topic IEEE 802.1x wireless client authentication. in Wireless

IEEE 802.1x wireless client authentication.

andrea.meconi — Sat, 03 Jul 2021 21:43:18 GMT

Hello.

I'm using PEAP to authenticate wireless client: machine authentication only.

For W2000 client only, when systems start these are successfully authenticated using the computer account; after some seconds a re-key entry can be founded on ACS report with the same computer account or user account if they're making login.

Andrea.

Re: IEEE 802.1x wireless client authentication.

Jagdeep Gambhir — Wed, 10 Oct 2007 14:22:02 GMT

Andrea,

The 'Re-Key OK' message on ACS means that Cisco-Aironet-Session-Timeout has occured. Hence, the session (dynamic) keys need to be re-established.

This message appears because of the dynamic WEP key configured for authentication

reasons.

To increase this, please go to

'Security' -> 'Encryption Manager' on the AP

Over there under 'Global Properties'

Broadcast Key Rotation Interval:

check Enable Rotation with Interval and enter a value as needed.

Similarly, this value should be same on the ACS RADIUS(IETF) 27 attribute.

Regards,

~JG

Re: IEEE 802.1x wireless client authentication.

andrea.meconi — Mon, 15 Oct 2007 05:11:09 GMT

Hello and many thanks for your help.

I'm using CiscoSecure ACS to configure [5842\001] Cisco-Aironet-Session-Timeout to the same value of [027] Session-Timeout.