topic OkThanks for the help.Is in Wireless

client authentication with AD credentials

john.wright — Mon, 05 Jul 2021 07:57:38 GMT

Is it possible to authenticate a client with just their Active Directory credentials?

Christos Stefaneskou — Thu, 05 Jun 2014 18:27:43 GMT

Hi,

Yes it is by using PEAP-MSCHAP v2.

Regards

john.wright — Thu, 05 Jun 2014 18:36:33 GMT

from what I have been reading it looks like most of the effort involves server work; is that correct?

I saw this earlier on my AP

Authentication Methods Profiles

Current Authentication Methods Profiles

	Profile Name:
	Authentication Methods:

Christos Stefaneskou — Thu, 05 Jun 2014 18:46:42 GMT

I assume that you use Autonomous AP.

Local radius on Autonomous AP supports only LEAP-EAP FAST-MAC for client authentication and you have to specify username/pass localy on AP.

If you want to use AD you have to setup an external radius server like ACS,ISE or MS IAS.

Most part of config is done on the external radius server.

Hope this helps.

Regards.

john.wright — Thu, 05 Jun 2014 18:53:49 GMT

Thanks for the help.

Is there a good document for my server team to consult?

Christos Stefaneskou — Thu, 05 Jun 2014 19:49:34 GMT

http://pcloadletter.co.uk/2011/07/11/cisco-wifi-active-directory-auth/

http://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/100397-peap-ias.html

http://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/113670-eap-authentication-00.html

https://supportforums.cisco.com/document/67941/peap-authentication-configuration-example-windows-xp

Hope this helps.

Regards

***Don't forget to rate helpful posts***