01.07.2011 01:52:05
hmorenoh
Posts: 3
|
Hi,
I'm using TekRADIUS with a Cisco Aironet 1130AG AP, I configured the AP following this instructions: http://www.cisco.com/web/techdoc/wireless/access_points/online_help/eag/123-08.JA/1100/h_ap_howto_4.html
Y configure the clien with this settings:
Network Authenticacion->Open
Data encription-> WEP
The Key is provided to me automatically-> Yes
EAP Type: Protected EAP (PEAP)
Authenticate as computer when computer information is available-> No
Authenticate as guest when user or computer information is unavailable->No
On ther EAP Type Properties...
Validate server certificate->No
Select Authentication Method->Secured Password (EAP-MSCHAP v2) ----->Automatically use my Windows logon name and password(and domain if any)->No
Enable Fast Reconect->Yes
Enable Quarantine Checks->No
Disconnect if server does not present cryptobinding TLV->No
When trying to connect to the AP the wizard ask for the credentials over and over again and never connect.
The log saids this:
30/06/2011 01:29:30 p.m. - PEAP Challenge sent for user 'tester'.
30/06/2011 01:29:30 p.m. - PEAP Authentication failed. A valid certificate could not be found for user 'tester'
I saw in your support page some manuals when the Network Authenticacion is WPA and Data encription is TKIP, but i'm not sure about the AP parameters because when I just simply set this options the wizard does not even ask for credentials. I hope you can help me with this.
Thank you.
|
|
|
0
• permalink
|
01.07.2011 07:57:55
Admin
Administrator
Posts: 1833
|
Hi,
Add TekCERT generated certificate using TLS-Server-Certificate as a check attrbiute to the user's profile.
Best regards,
Yasin KAPLAN
|
|
|
0
• permalink
|
01.07.2011 17:26:14
hmorenoh
Posts: 3
|
Thank you very much Yasin, it work's fine, but i still having this doubt, why in yuour manuals the Network Authenticacion is WPA and Data encription is TKIP, if I use this settings I also have to provide a certificate to the client?? All this is because the purpose of the RADIUS is for our guests wifi, many of them just came once, so the certificate is an extra step. What can you recommend me??
Once again thank's for your quick response.
|
|
|
0
• permalink
|
02.07.2011 11:39:49
Admin
Administrator
Posts: 1833
|
Hi,
You can consider deploying TekWiFi in order to simplfy user connections.
Best regards,
Yasin KAPLAN
<em>edited by Admin on 02.07.2011</em>
|
|
|
0
• permalink
|