A little Lost

[ciscosupport08]

A little lost

I have a 5508 Wlc  and 6 AP's 

I have asetup a guest Wlan and vlan user login via Wlc and get web page to authacate works good

My issue is the internal wlan   I would like it to login in to MS AD  same as Lan clients  for sure I am missing something

We have AD 2008 r2 with a NPC installed and dns  No cert server installed on Domain controller 

I am in the middle of these steps http://networklessons.com/wireless/peap-and-eap-tls-on-server-2008-and-cisco-wlc/

I  was thinking there has to to be an easy way to do this without a cert server

Any ideas

Thanks I hate beiing a Noob at this

[Abhishek Abhishek]

For refer to the link-

http://www.rebeladmin.com/2011/03/step-by-step-guide-to-setup-active-directory-windows-server-2008/

[Scott Fella]

Any time you use a radius server and the client use 802.1x authentication, then certificates are always involved. Is there an easy way... Sure, if you use a pre shared key, but that will not look up users via AD. You could search around and do LDAP of the WLC, but that's not my preferred way at all. Since you have AD and NPS, have your server team being up a CA and install certificates. Or you can buy a certificate for around 200 bucks a year and install that on the radius server. You can also use IIS and create a self signed if you want.

http://www.sslshopper.com/article-how-to-create-a-self-signed-certificate-in-iis-7.html

Sent from Cisco Technical Support iPhone App