authentication with Active Directory

gustavo.pena — Sun, 10 Mar 2019 22:38:47 GMT

Hi!

I'm using PEAP authentication with the Active Directory. I have Cisco Secure ACS 4 and Cisco Aironet 1230 APs. The users use their Windows account to log in, but when I change the password in the AD the password doesnt change in the Secure. Anybody knows if if this possible and how can I do these passwords be updated in the Secure database?

]Thanks

Re: authentication with Active Directory

naveen999 — Fri, 08 Feb 2008 10:26:13 GMT

4.3 ACS CONFIGURATION STEPS:

The new window will be come and click on next

Select the ACS admin from web browser

Click on administration control:-

Add administrator and grant all permissions with account never expire and submit it

In network configuration add AAA client:-

Give the IP address of AAA client (ACCESS POINT) with the secret shared key between AAA and ACS

Give the Ip address, shared Key and encryption key (length is 26bits).

1. And select the RADIUS (Cisco Aironet) in the field authenticates using.

1. Select the Global Authentication setup for LEAP (LIEGHTWIEGHT EXTENSIBLE AUTHENTICATION PROTOCAL)

2. Select system configuration and select the leap, allow eap-mds.

3. Select the field MS-CHAP version 1 and 2.

4. Select the external user database for windows database (Active Directory users)

1. Select the external user database.

2. In that select the file windows database

In external user database under database group mapping:-windows database -

Select the domain to be mapped which contain database.

Add mapping:-

3. Select the field administrators in external database

Configuration steps for access point:

1. Select the static wep key and give the key length should be 128 bits only.

2. Give the IP address and shared secret.

3. Configure ssid&vlan

4. Configure server manager

Configure SSID

CONFIGURE THE ENCRYPTION MANAGER IN AP

CONFIGURE SERVER MANAGER IN AP

THANK

Re: authentication with Active Directory

tbrinkma — Fri, 08 Feb 2008 12:38:03 GMT

I think it will be easier to configure a Radius server. As what I have seen Radius works better.

topic authentication with Active Directory in Network Access Control

authentication with Active Directory

Re: authentication with Active Directory

Re: authentication with Active Directory