iPads and RADIUS

[Eric Kemsley]

Now that I have the RADIUS server and controller working (thanks to you guys ). My next question is how would iPads connect to the wireless? I know I can setup up a different SSID with a pre-shared key for them, but I really don't want anyone having a key to gain access to the network.

Would MAC addresses put in the controller do what I want?

Do I just setup Guest access so even though they get a local IP, the cannot use or get to network devices? But the issue with this is they couldn't connect to exchange.

TIA,

Eric

[Scott Fella]

Eric,

What do you actually want to do. I don't clearly understand? You have iPads that you want on the network which can use 802.1x for authentication but you don't want to do that but you want to use Mac filters?

Sent from Cisco Technical Support iPhone App

[Eric Kemsley]

Sorry for not being clear. I want them to be able to access network services..ie exchange for email. I don't see how they would authenticate because there is no computer accout for the ipad.

[Scott Fella]

Well you setup a policy to do PEAP which authenticates their AD credentials.

Sent from Cisco Technical Support iPhone App

[Eric Kemsley]

I tried that using my AD logon information, but it won't connect. I used domain\username, just username without success.

[Eric Kemsley]

I added the ipad MAC to AAA>TACACS>MACFiltering and it now takes my logon information.

Thanks

[Scott Fella]

You must of had Mac filtering enabled then on the WLAN. You really don't need that enabled.

Sent from Cisco Technical Support iPhone App

[Eric Kemsley]

I will look to see and turn it off and try again.

[Scott Fella · Accepted solution]

If your doing 802.1x, I don't see any reason to also do Mac filtering. Mac filtering in general is a management nightmare because you would have to manage all the MAC address. As long as you setup your radius policies to your requirements, then that's all you really should need.

Sent from Cisco Technical Support iPhone App

[Chris Illsley]

Hi Eric,

The other alternative, although it is a faff is to create and install a certificate on the iPads for authenticating as a computer account:

http://itstreaming.apple.com/podcasts/ipadinbusiness/deployment/iPad_WiFi.pdf

Cheers

Chris