Presumably you're using PEAP? If so, have you got a certificate installed or are you using a self-signed cert? If so, have you installed the corresponding root cert on the clients?

I haven't done anything with certificates - I've never set up a WPA/RADIUS wireless network before.

I was hoping to have a configuration where the computer can either authenticate with it's computer domain account or the user can enter their username/password that's valid on the domain.

The way I'm testing it now I have Windows (the client) configurated to authenticate using PEAP, it doesn't validate the server certificate, and it authenticated using MSCHAPv2. On the AP I have the AP Authentication method for the SSID set to MSCHAPv2.

Is this going to require installing certificates on the clients or is there a way to do this just with User or Computer accounts in AD?

I'll give that a try, it's Microsoft Internet Authentication Service.

You might want to take a look at the Microsoft WLAN PEAP Toolkit, available from here:

http://go.microsoft.com/fwlink/?linkid=23481

Lots of useful information and some excellent scripts for configuring IAS, Windows CA, etc.

hi,

i found in my chaos of files a sample config from an AP with WPA/TKIP.

i'm not sure if its workin but you can try it.

see attached files.

~elkono