Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

1240 AG using WPA and RADIUS

I'm really stumped here. I am trying to set up the access point to authenticate users with RADIUS. That part seems file. The client can authenticate with the access point but then it can't get an address. The event log says Authentication Failed.

I checked the logs on IAS and the username/password are validating, I just can't seem to get any traffic through.

Any ideas out there?

6 REPLIES
New Member

Re: 1240 AG using WPA and RADIUS

hi,

at first i think you have tested all with open network and no radius. so you are sure that the DHCP and the APs are working fine and you have no errors in your network config.

than you should try it with radius and WPA.

are you using Cisco ACS or Freeradius, others?

~elkono

Re: 1240 AG using WPA and RADIUS

Presumably you're using PEAP? If so, have you got a certificate installed or are you using a self-signed cert? If so, have you installed the corresponding root cert on the clients?

New Member

Re: 1240 AG using WPA and RADIUS

I haven't done anything with certificates - I've never set up a WPA/RADIUS wireless network before.

I was hoping to have a configuration where the computer can either authenticate with it's computer domain account or the user can enter their username/password that's valid on the domain.

The way I'm testing it now I have Windows (the client) configurated to authenticate using PEAP, it doesn't validate the server certificate, and it authenticated using MSCHAPv2. On the AP I have the AP Authentication method for the SSID set to MSCHAPv2.

Is this going to require installing certificates on the clients or is there a way to do this just with User or Computer accounts in AD?

New Member

Re: 1240 AG using WPA and RADIUS

I'll give that a try, it's Microsoft Internet Authentication Service.

Re: 1240 AG using WPA and RADIUS

You might want to take a look at the Microsoft WLAN PEAP Toolkit, available from here:

http://go.microsoft.com/fwlink/?linkid=23481

Lots of useful information and some excellent scripts for configuring IAS, Windows CA, etc.

New Member

Re: 1240 AG using WPA and RADIUS

hi,

i found in my chaos of files a sample config from an AP with WPA/TKIP.

i'm not sure if its workin but you can try it.

see attached files.

~elkono

563
Views
0
Helpful
6
Replies