Hello,
I have the following components in my network and would like to build a smooth and transparant 802.1x environment for my clients:
- Cisco ACS 3.2(2) with Generic LDAP external database
- Cisco 2950 switches with latest IOS
- Windows 2000 SP4 on the clients with Novell client
- No ActiveDirectory for clients, but MS CA available
I would like to do 802.1x port authentication on my 2950 switches. I've been testing with both EAP-MD5 and PEAP. I got both methods to work, but not in the way i want to.
1. When the client starts the machine an initial Novell login is required. At this time the machine needs to be able to connect to the Netware server. How to I achieve this? Machine authentication?
2. How do i let PEAP use the Generic LDAP ext. database on ACS? In my tests PEAP tries to login with a username like "HOSTNAME/USERNAME" which is not available in the LDAP database. Creating a local user in the ACS database works with PEAP, but we can't have it like that.
3. We are using PXE-boot in our organisation to push out new images. How does PXE-boot work with a 802.1x enabled switchport? I couldn't get it to work.
Thanks in advance!
Rutger
