14.09.2011 11:37:02
sieri
Posts: 3
|
Hello,
As far as I know, I have made the config as it should be but i still can't connect to the wireless network.
The "sign-in screen" just pops up again after entering the credentials.
In the log I see that the user is authenticated correct.
What have i missed?
The accesspoint is a 3Com Officeconnect.
Here is the log:
2011-09-14 10:33:23 - TekRADIUS Service 4.1.0.0 is being started (Microsoft Windows NT 5.1.2600 Service Pack 3).2011-09-14 10:33:36 - TekRADIUS Service is listening on : 10.58.208.122 (4 client(s))
2011-09-14 10:33:36 - TekRADIUS Service is listening on : 10.58.208.122 (4 client(s))
RadAuth req. from : 10.58.208.15:1109 - 2011-09-14 10:33:53
Size : 87 / 87
Identifier : 112
Attributes :
2011-09-14 10:33:53 - Starting PEAP (A).
Framed-MTU = 1400
NAS-Port-Type = 19
Service-Type = 2
NAS-IP-Address = 10.58.208.15
NAS-Port = 29
User-Name = user
2011-09-14 10:33:53 - EAP Authentication commencing for user 'user'
2011-09-14 10:33:53 - Check items control - Start (Group : Default).
2011-09-14 10:33:53 - Check items control - Stop (Group : Default).
2011-09-14 10:33:53 - Fetching Success-Reply items - Start.
2011-09-14 10:33:53 - Fetching Success-Reply items - Stop.
2011-09-14 10:33:53 - Generating Reply Packet - Start.
2011-09-14 10:33:53 - Generating Reply Packet - Stop.
2011-09-14 10:33:53 - Authorization successfull for user user
RadAuth reply to : 10.58.208.15:1109 - 2011-09-14 10:33:53
Size : 50
Identifier : 112
Attributes :
User-Name = user
|
|
|
0
• permalink
|
14.09.2011 13:31:11
Admin
Administrator
Posts: 1833
|
Hi,
Please uncheck Authorization Only option at Settings / Service Parameters tab (Why did you set his option?).
Best regards,
Yasin KAPLAN
|
|
|
0
• permalink
|
20.09.2011 11:00:58
sieri
Posts: 3
|
I unchecked the option and now I get the following log:
2011-09-20 09:33:44 - TekRADIUS Service 4.1.0.0 (Revision 0) is being stopped.
2011-09-20 09:34:13 - TekRADIUS Service 4.1.0.0 is being started (Microsoft Windows NT 5.1.2600 Service Pack 3).
2011-09-20 09:36:34 - TekRADIUS Service is listening on : 10.58.208.122 (4 client(s))
RadAuth req. from : 10.58.208.15:1118 - 2011-09-20 09:56:02
Size : 87 / 87
Identifier : 4
Attributes :
2011-09-20 09:56:03 - Starting PEAP (A).
Framed-MTU = 1400
NAS-Port-Type = 19
Service-Type = 2
NAS-IP-Address = 10.58.208.15
NAS-Port = 29
User-Name = user
2011-09-20 09:56:03 - EAP Authentication commencing for user 'user'
2011-09-20 09:56:03 - Check items control - Start (Group : Default).
2011-09-20 09:56:03 - Check items control - Stop (Group : Default).
2011-09-20 09:56:03 - PEAP Challenge sent for user 'user'.
2011-09-20 09:56:34 - Session timer expired for the session : 710c3c263d185fd844b1c51f06e42e70
RadAuth req. from : 10.58.208.15:1119 - 2011-09-20 09:56:44
Size : 87 / 87
Identifier : 9
Attributes :
2011-09-20 09:56:44 - Starting PEAP (A).
Framed-MTU = 1400
NAS-Port-Type = 19
Service-Type = 2
NAS-IP-Address = 10.58.208.15
NAS-Port = 29
User-Name = user
2011-09-20 09:56:44 - EAP Authentication commencing for user 'user'
2011-09-20 09:56:44 - Check items control - Start (Group : Default).
2011-09-20 09:56:44 - Check items control - Stop (Group : Default).
2011-09-20 09:56:44 - PEAP Challenge sent for user 'user'.
The reason I checked this was because im planning on authenticate with the clients MAC-adresses, but first I want it to work.
|
|
|
0
• permalink
|
20.09.2011 14:04:05
Admin
Administrator
Posts: 1833
|
You can add Calling-Station-Id as a check attribute to user profile for MAC-Authentication. Please configure Windows
client according to the instructions in TekRADIUS Manual.
|
|
|
0
• permalink
|
20.09.2011 14:26:45
sieri
Posts: 3
|
First of all, THANKS for a great suport! Do I need to install a cert on the client computers? My idea kind of fails then, because i want to let computers i dont controll in to the network and I wont be able to install the cert on them.
|
|
|
0
• permalink
|
20.09.2011 21:33:56
Admin
Administrator
Posts: 1833
|
No, yo don't need to. You can use TekWiFi (http://www.yasinkaplan.com/tekwifi.asp) to simplfy client deployment.
|
|
|
0
• permalink
|