I currently have about 75 AP 350's at all of my locations. I am currently running LEAP but it is restricted to 350 nic's only. Our company has decided to buy laptops with built in NIC's (true moble) These will not work with LEAP. Will i be able to solve this problem with PEAP?
I am curious about the exact same question. What is the best authentication method to be able to support built-in wireless nic's - or wireless nic's other than Cisco's. I am also going to have to support various operating systems besides MS (like MacOS and possibly some Linux flavors).
You can have Microsoft peap supplicant or Cisco Peap supplicant .
If you have windows 2000 OS , than if you load service pack3 , Microsoft peap supplicant is installed . On top of this if you install ACU 5.05 microsoft supplicant wil be overwritten by Cisco supplicant .
In case of XP , if you install service pack 1 , it will install microsoft peap supplicant , if you install ACU 5.05 it will be overwriteen by Cisco Peap supplicant .
Microsoft peap supplicant send eap-Chap in EAP tunnel and Cisco support EAP-GTC in eap tunnel .
So if you have non cisco card , depending on the radius server databse you use will decide if peap will work or no .
At present ACS 3.1 supports EAP-GTC so it will not interoperate with Microsoft supllicant . In later release ACS will have support for EAP-Chap so
that you can use 3rd party card with Microsoft supplicant and ACS3.2
Meeting house company has supplicant for eap tls on windows 2000 but I am not sure for PEAP . Please chech meetinghouse site for this .
How do you get windows to authenticate the PEAP certificate before login to the machine? I am able to auth peap if i log into a cached account. But that does me no good when i am trying to login to a domain. Any suggestions anyone?