How to find out who is trying to connect to my radius client

Discussion in 'Security' started by Exterous, Oct 30, 2012.

  1. Exterous

    Exterous Lifer

    Joined:
    Jun 20, 2006
    Messages:
    14,164
    Likes Received:
    50
    We have a radius client setup and something is trying to constantly connect to it (and failing for improper authentication). Is there any good way to narrow down the location of the device other than walking by everyone's desk and asking them?

    Its not our laptops as group policy would handle authentication for those. It was something left here overnight
     
  2. seepy83

    seepy83 Platinum Member

    Joined:
    Nov 12, 2003
    Messages:
    2,132
    Likes Received:
    0
    If you know the IP, I would look in DHCP to find out its MAC address. If you have managed switches, you should be able to look through the MAC address table and find out what port it's connected to. Trace the port back to a jack # and go from there.
     
    #2 seepy83, Oct 31, 2012
    Last edited: Oct 31, 2012
  3. Exterous

    Exterous Lifer

    Joined:
    Jun 20, 2006
    Messages:
    14,164
    Likes Received:
    50
    Eh - sorry it was trying to authenticate to our secured Wifi. Whatever it was stopped. I had resorted to 'door to door' and while I didn't find it maybe the word got out and someone realized they had tried to connect to our secure network instead of the guest on...or something....
     
  4. SagaLore

    SagaLore Elite Member

    Joined:
    Dec 18, 2001
    Messages:
    24,002
    Likes Received:
    3
    Let them connect and run a packet capture on everything they do. ;)
     
Loading...