1240 AG using WPA and RADIUS

Unanswered Question

I'm really stumped here. I am trying to set up the access point to authenticate users with RADIUS. That part seems file. The client can authenticate with the access point but then it can't get an address. The event log says Authentication Failed.


I checked the logs on IAS and the username/password are validating, I just can't seem to get any traffic through.


Any ideas out there?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
elkono200 Thu, 11/08/2007 - 23:07
User Badges:

hi,



at first i think you have tested all with open network and no radius. so you are sure that the DHCP and the APs are working fine and you have no errors in your network config.


than you should try it with radius and WPA.


are you using Cisco ACS or Freeradius, others?


~elkono

andrew.brazier@... Fri, 11/09/2007 - 06:47
User Badges:
  • Bronze, 100 points or more

Presumably you're using PEAP? If so, have you got a certificate installed or are you using a self-signed cert? If so, have you installed the corresponding root cert on the clients?

I haven't done anything with certificates - I've never set up a WPA/RADIUS wireless network before.


I was hoping to have a configuration where the computer can either authenticate with it's computer domain account or the user can enter their username/password that's valid on the domain.


The way I'm testing it now I have Windows (the client) configurated to authenticate using PEAP, it doesn't validate the server certificate, and it authenticated using MSCHAPv2. On the AP I have the AP Authentication method for the SSID set to MSCHAPv2.


Is this going to require installing certificates on the clients or is there a way to do this just with User or Computer accounts in AD?

elkono200 Fri, 11/09/2007 - 08:07
User Badges:

hi,



i found in my chaos of files a sample config from an AP with WPA/TKIP.


i'm not sure if its workin but you can try it.


see attached files.


~elkono



Attachment: 

Actions

This Discussion