Aironet Dot1x and Active Directory

dimensyssrl · ‎06-30-2009

I'm trying to enable dot1x authentication on wireless client (windows), that connect to my wifi network through an aironet 1240AG.

I've configured Radius server into windows server, configured aironet to use this server for EAP requests, and configured client with a certificate.

But into log I always see error in authentication.

Anyone know if there is a simple guide to follow and for verify my configuration?

Thanks

Daniele

dancampb · ‎06-30-2009

You didn't mention if you were trying to use PEAP or EAP-TLS but the config on the AP is pretty much the same regardless.

http://www.cisco.com/en/US/partner/products/hw/wireless/ps4570/products_configuration_example09186a00801bd035.shtml

If you need some help with the Radius configs there are some guides that cover that setup where the wireless controller is used. You could just use the part on setting up the Radius server.

http://www.cisco.com/en/US/partner/products/ps6521/prod_configuration_examples_list.html

dimensyssrl · ‎06-30-2009

Thanks.

But this document explains how to authenticate with username/password through ACS database.

Instead, I need to authenticate users directly into Active Directory database (where I've installed a radius server integrated with AD).

Thanks

punkascii · ‎07-15-2009

Check out this article.

http://articles.techrepublic.com.com/5100-10878_11-6148579.html

Robert.N.Barrett_2 · ‎07-15-2009

Even though it's for a lab, and is outdated (talking about WEP!), I found this to be a great article that starts with the basics.

http://www.microsoft.com/downloads/details.aspx?FamilyID=0f7fa9a2-e113-415b-b2a9-b6a3d64c48f5&DisplayLang=en