Recent changes to Home

Discussion for Home page

Oliver — Wed, 20 Dec 2023 12:56:38 -0000

Hi Mikhail,
Probably a low possibility you see this, but i thought i would try anyway.
I was wondering if the source code is available anywhere?

Im looking to make something similar to this for my next project.
Have not really done anything like this before, and sorta new to this whole NPS thing.
So I would love to be able to take inspiration from how you made this, if possible.

Home modified by Mikhail Monko

Mikhail Monko — Mon, 05 Oct 2020 14:48:04 -0000

--- v4
+++ v5
@@ -7,8 +7,7 @@
 We developed an extension for the Microsoft NPS that adds support of MAC-address authentication bypass. From now on you can authenticate any all devices in your network and what is more important - put them into any vlan you like depending on a device type.
 How does it work?
 You don't need much effort to integrate MAB plugin to NPS. Just simply install it on servers with NPS and create a list of authorized mac-addresses. If an end device supports 802.1x standard it will be authenticated by your NPS policy. If mac-address authentication bypass is used then the connection request will be handled by the extension plugin.
-Below is a drawing showing a network that uses Microsoft Network Policy Server and Mac-address authentication bypass plugin. Devices supporting 802.1x like users' machines are being authenticated by NPS and other devices are authenticated using MAB mechanism with a help of the MAB plugin.
-
+
 MAB plugin can perform one of the following actions for a host:
 1) permit access for a certain mac-address to the network;
 2) permit access and put a host to a voice vlan which is configured on a network switch or is specified in a profile (this option is for ip phones);

Discussion for Home page

Adam Reid — Fri, 17 Nov 2017 16:51:47 -0000

Hi Mikhail

I have NPS installed onto a Server 2012R2 VM. Unfortunately after installing the NPS MAB plugin, I am unable to start the NetWork Policy Server service.

The service immediately terminates after stating with the following error: The server threw an exception.

This is shown as a event ID 7023 in the sytem event log.

I am not sure how to view the actual exception. Do you have any troubleshooting advice?

Home modified by Mikhail Monko

Mikhail Monko — Fri, 01 Jul 2016 07:59:12 -0000

--- v3
+++ v4
@@ -19,7 +19,7 @@

 Below is a link to configuration example:
 [Configuration example]
-
+[Troubleshooting]

 [[members limit=20]]
 [[download_button]]

Discussion for Home page

Mikhail Monko — Sat, 11 Jun 2016 08:36:30 -0000

Please post any remarks or suggestions regarding my plugin.

Home modified by Mikhail Monko

Mikhail Monko — Sat, 11 Jun 2016 08:35:33 -0000

--- v2
+++ v3
@@ -1,9 +1,25 @@
-Welcome to your wiki!
+Network Security
+Most of companies want to protect their internal wired and wireless networks and authenticate all connected devices including user laptops, ip phones, printers and so on and so far.
+Companies of different sizes from small firms to large enterprises use Microsoft Network Policy Servers (NPS) for connections authentication and authorization.
+Unfortunately it has one big disadvantage - no explicit support for mac-address-based authentication if connected device (like a printer or an ip phone) doesn't support 802.1x authentication.
+ 
+NPS plugin for MAC-address authentication support
+We developed an extension for the Microsoft NPS that adds support of MAC-address authentication bypass. From now on you can authenticate any all devices in your network and what is more important - put them into any vlan you like depending on a device type.
+How does it work?
+You don't need much effort to integrate MAB plugin to NPS. Just simply install it on servers with NPS and create a list of authorized mac-addresses. If an end device supports 802.1x standard it will be authenticated by your NPS policy. If mac-address authentication bypass is used then the connection request will be handled by the extension plugin.
+Below is a drawing showing a network that uses Microsoft Network Policy Server and Mac-address authentication bypass plugin. Devices supporting 802.1x like users' machines are being authenticated by NPS and other devices are authenticated using MAB mechanism with a help of the MAB plugin.
+
+MAB plugin can perform one of the following actions for a host:
+1) permit access for a certain mac-address to the network;
+2) permit access and put a host to a voice vlan which is configured on a network switch or is specified in a profile (this option is for ip phones);
+3) permit access and put a host to a specified data vlan.
+The plugin was made to support switches of Cisco Systems. But we are planning to adapt it to equipment of other vendors.

+ 
+
+Below is a link to configuration example:
 [Configuration example]
-This is the default page, edit it as you see fit. To add a new page simply reference it within brackets, e.g.: [SamplePage].

-The wiki uses [Markdown](/p/nps-mab-plugin/wiki/markdown_syntax/) syntax.

 [[members limit=20]]
 [[download_button]]

Home modified by Mikhail Monko

Mikhail Monko — Sat, 11 Jun 2016 08:32:13 -0000

--- v1
+++ v2
@@ -1,5 +1,6 @@
 Welcome to your wiki!

+[Configuration example]
 This is the default page, edit it as you see fit. To add a new page simply reference it within brackets, e.g.: [SamplePage].

 The wiki uses [Markdown](/p/nps-mab-plugin/wiki/markdown_syntax/) syntax.

Home modified by Mikhail Monko

Mikhail Monko — Sat, 11 Jun 2016 08:05:41 -0000

Welcome to your wiki!

This is the default page, edit it as you see fit. To add a new page simply reference it within brackets, e.g.: [SamplePage].

The wiki uses Markdown syntax.

Project Members:

Mikhail Monko (admin)