topic Re: Authentication via Active Directory in Wireless

Authentication via Active Directory

saquib.tandel — Sun, 04 Jul 2021 01:35:07 GMT

Hello

We got Wireless LAN Controller and 5 Access Point, its still not production.

We connect to AP using static WPA2, how can authenticate via Active Directory instead of WPA2.

We got Windows 2003 Domain Controller acting as DNS / DHCP

thanks

Re: Authentication via Active Directory

Scott Fella — Sat, 06 Mar 2010 16:28:58 GMT

Do you have a Microsoft IAS or NAP (2008 Server so maybe not) radius server setup? This way you can use WPA2/AES PEAP fro your encryption/authentication method. Here is a link that explains the setup:

http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a0080921f67.shtml

Re: Authentication via Active Directory

saquib.tandel — Sun, 07 Mar 2010 05:47:00 GMT

Thansk for replying.

I got Cisco ACS 4.2 and configured external database for Active Directory.

ACS is authenticating VPN users only.

Is there a document to have wireless user authenticate using ACS external database ( active directory 2003 )

Re: Authentication via Active Directory

Scott Fella — Sun, 07 Mar 2010 05:57:44 GMT

Take a look at this link.

http://www-europe.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a0080665d18.shtml

http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a00807917aa.shtml

Re: Authentication via Active Directory

saquib.tandel — Sun, 07 Mar 2010 06:39:19 GMT

Many Thanks.

Cisco Aironet Desktop Utility is it free or license.

Re: Authentication via Active Directory

Scott Fella — Sun, 07 Mar 2010 06:41:38 GMT

You don't need that.... you would need the Cisco wireless card for that, but most of the cards out there support PEAP. Depending on your wireless card, you can search for how to configure PEAP. Here is one if you use windows.

http://articles.techrepublic.com.com/5100-10878_11-6148574.html

http://www.cisco.com/en/US/docs/wireless/technology/peap/technical/reference/PEAP_D.html

Re: Authentication via Active Directory

saquib.tandel — Sun, 07 Mar 2010 06:45:55 GMT

Many Thanks

We got 500+ users and unfortunately all dont use the same brand of laptop.

supporting users become difficult due this factor, any peice of software needs to be installed on laptop to have make support easier.

Software can be paid or free.

can u help with my other post guest internet access.

Re: Authentication via Active Directory

Scott Fella — Sun, 07 Mar 2010 06:49:47 GMT

Sure... just replied to that thread.

Re: Authentication via Active Directory

Scott Fella — Sun, 07 Mar 2010 06:52:56 GMT

With that many, not having a standard issue or using windows GPO makes it hard. You don't want to have to touch all of the machines.

Re: Authentication via Active Directory

rizwan.corvit — Mon, 04 Apr 2011 07:37:52 GMT

Hello Man !

your provided documents and links are very effective. thank you guy for your help. right now i have to problem below listed,

I have Cisco aironet 1142n access point. I have no ACS / WLC

but want to authenticate end users 802.1x with Active directory 2003/2008 using RADIUS (IAS/NPS).

These APs are standalone. Please provide any configuration document

"How to authenticate end users with active directory using cisco 1142n Standalone (Without WLC/ACS)".

Thanks & Regards,

Rizwan Haider Siddiqui.

Re: Authentication via Active Directory

dmantill — Mon, 04 Apr 2011 14:20:33 GMT

Here it is a configuration example of EAP with wep encryption if you want you can change the encryption and keymanagement to WPA or WPA2 and that will be it...

http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_example09186a00801bd035.shtml

Re: Authentication via Active Directory

rizwan.corvit — Tue, 05 Apr 2011 10:47:15 GMT

Thank you brother for your effective reply.

Could you please advise me that I have no ACS server Software / Hardware.

I have Windows 2003 / 2008, Cisco 1142n AP, IAS / NPS as RADIUS Server.

your provided document can fullfill above requirement ?

thanks you so much !!!!!!!!!!

Re: Authentication via Active Directory

dmantill — Tue, 05 Apr 2011 14:59:17 GMT

Sure, it can be done with the IAS or NPS.

Use these other docuemts as reference for setting up the Microsoft side.

So irther if you use it as standalone or unified with a WLC this will help you.

http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a0080921f67.shtml

Please rate the post if you found these useful.

Re: Authentication via Active Directory

rizwan.corvit — Wed, 06 Apr 2011 04:08:15 GMT

thanks Man.

you are Great Man ! thank you

if you need any help from my end. kindly let me know. I am working with Cisco Gold Partner.

rizwan.haider@msn.com / rizwan.haider@corvit.com www.corvit.com

Re: Authentication via Active Directory

dmantill — Wed, 06 Apr 2011 04:14:35 GMT

Rizwan

You are welcome, and if you need any assitance do not hessitate to contact us back.

We will keep your contac information at hand if we need anything.

Have a good one!

Authentication via Active Directory

EvaldasOu — Fri, 16 Mar 2012 08:02:29 GMT

Hello guys

Can we use active directory authentication for stand-alone access points? Or we must have a controller?

Authentication via Active Directory

Vinay Sharma — Sat, 28 Jul 2012 13:09:20 GMT

This document was generated from the following discussion: https://supportforums.cisco.com/docs/DOC-26234

Thanks,

Vinay Sharma

Authentication via Active Directory

saif.scorpio — Sun, 30 Sep 2012 07:25:42 GMT

Can anyone please help me with this?I need to use active directory for web-authentication without any server using LDAP, I read the document on cisco website but it is still unclear to me that how to integrate the existing Active directory user database with LDAP for web-authentication.

Thanks

Saif