Radius server

· Screenshot of pings from your laptop to the Radius server

Task 2 – Connecting to the Internet

Connect your Tier1 Multi-user cloud (Tier1Network_OL.pkt) to the Tier1 Multi-user cloud connected to R3.

Verify that you can ping from your Smartphones to the Tier1server on 11.1.1.10. This make take several attempts before the ping is successful. Take two screenshots

Pull a webpage from your web browser on your tablets using server.com or 11.1.1.10. Take two screenshots.

Deliverables for Task 2

· Screenshot of pings from smartphones to Tier1 server

· Screenshot of web pages from tablets to server.com or 11.1.1.10