Found solution - PEAP XP sp2 & WPA with CSACS

[colin.mcnamara]

I thought I would share the solution we found.

Enviornment,

Mixed hardware clients, all WIFI compatible.

Cisco 1231 AP's

Cisco Secure ACS for windows

WPA with PEAP

Problem,

Clients utilizing WinXP SP2 and wireless zero conf were not able to connect to our WPA / PEAP enabled wireless infrastructure. They would hang authenticating.. authenticating. Same problem I have seen around the forum. Ciso recomends that you turn of fast reconnect, that did not work for us.

Solution

Select Start>> Settings>> Network Connections

Right click on your wireless connection

Select Properties

Scroll Down to TCP/IP Configuration >> choose Properties

Click on the ADVANCED button on the lower right hand corner

Click on the WINS tab on the Top of the windows

Under NetBIOS settings change from DEFAULT to

Enable NetBIOS over TCP/IP

Choose ok, apply, etc

Hope this is helpful to somebody

--Colin McNamara

--Openwave Systems

[ToSullivan]

I had the same issue... when adding a 1231 AP to my network. I have found another fix... be sure to apply the MS Patches for Wireless Networking... Q815485 and KB826942.

[dixho]

I am not sure if we are talking to the same problem. CSCef50870 only occurs during re-authentication and WPA enable. In other words, wireless client has no problem to associate to the AP for the first time. When customer disable and enable the wireless adapter OR when there is a PEAP timeout (i.e. re-authentication), WPA negotiation fails after 802.1x is completed.

Your setting looks like to me that you enable TCP/IP to look for domain controller if WINS is not pushed by the DHCP. Looking for domain controller should be after the wireless client has already associated to the access point. I wonder if you can go back to the original configuration and do NOT use WPA. If it still fails, I suggest you to look at the DHCP server and find out if you configure option 044.

If you use static IP, do you configure an WINS server?