Can't authenticate using IAS (with EAP-TLS) for Wireless network.

From: Stuart Mackie (*REMOVE*me@stu.uk.com)
Date: 01/24/03


From: "Stuart Mackie" <*REMOVE*me@stu.uk.com>
Date: Fri, 24 Jan 2003 12:33:38 -0000


Hi. I've made a number of postings over the last week with a few minor
issues which have now been resolved (thanks for everyone's help) but I have
1 problem left and am not sure where to begin to fix it. I am running a
Wireless network (very small) with 128-bit WEP and 802.1X Authentication.
If I disable the Advanced authentication and just use the 128-bit WEP the
connection works fine so I've managed to limit the problem area down to
Certificated between the Clients and the Win2k Server. My Win2k Server is
running DNS, DHCP, IAS and as a CA. I have issued each client system a User
and Computer certificate and they are all correct and valid. IAS is
configured to Grant Access to users and computers in Groups and similarly
everything seems fine there.

I enabled logging in IAS and I thought that if a client connects but doesn't
get authenticated then there would at least be an entry in the log file. At
the minute no log file is being created at all. Can anyone suggest where I
should start to try and find out what part is causing the problem ? I'm
relatively sure it must be related to Certificate/Authentication problems
becuase no data gets through to the network/server if Authentication is
enabled, but when its disabled the system's get allocated their details by
DHCP and can access the network. I have setup any details in RRAS but none
of the documents on the MS site for configuring Wireless with 802.1X say
that you have to. The documents I used to make sure I had set everything up
right were :

http://www.microsoft.com/windowsxp/pro/techinfo/deployment/wireless/default.
asp
and
http://www.jsifaq.com/SUBK/tip5200/rh5238.htm

Thanks for any help, (and for all the recent help)
Stuart.



Relevant Pages

  • Re: Aironet 1200/Radius Help Needed
    ... I just fired up a W2003 Advanced Server so that I can take ... >> IAS servers (do I need a separate certificate for the secondary IAS ... >> of authentication since it involves just installing the certificate on ... >between the AP and the client. ...
    (microsoft.public.internet.radius)
  • Re: 802.1X/EAP authentication issue with XP client
    ... I also tried adjusting the IAS remote access policy framed MTU param ... client, same scenario, is not getting a successful authentication. ... or system event logs. ...
    (microsoft.public.internet.radius)
  • Re: IAS to authenticate CISCO VPN traffic
    ... I ran the netsh ras set tracing iassam enabled, ... in the ias log file i still see the normal log details as follows.. ... I created a client within IAS called ... >> Within this profile Under authentication and encryption I have tried ...
    (microsoft.public.internet.radius)
  • Re: LDP client authentication fails
    ... The remote server has requested SSL client authentication, ... I have copied the personal certificate as follows: ...
    (microsoft.public.windows.server.active_directory)
  • Re: Aironet 1200/Radius Help Needed
    ... I just fired up a W2003 Advanced Server so that I can take ... > IAS servers (do I need a separate certificate for the secondary IAS ... > of authentication since it involves just installing the certificate on ... between the AP and the client. ...
    (microsoft.public.internet.radius)

Quantcast