Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

PEAP problem

Folks,

I?m configuring PEAP with AP1131, ACS 4.0 and AD ( Windows 2000 ).

I used the follow doc to do this:

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00801df0e4.shtml#acs-1

Please, see the logs ( ACS, AP )into attached file.

I perceived that the ACS certificate doesn?t have the EKU field. How I fix it?

tks

1 REPLY
Silver

Re: PEAP problem

A Windows MS-PEAP supplicant upgraded to XP SP2 is unable successfully to reauthenticate to an ACS 3.2 server.

This behavior is independent of the client adapter hardware.If the client is downgraded to XP SP1, it will reauthenticate

with no problem; if the SP2 client authenticates to IAS instead of ACS, it will reauthenticate with no problem.

At the time that the reauthentication from the MS-PEAP XP SP2 client fails, ACS will log a "NAS duplicated authentication

attempt" error.This behavior is independent of the software running on the access point.

156
Views
0
Helpful
1
Replies
CreatePlease to create content