MS NAP with Cisco switch 3750

Ivaylo Terziyski — Mon, 11 Mar 2019 00:55:16 GMT

Hi,

I am trying to implement 802.1X authentication on MS NAP (Windows 2008 r2) with access switch WS-C3750-48TS-E (C3750 Software (C3750-IPSERVICES-M), Version 12.2(50)SE3).

I am using dynamic VLAN assignments, like guest VLAN, restricted(critical) VLAN, unauthorized VLAN for wired clients.This works flawlessly.

I want to use only one SSID for wireless clients and the same dynamic VLAN assignments. Is it possible to use "authentication host-mode multi-auth" mode for configuring switch port with connected Cisco AP 1242G on it ?

Example configuration:

description Cisco 1242G AP

switchport access vlan 2223

switchport mode access

switchport voice vlan 998

authentication event fail retry 1 action authorize vlan 2226

authentication event server dead action authorize vlan 2227

authentication event no-response action authorize vlan 2224

authentication event server alive action reinitialize

authentication host-mode multi-auth

authentication port-control auto

authentication periodic

authentication timer reauthenticate 300

authentication violation protect

mab

dot1x pae authenticator

dot1x timeout quiet-period 10

dot1x timeout tx-period 1

dot1x max-reauth-req 1

spanning-tree portfast

spanning-tree bpduguard enable

Do I have to enable 802.1X auth on the AP or it has to be pass-through for wireless clients ? Is this port configuration consistent ?

As far I managed to authenticate the AP via MAB as a RADIUS client, but no wireless clients has been authenticated.

Any help would be appreciated.

Thank you in advance !

Re: MS NAP with Cisco switch 3750

Ivaylo Terziyski — Wed, 06 Apr 2011 21:13:18 GMT

Hi,

hope I find you well. Can we proceed with the issue I had described ?

Regards.

Re: MS NAP with Cisco switch 3750

Ivaylo Terziyski — Thu, 05 May 2011 10:05:33 GMT

At least could anybody answer if the configuration on Cisco switch port is correct for connectiong Cisco AP 1242G to it.

Should the port be configured as access port or it should be trunk port ?

topic MS NAP with Cisco switch 3750 in Network Access Control

MS NAP with Cisco switch 3750

Re: MS NAP with Cisco switch 3750

Re: MS NAP with Cisco switch 3750