Machine Authentication

[c.fuller]

Currently my clients (XP/SP2/latest MS hotfix) are logging onto the wireless network using WPA/TKIP/PEAP. They are configured for both machine authentication (needed to download correct profile from server) and user authentication. I notice that for each logon there are multiple machine authentications showing up in the ACS (anywhere from 3 - 15) This varies and is random. Anyone know why I am seeing this many machine authentications and if there is something I can do to eliminate them? My clients are not consistently logging onto the network and I am thinking this may have something to do with it. I do not see any errors on AP or ACS when clients fail.

[rsumpter]

We have the same config. I don't see more then one machine authentication before the user logs in.....hmmmm.

[c.fuller]

So you only ever see one machine authentication.

Do you use the windows wireless client software for client configuration? I do.

WPA

TKIP

PEAP

Check authenticate as computer when info is available

Have acs server and certificate authority entered

Enable fast reconnect (client and server)

Automatically use windows login information.

I have the autologon setup so once the client boots up the information is passed to the wireless client to the radius server.

How is the SSID configured on the AP?

I have the TKIP cipher selected for encryption

I have OPEN with EAP, NETWORK EAP selected

I select KEY Exchange mandatory, CCKM and WPA.

Any information on your particular setup would be appreciated.

[jcosgrove]

I have a similar setup. On the failure log there are a lot of "NAS duplicated authentication attempt"

I have not had any luck trying to track this down.