Did you set up your IAS client ? Typically, your AP will be known to the IAS as a client, using its IP address and a shared secret.

Then on the AP, you would identify the IAS as the radius, and mention the same shared secret.

Is it what you did ?

Kind regards

Jerome

Yes, that is what i did and when i look at the Server event logs, it gives the AP IP address and says "Guest" from the domain is trying to loogin. On the PC, i enter the username and password and domain name so i am not sure why it says "Guest" is trying to login. I can post the config file, i think, if you like?

Sorry, but I still don't really get your point when you talk about "PC" and guest.

The AP is known on the IAS as a client, so the AP is not authenticated. You should see the Ap act as a relay, but it is not the one that should be authenticated.

It would be interesting to see your AP config, but also screenshot of your IAS client config and policy config... do you think you could post these ?

Tx

J

I have them zipped up and can place them somewhere for you to download. Or can email to you. Well, download it here, please let me know when you have it so i can take it down.

http://71.77.22.228:8383/APconfig.zip

Hi,

Got it, thanks.

AP config seems to be fine.

ON IAS, he reason why the user is the AP is that you do not set condition by which the user should be identified as belonging the a certain windows group, s as the client is not identified, only the AP is seen.

Why I don't clearly get is he criteria you try to set as condition, could you explain them please ? From what I see, you use virtual, which is typically smething I use to authentication ssh sessions, and ^311$ which says to process Access-Request messages sent by RADIUS clients that are computers running the Microsoft Routing and Remote Access service... a bit confusing for me... so can you explain what condition you try to set ?

Oh BTW, in you client config, the client vendor should be Cisco and not radius standard...

J

Thats good to know that the AP config looks fine. I see what you are saying about the IAS policy but i have left the IAS config "default" (as it is when i installed it). We have a Juniper firewall that worked with the IAS default config so i thought the AP would too. Also, i used "user" instead of group in this policy and i am trying to use EAP/PEAP. So, i did make another IAS policy for "wireless" and in that policy, it does not have "virtual or ^311$. I will now test this and report back. Thanks for all your help and patience!

OK, tested with me IAS policy and still get the same error. I have placed some new files at the same address but the filename is APpolicy.zip. I still dont think the AP is configured right for radius.