Configuring Cisco Secure ACS for Windows PEAP-MS-CHAPv2 - [Part 2]
Configure the Wireless Network Connection
Complete these steps:
- Log off and then log on by using the WirelessUser account in the wirelessdemo.local domain.
- Choose Start > Control Panel, double-click Network Connections, and then right-click Wireless Network Connection.
- Click Properties, go to the Wireless Networks tab, and ensure that the Use Windows to configure my wireless network settingsis checked.
- Click Add.
- Under the Association tab, type Employee in the Network name (SSID) field.
- Select WPA for the Network Authentication and ensure that Data Encryption is set to TKIP.
- Go to the Authentication tab.
- Validate that EAP type is configured to use Protected EAP (PEAP). If it is not, select it from the drop-down menu.
- If you want the machine to be authenticated prior to login (which allows login scripts or group policy pushes to be applied) checkAuthenticate as computer when computer information is available.
- Click Properties.
- As PEAP involves authentication of Server by the client ensure that Validate server certificate is checked. Also, make sure the CA that issued the ACS certificate is checked under the Trusted Root Certification Authorities menu.
- Choose Secured password (EAP-MSCHAP v2) under Authentication Method as it is used for inner authentication.
- Make sure the Enable Fast Reconnect check box is checked. Then, click OK three times.Step - x : Select the option Configure and uncheck the option present there if you want to enter the user and password manually, and ignore the Step - x if you are already logged in with the correct user and password.
- Right-click the wireless network connection icon in systray and then click View Available Wireless Networks.
- Click the Employee wireless network and click Connect.
These screen shots indicate if the connection completes successfully.
- After authentication is successful, check the TCP/IP configuration for the wireless adapter by using Network Connections. It should have an address range from the DHCP scope or the scope created for the wireless clients.
We have also configured the Cellphones (tested on Nokia N79 and Windows Mobile) to connect to the wireless router by adding the certificates on them, and now they are also able to authenticate through RADIUS Server. I'll post all the steps involved in it soon.
Related Articles:
Subscribe to:
Post Comments (Atom)
0 comments
Post a Comment