PEAP migration from LEAP

[mabouchard]

We currently support LEAP. I have successfully tested and configured PEAP on a test client using the same access point. The problem I discovered is that if a client is still configured with LEAP that it continues to authenticate. We would like a PEAP only environment. Is there a way in the 1200 AP or ACS(3.3.3) to disable LEAP while still supporting PEAP?

[frankzehrer]

Hi Michael,

in ACS navigate to:

System Configuration -> Global Authentication Setup -> untick the "Allow LEAP" checkbox.

This should prevent the clients from authentication with LEAP over the APs.

Best regards,

Frank

[mabouchard]

The problem is we are going to migrate 20 different sites and during the migration the ACS needs to continue to support LEAP. Any way to do this?

[frankzehrer]

Hi Michael,

i have overseen the main point here.

;-)

I assume you have for PEAP a different SSID and therefore a different VLAN. Turn off the VLAN for LEAP authentication on the sites you have migrated. And the clients should not be able to login.

Best regards,

Frank