I am trying 802.1x authentication (PEAP with EAP-MSCHAP V2) in my domain. I have installed IAS RADIUS (Windows Server 2003) for wire authentication and a cisco 3550 (c3550-ipservicesk9-mz.122-50.SE3.bin) as authenticator with dynamic VLANs.
I have set ssoMode as preLogon and authMode as userOnly, but my experience is that it works only with cached credentials.
When a new user (using vista) login to the domain gives an error “there are currently no logon sever available”.
Somenone have the same problem?
Which is the best config on this switch to perform this task?
Note: 802.1x authentication works if the user has Cached Credentials (must have domain login success without 802.1x authentication) or without the
domain (login local and than 802.1x authentication).
Thanks in advance.