MS RADIUS (IAS) and Aironet 350 wireless clients

[frbartolj]

Hi,

I am trying to configure MS RADIUS(IAS in WIN2000 Server) to work with Aironet wireless NICs for dynamic and automatic WEP key managing (802.1x).

It simply does not work?

Is maybe anybody who successfully configure such configuration?

I have already succesfuly configure Cisco Secure ACS for such purposes.

Regards,

Francek Bartolj

[ciscomoderator]

Often times complex configuration issues are best addressed in an interactive session with one of our trained technical assistance engineers. While other forum users may be able to help, it’s often difficult to do so for this type of issue.

To utilize the resources at our Technical Assistance Center, please visit http://www.cisco.com/tac and to open a case with one of our TAC engineers, visit http://www.cisco.com/tac/caseopen

If anyone else in the forum has some advice, please reply to this thread.

Thank you for posting.

[dseoane]

I posted this same question to the TAC and your response "call Microsoft"

-d

[mark]

I have not done this yet (we currently use ACS 3.0), but am interested in learning if it will work.

I'm worried that MS RADIUS does not provide the Cisco-Proprietary (LEAP) authentication protocol that your client uses. But I guess you could be using EAP-TLS on Win XP or some other 802.1x supplicant (i.e. Funk's Oddessy Client www.funk.com or MDC's 802.1x client at http://www.mtghouse.com/supplicant_priv.html)

Let us know if you get it working...

Regards,

Mark A. Gutowski

CONSUMERS ENERGY COMPANY

[sbulut]

did you get it working with MS Radius?

thanks,

-serdar

[tedington]

Has anyone got this to work yet, I tried MD5 challenge and TLS for IAS and every time it says that the EAP authentication method is unrecognized. Has anyone got this to work.

Thanks

Troy

[mgao]

I too have been unsuccessful getting EAP and IAS to work, then came across this MS Q article,

http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q303362

any info appreciated. thanks.

[khelms]

I have been able to get IAS and EAP to work successfully.

Windows2000 and Cisco AP with dell wifi adapters using windows configurations.

you have to be a SP2

first you have to call microsoft to get the patches for:

q304697, q306260, q304347

no cost, just tell them you need them.

after that I just followed the microsoft instructions and we were off.

Oh cisco tech support helped.

[changf]

Did you get the authentication with the Windows-groups in the remote access Policy.

[spidey]

Troy,

You have to setup a Remote Access Policy with condition of NAS-Port-Type = Wireless.

I got past the "authentication method is unrecognized". Problem how ever I am not having the problem with EAP-MD5 that the user information does not match a remote access policy

[cwerr]

I applied the hotfixes etc and specified a nas port type of wireless 802.11 but am still having an issue. Error message from IAS - a signature attribute was invalid. Any ideas?

[vblavet]

Please note that Cisco EAP (LEAP) over 802.1x is not supported by IAS MS Radius.

You must use ACS, Funk Radius or Interlink.