2003 Server and 802.1x w/ WEP



Hello, I have a RADIUS server running with an Access Point as a NAS. The
set-up works fine with windows XP supplicants, but my Windows 2003 server
has some difficulty.

The XP machine is configured to use PEAP/MSCHAP 2, and the WEP key is to be
provided automatically from the Access Point. I type in the radius
username/password and the Access Point forwards the packets. On a second XP
machine, a similar setup works fine, only if I am to enter the WEP key
manually. The remainder of the authentication with PEAP is done by sending
the username and password.

Using the same config on Windows 2003, I run into some problems: Even if i
select to use WEP encryption and 802.1x, it will only allow me to select
802.1x if the WEP key is handed to me by the Access Point. Even then, as I
log into the system, it just infinitely cycles between Connected and
Attempting to Authenticate. The RADIUS server starts getting flooded with
re-authentication attempts.

Since the radius server used a self signed certificate, i remembered to
un-check "valdiate certificate." I had to do this with the XP machines, but
still i have no luck on the 2003 machine. Also, despite my efforts to
select manual WEP key and 802.1x, it automatically resorts to
WPA+TKIP+802.1x - Every time.

Does anyone know how to overcome this? Its driving me mad!

Also to note, the access point i am using is a Dlink, and it is no longer
sold or supported - in fact, i think there were many problems with this
product.





.



Relevant Pages

  • Re: WEP key wrong and static IP address setting
    ... In Windows, if AP A's WEB key is 1111111111, but I input the WEP key ... you're ignoring all the other stuff the DHCP ... there is no real connectivity (packets don't ...
    (alt.internet.wireless)
  • Re: ESET NOD32 or ESET Smart Security?
    ... Even amateurs can break a WEP key in a matter of minutes with software downloaded from the Internet, and thereby make you the neighbourhood free bandwidth supplier. ... an updated driver for my wireless card; ... driver updates are better downloaded form the manufacturer's support site than from Windows Update. ...
    (microsoft.public.windows.vista.general)
  • Re: 128bit WEP keys and ifconfig
    ... >> my WEP key to ifconfig, ... It works correctly under Windows XP when I swap the HD with the ...
    (freebsd-current)
  • Re: 128bit WEP keys and ifconfig
    ... >> my WEP key to ifconfig, ... It works correctly under Windows XP when I swap the HD with the ...
    (freebsd-current)
  • RE: 802.1x and RADIUS servers
    ... are you using windows server 2003 ias is a radius server built into windows ... Jay Ferron ... ADSI, CISM, CISSP, MCDBA, MCSE, MCT, NSA - IAM ...
    (microsoft.public.win2000.security)