Wireless Security Problems

[ethancooper]

We're in the initial phases of setting up a wireless LAN here on campus. I believed we configured the Cisco 350 Access Points correctly for RADIUS authentication.

Our problems are occuring when configuring the clients. Under Windows 2000, the Aironet Client Utility will not enable the EAP option (open and LEAP are available though). Has anyone here successfully implemented EAP under similar conditions, or does anyone know how to activate the EAP option on the client side?

Any assistance/advice would be extremely helpful.

Ethan Cooper

Network Specialist

LeTourneau University

[KENT EITZMANN]

While I haven't tried this with Win 2000, I have done user/pass authentication for Win98 WLAN clients using LEAP & ACS 2.6 . The way I understand it is, LEAP is the only option you have today until Radius-EAP (802.1x) is supported natively in software. I believe Windows XP will be the first OS to support this.

[ethancooper]

Well, it looks like you're right! Thanks! After talking with somebody from Cisco, it looks like the EAP option is being reserved for future use. We're looking at acquiring ACS now... We have some remote campuses, where it'll be a problem if we can't use authentication to restrict access to the network (well, not to mention the local campus). :)

Ethan Cooper

Network Specialist

LeTourneau University

[thisisshanky]

Hello Ethan,

I am a newcomer into Wireless tech. But what i have read from Cisco's site is that, thru their utility, u can enable LEAP or EAP for radius server authentication. They claim it for 9x,NT,2000 and ME. For reference, please see Using the Aironet Client Utility, page 2-10, line14.

with regards

shanky