Authenticating clients using PEAP or LEAP

[d.beaver]

I have a customer in a hosptial that is rolling out three 4402-50's and WCS in their environment. They have a situation where they have mobile laptops in the ER that are logged into by many different folks working on in that area.

My problem occurs when the Windows XP laptop tries to connect to the domain before the wireless link is established. They have HP laptops with both Broadcom cards and Intel cards in them. We have the option to use either LEAP or PEAP, which ever will make this work.

I have recommended using the Cisco ABG card because it will allow wireless to work first, but this would be a big expense for these guys. Is there anyway to make the wireless connect before authentication to the domain takes place?

[Darren Ramsey]

PEAP with machine authentication should do the trick on either ACS or IAS. There are also some Microsoft registry settings that can delay login scripts if necessary.

http://www.microsoft.com/technet/archive/community/columns/security/askus/auas0303.mspx

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs32/user/d.htm#wp42310