WPA vs. DHCP (also see "WPA PEAP Authentication Fails w/IAS")

From: David (dsloane.from_at_vfadotcom)
Date: 03/26/04


Date: Fri, 26 Mar 2004 17:03:29 -0500

Did you (tc, Wajihy) ever review certificate settings on the client,
Radius server and domain Certificate Authority?

I know I've had trouble with certificates with PEAP and WPA.

Was this ever resolved? I'm having similar problems with WPA and
DHCP. Everything seems to work except DHCP passing back to the
supplicant machine.

The IAS server log shows successful authentication, the IAS server event
log shows many successful domain authentication events, and the
NAS/Access Point shows lots of RADIUS traffic, but no DHCP.

I always end up with a good layer 2 connection and an autoconfiguration
IP address on the client side.

-David

>From: Wajihy [MSFT] (wajihy@online.microsoft.com)
>Subject: Re: WPA PEAP Authentication Fails w/IAS
>Newsgroups: microsoft.public.internet.radius
Date: 2003-09-03 16:50:58 PST
>no nothing special just default attributes
>
>--
>
>This posting is provided "AS IS", with NO warranties and confers NO
rights
>
>Upcoming Event: Tech Chat about "Secure Wireless authentication using
IAS,
>PEAP and EAP"
>on September 25th at 10AM PT
>http://communities2.microsoft.com/home/chatroom.aspx?siteid=34000081
>
>"tc" <tc@tc.com> wrote in message
>news:058001c37255$37c2dd50$a101280a@phx.gbl...
>> Are there any special RADIUS attributes that an access
>> point has to support in order to handle MSCHAP V2 ?
>>
>> >-----Original Message-----
>> >Ok, I did try to repro your set up (with a different AP) and it
works fine
>> >so I am thinking it is just a config issue in your set up can you
verify in
>> >your IAS policy that PEAP MSCHAPV2 is enabled
>> >
>> >--
>> >
>> >This posting is provided "AS IS", with NO warranties and confers
NO rights
>> >
>> >Upcoming Event: Tech Chat about "Secure Wireless authentication
using IAS,
>> >PEAP and EAP"
>> >on September 25th at 10AM PT
>> >http://communities2.microsoft.com/home/chatroom.aspx?
siteid=34000081
>> >
>> >"Wajihy [MSFT]" <wajihy@online.microsoft.com> wrote in message
>> >news:OGtUxcWcDHA.2932@tk2msftngp13.phx.gbl...
>> >> I will look into this and get back to you
>> >>
>> >> --
>> >>
>> >> This posting is provided "AS IS", with NO warranties and confers
NO rights
>> >>
>> >> Upcoming Event: Tech Chat about "Secure Wireless authentication
using IAS,
>> >> PEAP and EAP"
>> >> on September 25th at 10AM PT



Relevant Pages

  • Re: Need help configuring Wireless Connection profile
    ... "point" the info of the Radius authentication to your current Radius server. ... SMALL BUSINESS SERVER: ... STEP #1 Install Certificate Services ...
    (microsoft.public.windowsxp.general)
  • Re: Need help configuring Wireless Connection profile
    ... "point" the info of the Radius authentication to your current Radius server. ... SMALL BUSINESS SERVER: ... STEP #1 Install Certificate Services ...
    (microsoft.public.windowsxp.general)
  • Re: Need help configuring Wireless Connection profile
    ... Now life is good in the Windows wireless world. ... now have a secure wireless setup within my small business server environment. ... "point" the info of the Radius authentication to your current Radius server. ... STEP #1 Install Certificate Services ...
    (microsoft.public.windowsxp.general)
  • Re: Authenticate a machine to radius?
    ... Installing a wireless network card in the PC makes it a wireless client, ... not a RADIUS server, RADIUS proxy, or wireless AP/RADIUS client. ... Make sure the shared secrets on the AP and the IAS server match. ...
    (microsoft.public.internet.radius)
  • Re: Basic WEP/RADIUS/802.11 (Cisco/MS) question
    ... but I am interested in this whole Radius ... > I see that I can pull a Radius server out of the Microsoft Windows ... Cisco 1200 APs would be the RADIUS clients. ... a third party CA for your server certificate that your clients already ...
    (microsoft.public.internet.radius)