Cisco SG 200-08 and Windows Server 2008R2 as Radius

Question

Hello.  I'm having some issues using Cisco SG 200-08 switches for 802.1X authentication. I would be very grateful for some help:
  1. Will Cisco implement any other way to authenticate supplicant port other than EAP-MD5 method? I'm using those switches to implement 802.1X authentication in my network and my RADIUS server is a Windows Server 2008R2 machine. I've actually had to make a registry hack (instructions from:  http://social.technet.microsoft.com/Forums/en/winserverNAP/thread/e801bdac-9347-4efb-9d7c-bcf4d64aa927  ) to enable MD5 on WS2008R2. I've alse read that this method is old and insecure and everyone suggest using some safer authentication method but I simply can't. Can someone tell me please will Cisco implement any other authentication methods in those switches or should I buy any other hardware.

Answer 1

Hello Scott
Thanks a lot for your answer, i have followed the document as example and i had some problems matching the network policy on the NPS due to the NPS has connection request policies and network policies for setting up, understanding that one is for authentication and the other one for authorization,  additionaly, other issue was when duplicated the certificate template, i had to use the certificate issued by default on the CA for requesting a new certificate for the NPS Server.
After days looking for figuring up this issues, it has worked well. As you told me, the configuration on the Wireless Controller was the easy part, the issue come up when i started working on the NPS as Radius Server.
One more thing, for applying FlexConnect or HREAP for the Remote APs that i have distributed on my branch offices, should i use other WLAN configured on the Wireless Controller or with the same WLAN use for all the user is enough applying the parameters for getting work with HREAP?
I would appreciate any help fot getting work with HREAP.
Thanks a lot.
Alexis