Problems using PEAP with IAS installed on Windows 2003 Server SP1.



I am having troubles authenticating clients against my IAS
installation.

I have followed all kinds of guides and Microsoft documentation to
install IAS, and have had little luck in getting this to work.

The current problem: Event log reports that the user trying to log in
does not exist.

PEAP uses a "generic" user id and password for its first pass (open)
authentication. My client uses "anonymous" as the user id, and
"anonymous" as a password. Because the domain does not contain a user
"anonymous", the IAS server fails the authentication.
Not forgetting as well, that different supplicants seem to use
different user id's for the first level negotiation.

Isn't IAS smart enough to accept anything in the first level PEAP
negotiation?

I haven't enabled any guest access, but none of the guides suggest that
I have to do this for PEAP to work.

Can someone explain a little more what may be going on here?

To review, my questions are:
1. Why isn't IAS smart enough to accept any id for first stage PEAP?
2. If it isn't, then what do I have to do to get it to accept my
"generic" client requests?

Cheers!~

.



Relevant Pages

  • problem with 802.1x authenticating
    ... XP client running wzc ... Windows 2000 server using IAS for authentication and accounting. ... Have set up the IAS with a radius-client pointing to my access point. ... Have created a remote access policy "NAS-port-type" IEEE 802.11 OR ...
    (microsoft.public.internet.radius)
  • Re: Aironet 1200/Radius Help Needed
    ... I just fired up a W2003 Advanced Server so that I can take ... > IAS servers (do I need a separate certificate for the secondary IAS ... > of authentication since it involves just installing the certificate on ... between the AP and the client. ...
    (microsoft.public.internet.radius)
  • Re: Aironet 1200/Radius Help Needed
    ... I just fired up a W2003 Advanced Server so that I can take ... >> IAS servers (do I need a separate certificate for the secondary IAS ... >> of authentication since it involves just installing the certificate on ... >between the AP and the client. ...
    (microsoft.public.internet.radius)
  • Re: Securing Cisco devices using MS IAS (RADIUS) server
    ... Open up the MMC for the IAS service and connect to the server. ... Clients Container and select New | Client. ... Enter the IP Address of the RADIUS client and the ...
    (microsoft.public.win2000.networking)
  • Re: 802.1X/EAP authentication issue with XP client
    ... I also tried adjusting the IAS remote access policy framed MTU param ... client, same scenario, is not getting a successful authentication. ... or system event logs. ...
    (microsoft.public.internet.radius)

Loading