06-01-2007 02:35 AM - edited 03-10-2019 03:11 PM
hi
Is there any type of eap protocol in ACS 4.1 works without certificates and compatible with LDAP database.
thanks
Solved! Go to Solution.
06-07-2007 08:54 AM
Yes Go for the card manufacturer's supplicant, they generally have the option for EAP-GTC.
If your issue is resolved, please mark this thread as resolved, so that others can benefit from it.
Thanks,
Prem
06-01-2007 10:48 AM
PEAP-GTC needs server-side certs only.
EAPFAST-GTC should work without certs at all.
Shelly
06-01-2007 04:10 PM
Hi,
PEAP(EAP-GTC) works with LDAP, compatibility table,
Configure ACS for PEAP authentication.
And when it comes to configure client, generally I have seen with Intel clients, you have an option to uncheck "Validate Server Certificate" under "PEAP Server" section if you do not want to install CA root certificate on every client, after you have selected Authentication type as PEAP and authentication protocol as GTC under "PEAP User" section.
Regards,
Prem
06-07-2007 06:10 AM
hi
As you explained eap-gtc is suitable for us. Can we use eap-gtc in windows xp without cisco wireless client adapter?
i installed cisco wireless client adapter software but still there isn't GTC protocol under PEAP properties.
thanks
06-07-2007 06:22 AM
Hi,
this is for wireless authentication right?
In that case you can use the default wireless utility that it comes with, i.e. with intel card, intel utility etc. They do have an option for GTC.
Regards,
Prem
06-07-2007 06:36 AM
i have an intel card and in peap properties section there are only two auth type mschapv2 and smartcard or certificate. no gtc.
06-07-2007 06:40 AM
What is the version of Intel Supplicant?
06-07-2007 06:43 AM
intel pro wireless 2200BG
06-07-2007 06:53 AM
No not the Intel card model. I guess you do not have Intel supplicant. Search for Intel PRoset/wireless software on Google.
Regards,
Prem
06-07-2007 07:53 AM
thanks a lot.
it is working with supplicant software.
must i install supplicant for non-cisco wireless cards to use eap-gtc?
06-07-2007 08:54 AM
Yes Go for the card manufacturer's supplicant, they generally have the option for EAP-GTC.
If your issue is resolved, please mark this thread as resolved, so that others can benefit from it.
Thanks,
Prem
06-10-2007 06:55 AM
i want to ask a final question
why is PEAP-MSCHAPv2 incompatible with LDAP?
06-10-2007 11:32 AM
Hi,
Only answer would be, thats the way LDAP works, it cannot understand PEAP-MSCHAPv2
Regards,
Prem
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide