topic Re: Setting up WPA2 Enterprise in Wireless

Setting up WPA2 Enterprise

thunt — Sun, 04 Jul 2021 01:45:42 GMT

Hello all,

Sorry if this seems stupid to any of you. Try not to flame me. I have been using wpa2 with pre-shared keys in my "small" network environment but I am getting tired of manually retyping keys to every one when someone leaves the company plus we are starting to grow at a fairly rapid clip.

I would like to implement WPA2 Enterprise but not sure where to start. I was looking for some how-to's on Cisco's site but thought this might be a good place to start.

Our environment is a mix of Linux & Windows, LDAP & AD, using Linksys WAP200's and Cisco switches.

Are there any docs for setting up wpa2 Enterprise that any of you use? Any suggestions are appreciated.

Thanks,

Re: Setting up WPA2 Enterprise

Leo Laohoo — Mon, 26 Apr 2010 21:47:18 GMT

Where do you want to configure this? Client? APs?

It's best if you hook the WPA2 to your TACACS or RADIUS login account.

Re: Setting up WPA2 Enterprise

rdvorak — Mon, 26 Apr 2010 22:31:02 GMT

Hi, from your post I don't see that you've a PKI and use certificates in your network yet.

It will depent on the EAP type that you plan to use whether you need to roll-out server and client certificates and for that you'll need a certificate authority.

So I think that is the big blocking point in most networks to have a PKI to auto enroll certificates as no one want to do it manualy for a high number of clients, the config of the APs/AD/IAS isn't the big deal.

Haven't found a better resource/link --> http://www.cs.umd.edu/~mvanopst/8021x/howto/

....so just replace WEP with WPA2 and the rest is about the same.

As I'm not an MS server or PKI expert I hope some other members could backup my opinion.

Kind regards,

Ron

Re: Setting up WPA2 Enterprise

thunt — Tue, 27 Apr 2010 18:54:59 GMT

I was assuming at the access point. I only have a couple of them. Should I be doing it at the user device level?

Re: Setting up WPA2 Enterprise

thunt — Tue, 27 Apr 2010 18:55:50 GMT

That is a very good link. Thank you for that.

Re: Setting up WPA2 Enterprise

thunt — Tue, 27 Apr 2010 21:06:24 GMT

I set up my WAP to talk to IAS. The link above was pretty close (I had to adjust for W2K3) but I got though it.

It works!

The only oddity is that If I tell the laptop to not validate the certificate it works fine. If I create and download a cert it does not work. Odd.

I will try to figure that part out. Thanks again all.