Dot1x - network access without prompting for password

[tracey.marshall]

Dear all,

I have a customer with wired dot1x which appears to no longer prompt for user authentication. The topology is a Radius server, Cat2950 switch and Windows XP clients. Recently, we have discovered that the PCs are not prompting for authentication and users are getting straight onto the network.

When I delete the Windows registry entry

HKEY_CURRENT_USER-Software-Microsoft-EAPOL- UserEupInfo

I am again prompted for the username/password and the registry entry is added back in.

Does anyone know how I can get the PC to always prompt for username/password without having to edit the registry each time?

Many thanks in advance,

Tracey

[tpalmieri]

Tracy,

I don't have an answer to your question but I am tyring to do exactly what you have already done.(getting 802.1x working with xp client to acs server) Can you e-mail me the configs you used (client, switch acs)I am also working with tac but are not making progress. One thing i notice is that the switch port I am using is yellow and shows up down. is this normal behavior when the port is configured for 802.1x?

Thanks, Tom thomas.palmieri@judiciary.state.nj.us

[jafrazie]

Did you try the "Automatically use my Windows logon name and password" (and domain if any) tick box under the PEAP properties?

Depending on the switch, it should show up as amber until 802.1x authorizes a port (which indicates a forwarding condition of the port).

Hope this helps.

[jafrazie]

Woops. I think that is just for the first one, and then others are cached, which you can delete the keys for, but will then come back (as mentioned). I'm not aware of a workaround for this.