Single sign on wich 802.1x using MS IAS

[joao]

Hi!

can i do a single sign on using 802.1x authentication and dynamic vlans? Im using MS IAS Radius server an a WIndows XP client.

[jafrazie]

Yes, and yes ;-).

RADIUS Attributes [64], [65], and [81] are what you need for VLAN-Assignment.

Let me know if I can help,

[joao]

OK,

but i can't understand how i do the single sign on?

[jafrazie]

This should help:

http://www.microsoft.com/downloads/details.aspx?familyid=05951071-6b20-4cef-9939-47c397ffd3dd&displaylang=en

In summary, you need machine-authentication, and the native supplicant will re-use windows credentials at login, link-up, etc. without prompting the use again.

[joao]

Sorry but i cant do the single sign on. I have to use some special auth protocol? I only connect in to the network if first i log in cache on machine, but if i never log in machine before i can't logon. Sorry for my bad english.