Hi,
We have deployed an EAP-FAST solution with two Cisco 1200 Series access points and Cisco ACS server. We use three VLAN's on the wireless side, one for guest access to the Internet, one for corporate data access and one for voice access for our Cisco 7920 phones.
EAP-FAST is used on the corporate VLAN with Intel Centrino 2200BG cards in Dell Latitude laptops, running the latest Intel Pro drivers. We use single sign on when booting into Windows to give us access to the wireless network. This all works brilliantly until we enable "guest-mode" access on both our access points. Single sign-on breaks and the Intel Pro utility fails to find a profile to access the network.
I thought at first it was an issue with the Centrino's so turned off Aironet extensions on one ap and enabled guest-mode again. Single sign on worked in this set-up until I disabled arionet extensions and enabled guest-mode on the other access point.
As far as I can tell there is an issue with broadcasting the SSID on a VLAN which breaks the single sign-on for EAP-FAST.
Cisco say its Intels fault in the CCX supplicant and Intel don't really know what's going on. Does anyone have any ideas?
Jim
