ACS or Windows?

[bjoslin]

As unbiased as possible, is it better to use ACS or W2K Server to setup PEAP with ACU6.0 (CB20A adapter) and 1220 AP? WHY?

[ndoshi]

PEAP :

To enable PEAP on a client machine, users must install the Cisco Aironet Client Utility version 5.05.001, connect to a Cisco Aironet Access Point running version 11.23T or later, and be authenticated by a Cisco Secure ACS Version 3.1 or greater.

To configure PEAP you need radius server which supports peap .

ACS 3.1 supports peap . Are you deciding between IAS and ACS ?

ACS supports EAP-MD5 , EAP-TLS , EAP-GTC also ACS3.2 will support

microsoft version of EAP .

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_qanda_item09186a0080124e7c.shtml

http://www.cisco.com/en/US/products/hw/wireless/ps430/products_white_paper09186a008009c8b3.shtml

http://www.cisco.com/en/US/products/hw/wireless/ps430/products_white_paper09186a00800b469f.shtml

Nilesh

[jeff.k]

What factors are important to you in determining whether to use IAS or ACS?

Functionality?

Cost?

Ease of use?

Standardization?

Flexibility?

Reliability?

Support?

A lot of things to consider, huh? If you can afford ACS, then I think you will find it'll perform the job better, is continually being developed, and is well supported. It's also fairly straight forward.

What is difficult to deal with right now is that PEAP is still fairly new and it's support is somewhat spotty. How helpful ACS or IAS will be depends to some extent on the database you're authenticating to.

Authentication Protocol-Database Compatibility

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs31/acsuser/o.htm#617

Hope this helps,

Jeff