PEAP problems (ACS 3.2, winxp, 3550 switch)

[davhalcisco]

Im having a problem getting the ACS server to respond to my switch for a PEAP request (it seems like thats the problem). I have the debug log from the switch below to see if anyone can make sense of it. I have machine authenitcation turned off in windows and doing just user. I setup a certificate and manually loaded it on the machine also.

Thansk for any help you can give.

-------

[davhalcisco]

I switched to Radius (not tacacs) and now in the Cisco ACS log I get "External DB Account Restriction". We use Win2003 active directory,does anyone know what I am missing? I turned on dialin priviledges for the account. No luck with that.

[jafrazie]

Correct.

Auth is not failing. It's timing out.

See if a RADIUS debug confirms that ACS is responding (or can be reached). If it's not that, the supplicant may not be responding for some reason (when it should be).

Hope this helps.