LEAP and Biometrics

[hinesd]

We have a working LEAP configuration using 1200 series AP's and ACS appliance. Users successfully authenticate to AD with username and password. We would like to use a fingerprint to authenticate to the network, however, during testing, we receive an error that the domain is not available. On ACS Cisco Aironet is selected at the Radius group. Does anyone have a working Biometric configuration?

[#2]

See if this helps:

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_white_paper09186a008019f62c.shtml

[hinesd]

Thanks, but not much more here than I already knew.

I have a feeling that the Bio software we are using does not understand the Aironet Radius extensions, or maybe the other way around. AD is the AAA client in this scenario, AD also stores the fingerprint data. A wired user, not using ACS authenticates via the Bio just fine. As soon as we add the wireless in the picture, the Bio-login fails. If we fall back to network username/password, then the LEAP works just as it should.

Specific information;

Client OS: WIN2K

WLAN 802.11g on Cisco 1210 series 12.2.15 IOS

Cisco 802.11 Client adapters

Cisco Secure ACS Appliance ver 3.2

Client WLAN software is Beta code provided by Cisco "build 500".