[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 276
  • Last Modified:

Migrating to Radius

Hi,

I have a Cisco Pix 515 with 1700 users for vpn clients in our local user database, and i want do migrate this database to freeradius, but i dont have these passwords in clear text, have a solution for me?

I tried to decode these passwords without sucess.
0
padronish
Asked:
padronish
  • 3
  • 2
1 Solution
 
Jody LemoineNetwork ArchitectCommented:
What version of the PIX software are you running on that unit?
0
 
padronishAuthor Commented:
Cisco PIX Security Appliance Software Version 8.0(4)
Device Manager Version 6.1(5)
0
 
Jody LemoineNetwork ArchitectCommented:
Unfortunately, with PIX passwords the best you're going to be able to do is run them through a brute-force password cracker...  which is extremely time consuming.  If you're interested in giving it a try anyway, you can look into using a combination of the "John the Ripper" dictionary/brute-force password cracking tool and the pix_crack tool.

http://www.openwall.com/john/

http://www.hsc.fr/ressources/breves/pix_crack.html

Personally, I would load the users into the FreeRADIUS server with default password and provide a mechanism for them to change their passwords on it before the cutover time.  It will be much easier.
0
 
padronishAuthor Commented:
It didn't help too much...  

There's no option to copy the users password(base64-md5 encrypted) from PIX to FREERADIUS, and tell to PIX find them encrypted, not clear text? or a kind of base64-md5 converter to PAP, MSCHAP or anything else to store on FREERADIUS??

Thanks a lot.
0
 
Jody LemoineNetwork ArchitectCommented:
If you convert the base64 entries in the PIX configuration to MD5 hashes, you should be able to store those in the database and have FreeRADIUS work against them directly.  I haven't tested it, but it's worth a try.
0

Featured Post

Automating Your MSP Business

The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now