Connecting myRIO to WiFi with WPA2 Enterprise EAP-TTLS

Hey guys,
I´m struggling to connect my myRIO to the eduroam wifi on campus. It worked for a time, but now it suddenly just doesn´t.
The network runs a EAP-TTLS (or PEAP) Authentification, MSCHAPv2 as an inner authentification and a GT UserTrust Global Root certificate. When I first got it working I just set it up in MAX and uploaded the certificate, when that now stopped working I´ve tried just about everything including editing the wpa_supplicant locally on the myRIO.
To put it short I´m stumped at this, and the fact that it worked for a while doesn´t help O.o
Cheers,
Bjørn

Hi bjornsol,
I managed to connect a wireless cDAQ to eduroam by
Uploading the certificate in MAX
Entering the user name and network secret for PEAP, IP adress set to "DHCP or Link Local"
I can also confirm successfully accessing the device from a eduroam connected computer. Remember to configure a password for your device, it will otherwise be accessible to other eduroam users.
Ask the IT department at your university for a valid certificate. I downloaded this certificate from the KTH eduroam web page, not sure it will work for you if you are registered at another university.
If this doesn't work for you, please upload a screenshot from MAX when trying to connect to the network.
Best regards,
Robert P-F
Applications Engineer
National Instruments Sweden

Similar Messages

Cannot connect to WIFI with WPA2 enterprise security

I'm currently trying to switch my Wifi from WPA2 Personal to WPA2 Enterprise using a dd-wrt flashed TP-Link router and a Synology Diskstation as the RADIUS server. The diskstation also creates the CA certificate which I can download from there for all client devices.
Configuration on the side of the router appears to be fine, I've entered all the details for RADIUS authentication and left "WPA Algorithms" at its default setting "TKIP", other options being ("AES" and "TKIP+AES"). I said it appears to be fine because my Android phone connection is established succesfully using the following (default) parameters:
EAP method: PEAP
Phase 2 Auth: NONE (also works with MSCHAPV2, and probably other options)
CA cert: unspecified (didn't download it to smartphone, must be fetched automatically from router I guess)
User cert: unspecified
Identity: myDiskstationUsername
Anonymous Identity: (blank)
Password: myDiskstationPassword
So far, so good... I still cannot manage to get a connection from my laptop running Arch. Prefered method would be via "wicd". The best match seems to be the following configuration profile:
name = PEAP with TKIP/MSCHAPV2
author = Fralaltro
version = 1
require identity *Identity password *Password
optional ca_cert *Path_to_CA_Cert
protected password *Password
ctrl_interface=/var/run/wpa_supplicant
network={
ssid="$_ESSID"
scan_ssid=$_SCAN
proto=WPA
key_mgmt=WPA-EAP
pairwise=TKIP
group=TKIP
eap=PEAP
identity="$_IDENTITY"
password="$_PASSWORD"
ca_cert="$_CA_CERT"
phase1="peaplabel=0"
phase2="auth=MSCHAPV2"
But it's not working, both with and without specifing the optional path to the CA certificate. Any ideas what I could've been missing or any clues for debugging?
Last edited by saciel (2013-11-07 09:55:16)

Why don't you use netctl?
I'm using netctl to connect to my FreeRadius Server, and I use this config...
Description='A wireless connection using a custom network block configuration'
Interface=wlp0s29f7u3
Connection=wireless
Security=wpa-configsection
IP=static
Address='192.168.1.200/24'
Gateway='192.168.1.1'
DNS=('192.168.1.1')
WPAConfigSection=(
'ssid="SSID"'
'key_mgmt=WPA-EAP'
'eap=PEAP'
'phase2="auth=MSCHAPV2"'
'group=CCMP'
'pairwise=CCMP'
'identity="user"'
'password="password"'
'priority=1'

My laptop is using Windows 8.1 and it can't connect to a WiFi using WPA2/Enterprise authenticate

I am using a laptop Dell Inspiron 15z with Windows 8.1 64 Bit OS. And i build a test lab to test WPA2/Enterprise authenticate.
My Lab is like that:
1/ My DC + DNS using Windows 2012 RC2 Standard.
2/ I install CA + Radius Server on DC Server.
3/ My AP WiFi is DrayTek AP810
After configed i can you use my iphone 5s (ios 8.1), my android phone (Samsung Galaxy), 1 laptop Windows 7, 1 laptop Windows 8 to test. And all of them can connected with no problem.
But my laptop using Windows 8.1 64 bit OS can't connected. After i choise the WiFi, it only show "checking network requirement"- not show the option question username and password. (and i config it exactly like laptop Windows 8).
I have tried find the answer on Google but nothing help me. (i have choise PEAP, install Certificate...)
Please help me guys. Thank you so much.

Hi,
About this issue, we could troubleshoot as the following methods on the Windows 8.1 client side.
1. Maker sure the "Automatically use my Windows logon name and password" setting on the client is disabled and on your client and type in the correct domain name when prompted.
2. If the issuer persists, delete this network profile in your Windows 8.1 client with commands and manually configure it as
this similar thread.
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

IPad 3 with iOS 6 fails to connect to WiFi with WPA2 and AES - any solutions available?

Hello *,
after upgrading my iPad 3 to iOS 6 it constantly fails to connect to WiFi with WPA2 and AES - hidden or broadcasted SSID - at home and at work because the device does not accept the WPA2 password. This is also the case for my iPhone 4S but both devices did work with WiFi (WPA2 / AES) perfectly with previously installed iOS 5.1.1.
I tried to downgrade to iOS 5.1.1 but it seems to be no longer possible to downgrade for both iPad 3 and iPhone 4S as the certification and signage window for iOS 5.1.1 maybe has been closed by Apple.
Does anyone know about a possible solution to connect to WiFi with WPA2 and AES with iPad 3 / iPhone 4S and iOS 6 upgrade?
Thank you very much for any help and advise.
Best regards from Germany
Matthias

Look at iOS Troubleshooting Wi-Fi networks and connections http://support.apple.com/kb/TS1398
iPad: Issues connecting to Wi-Fi networks http://support.apple.com/kb/ts3304
iOS: Recommended settings for Wi-Fi routers and access points http://support.apple.com/kb/HT4199
Additional things to try.
Try this first. Turn Off your iPad. Then turn Off (disconnect power cord for 30 seconds or longer) the wireless router & then back On. Now boot your iPad. Hopefully it will see the WiFi.
Go to Settings>Wi-Fi and turn Off. Then while at Settings>Wi-Fi, turn back On and chose a Network.
Change the channel on your wireless router (Auto or Channel 6 is best). Instructions at http://macintoshhowto.com/advanced/how-to-get-a-good-range-on-your-wireless-netw ork.html
Another thing to try - Go into your router security settings and change from WEP to WPA with AES.
How to Quickly Fix iPad 3 Wi-Fi Reception Problems
http://osxdaily.com/2012/03/21/fix-new-ipad-3-wi-fi-reception-problems/
If none of the above suggestions work, look at this link.
iPad Wi-Fi Problems: Comprehensive List of Fixes
http://appletoolbox.com/2010/04/ipad-wi-fi-problems-comprehensive-list-of-fixes/
Fix iPad Wifi Connection and Signal Issues http://www.youtube.com/watch?v=uwWtIG5jUxE
Fix Slow WiFi Issue https://discussions.apple.com/thread/2398063?start=60&tstart=0
Unable to Connect After iOS Update - saw this solution on another post.
https://discussions.apple.com/thread/4010130
Note - When troubleshooting wifi connection problems, don't hold your iPad by hand. There have been a few reports that holding the iPad by hand, seems to attenuate the wifi signal.
~~~~~~~~~~~~~~~
If any of the above solutions work, please post back what solved your problem. It will help others with the same problem.
 Cheers, Tom

Macbook Pro Wifi Issues with WPA2 Enterprise key

I have a MBP 13" mid 2009 model. There is usually no problems connecting to home networks. It remembers the passwords and connected seamlessly. However, I have problems connecting to networks with WPA2 Enterprise settings. I had tried it in NYU and I am trying it at my current school too. It keeps forgetting the WPA2 key from time to time and although I have tried all ways to get it to remember the key it still fails. I have used other MBP from the same time frame and they seem to be working perfectly. Even my iPod touch works perfectly with these WPA2 enterprise networks. Can anyone suggest a workaround?

The networks do support WPA2. It works perfectly on windows 7 and other MBPs. There it doesn't keep asking the password and stores the password in keychain. But on my MBP it keeps asking me for the password from time to time
Message was edited by: cooldip

Certificate renewal with WPA2-Enterprise PEAP MS-CHAPv2

Hello
We have a wireless network which is secured with WPA2-Enterprise with PEAP and MS-CHAPv2. The Radius servers (Windows Server 2008r2 with the Radius Feature installed) currently use a public signed certificate. This is about to expire soon and will need to be renewed.
The clients are non-managed and from all variety (OS, wifi-software, ...).
The Wifi is 4400 controller based and managed with the new Prime Infrastructure 1.3.
What is the best way to do the renewal with as little disturbance for the client as possible? The less manual interaction for the end user the better.
Thanks
Patrick

Hello Patrick,
As per your query i can suggest you the following steps-
Since the root CA is the most critical CA in the hierarchy, you may prefer to have a strategy here that reduces the need to renew the root certificate often.
The first consideration is choosing the key length of the root's public key and private key pair during setup of the root authority. By using a long key length, which is generally more secure against brute force attack than a shorter key length, you increase the length of time that the CA can use the same private key and have reasonable confidence that it has not been compromised. The second consideration is establishing the validity period of the root certificate itself. In general, you will want to create a root certificate that has a shorter validity period than the estimated lifetime of the key.
For more information you can refer to the link-
http://technet.microsoft.com/en-us/library/cc740209(v=ws.10).aspx
Hope this will help you.

Please post if you have WiFi with WPA2-PSK and WEP working on iPod ios4

Quite a few people seem to be having difficulty with getting WiFi with WPA2-PSK and WEP working on iPod ios4. I'd like to know if anyone does have this working. Please let us know iPod model, access point (router) model, and security settings on your setup. I'm reluctant to upgrade if I can't get WiFi because quite a few of my favorite apps need the net. Please do NOT post to this thread if your WiFi is NOT working. Thanks
I have:
1. brand new (not yet even initialized) 32GB iPod Touch
2. iPod Touch 8GB 3rd Gen
3. Netcomm gateway/router/access point with security set as noted above.
Edit: if you don't know what Gen your iPod Touch is, please see:
http://support.apple.com/specs/#ipodtouch
The easiest way to tell 2nd from 3rd gen is that 3rd gen has bluetooth (look in Settings/General -- if Bluetooth is there, your iPod is 3rd gen, if not it's 2nd gen or earler).
Message was edited by: KumbiaKid

Thanks a lot to all who responded. I now have registered and upgraded my brand spanking new 32GB iPod Touch to ios4. Before I updated, I registered the new iPod, set up and checked the WiFi connection as described in my OP (except that it was AES - not WEP as noted above) and it worked just fine. I then updated to ios4 and it still worked fine, with no further input from me. It just connected as it should have after the update and all internet functions connect and work as expected.
To those who have had problems, my sympathy, but the problems are clearly not due only to ios4 -- there has to be something else going on with your connections.
Message was edited by: KumbiaKid

Can the WAP4410N be setup with WPA2-Enterprise and also be repeater by another WAP4410N?

I have AP1 setup with WPA2-Enterprise. How would I setup AP2 (WAP4410N) to be a repeater for AP1?

Hi Alec,
Thanks for participating in the Small Business Support Community. I've posed your question to our engineers and the short answer is "no".
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;}
WAP4410N can only repeat or bridge other supported Small Business APs/Routers.
Thanks again for your participation and, although probably not the answer you wanted, I hope this helps.
Stephanie Reaves
Cisco Small Business

I suddenly cannot connect to any wifi with my ipad 1. In settings my wifi is turned on. My home connection shows up under Choose a network and has a strong signal.

I suddenly cannot connect to any wifi with my ipad 1. in settings my wifi is turned on. My home connection shows up under Choose a network and has a strong signal. I have reset the Wifi under General. But when I type in my password it still says, "Unable to join the network."

1. Turn router off for 30 seconds and on again
2. Settings>General>Reset>Reset Network Settings

Problem wireless connection with WPA2 Enterprise

Hello,
I am experiencing an annoying problem while trying to connect at the wireless network at the University, adopting WPA2 Enterprise. After some days of frustration I decided to post a help message here, I hope it's the right section (my problem could be kernel related...). Basically I can't connect to the network, no matter how many times i may try. Other operating systems do not give me the same problem, I can connect without issues thus my card is working properly.
Summarizing:
- My card is a BCM4313 (Broadcom), natively supported within the kernel by the module brcmsmac.
- I tried the module wl as well, with no result.
- I tried both Arch standard kernel and the LTS one.
- I am Gnome user, hence I use NetworkManager (never had a problem in the last 2 years at least...)
- I tried Wicd as well (in the past it was working when NM was failing), with no result.
- Both MS Windows, Ubuntu and Linux Mint (driver brcmsmac) allow me to connect to the network.
- The problem occurrs only in case of WPA2 Enterprise, unfortunately this is a "parameter" I cannot change...
What follows is a portion of NM log file, where I isolated the part related to one connection attempt.
NetworkManager[305]: <info> (eth1): device state change: prepare -> config (reason 'none') [40 50 0]
NetworkManager[305]: <info> Activation (eth1/wireless): access point 'MY_SSID' has security, but secrets are required
NetworkManager[305]: <info> (eth1): device state change: config -> need-auth (reason 'none') [50 60 0]
NetworkManager[305]: <info> Activation (eth1) Stage 2 of 5 (Device Configure) complete.
NetworkManager[305]: <info> Activation (eth1) Stage 1 of 5 (Device Prepare) scheduled...
NetworkManager[305]: <info> Activation (eth1) Stage 1 of 5 (Device Prepare) started...
NetworkManager[305]: <info> (eth1): device state change: need-auth -> prepare (reason 'none') [60 40 0]
NetworkManager[305]: <info> Activation (eth1) Stage 2 of 5 (Device Configure) scheduled...
NetworkManager[305]: <info> Activation (eth1) Stage 1 of 5 (Device Prepare) complete.
NetworkManager[305]: <info> Activation (eth1) Stage 2 of 5 (Device Configure) starting...
NetworkManager[305]: <info> (eth1): device state change: prepare -> config (reason 'none') [40 50 0]
NetworkManager[305]: <info> Activation (eth1/wireless): connection 'MY_SSID' has security, and secrets exist. No new secret [I can't read after this but it's not relevant...]
NetworkManager[305]: <info> Config: added 'ssid' value 'MY_SSID'
NetworkManager[305]: <info> Config: added 'scan_ssid' value '1'
NetworkManager[305]: <info> Config: added 'key_mgmt' value 'WPA-EAP'
NetworkManager[305]: <info> Config: added 'password' value '<omitted>'
NetworkManager[305]: <info> Config: added 'eap' value 'PEAP'
NetworkManager[305]: <info> Config: added 'fragment_size' value '1300'
NetworkManager[305]: <info> Config: added 'phase2' value 'auth=MSCHAPV2'
NetworkManager[305]: <info> Config: added 'ca_path' value '/etc/ssl/certs'
NetworkManager[305]: <info> Config: added 'ca_path2' value '/etc/ssl/certs'
NetworkManager[305]: <info> Config: added 'identity' value 'username'
NetworkManager[305]: <info> Config: added 'bgscan' value 'simple:30:-45:300'
NetworkManager[305]: <info> Config: added 'proactive_key_caching' value '1'
NetworkManager[305]: <info> Activation (eth1) Stage 2 of 5 (Device Configure) complete.
NetworkManager[305]: <info> Config: set interface ap_scan to 1
NetworkManager[305]: <info> (eth1): supplicant interface state: disconnected -> scanning
NetworkManager[305]: <info> (eth1): supplicant interface state: scanning -> associating
NetworkManager[305]: <info> (eth1): supplicant interface state: associating -> associated
NetworkManager[305]: <warn> Connection disconnected (reason -3)
NetworkManager[305]: <info> (eth1): supplicant interface state: associated -> disconnected
NetworkManager[305]: <info> (eth1): supplicant interface state: disconnected -> scanning
NetworkManager[305]: <info> (eth1): supplicant interface state: scanning -> associating
NetworkManager[305]: <info> (eth1): supplicant interface state: associating -> associated
NetworkManager[305]: <warn> Connection disconnected (reason -3)
NetworkManager[305]: <info> (eth1): supplicant interface state: associated -> disconnected
NetworkManager[305]: <info> (eth1): supplicant interface state: disconnected -> scanning
NetworkManager[305]: <warn> Activation (eth1/wireless): association took too long.
NetworkManager[305]: <info> (eth1): device state change: config -> need-auth (reason 'none') [50 60 0]
NetworkManager[305]: <warn> Activation (eth1/wireless): asking for new secrets
NetworkManager[305]: <warn> Couldn't disconnect supplicant interface: This interface is not connected.
NetworkManager[305]: <warn> Couldn't disconnect supplicant interface: This interface is not connected.
NetworkManager[305]: <info> (eth1): supplicant interface state: scanning -> inactive
NetworkManager[305]: <info> (eth1): disconnecting for new activation request.
NetworkManager[305]: <info> (eth1): device state change: need-auth -> disconnected (reason 'none') [60 30 0]
NetworkManager[305]: <info> (eth1): deactivating device (reason 'none') [0]
As I said before, it may be a kernel related problem, but it seems very strange since I would expect a higher number of users experiencing some troubles.
As a final note, I've been Arch-dependent since 4 years already and I love it. I can't really imagine to change distribution just for this...but I am stuck at present and I need to work with the laptop, so any help is really appreciated.
Thank you
Last edited by Demind (2013-05-30 12:38:40)

cfr wrote:Try to connect manually and post the output you get.
I did what you suggested and I could connect to the network, ergo it was a NetworkManager problem.
I am migrating to netctl, and I will test it at the university in the next days. I hope it will work.
Thanks for the hint, I should have done this test in the first place...:(

WPA2-Enterprise + EAP (PEAP) and 802.1x to authenticate to RADIUS server NPS

I need to connect my iPhone and my iPad to the corporate wireless network using WPA2-Enterprise and 802.1x to authenticate against a RADIUS server with my corporate user. What is the procedure to configure the clients? Certificates is not necessary on the client. Radius server is a NPS of Microsoft and the WLC is a 5508 of Cisco.
thanks !!!

WPA and WPA2 are all actually interim protocols that are used until the standardization of IEEE 802.11i standard. Wi-fi appliance decided that ratification and standardization of 802.11i standards will take more time. So, they came up with WPA.
Now, WPA2 is advanced version of WPA. WPA2 uses AES as encryption algorithm. Whereas, WPA use TKIP as encryption mode which in turn uses RC4 encryption algorithm.
WPA and WPA2 are actually are of 2 types respectively.
WPA/WPA2-PSK - This is mainly for small offices. This uses Pre-Shared Key for authentication.
WPA/WPA2 -Enterprise - This uses a RADIUS Server for authentication. This is an extension to 802.1x authentication. But this uses stronger encryption scheme(WPA uses RC4 and WPA2 uses AES).
Any authentication mechanism that involves a separation authentication server for authentication like ACS server is called 802.1x authentication.
EAP stands for Extensible Authentication Protocol. It refers to the type or method of 802.1x Authentication by the RADIUS/Tacacs server. A RADIUS server can authenticate a wireless client with various EAP methods.
LEAP is one type of EAP. It uses username and password for authenticating wireless clients. LEAP is cisco proprietory.
There are also EAP types which uses other user credentials like Certificates, SIM etc for authentcation.
The following document might clarify your doubts.
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_q_and_a_item09186a00805e8297.shtml

Windows does not connect to Airport Express with WPA-Enterprise

Hey,
we are using some AirPort-Express stations at our office to provide a wireless network to our staff.
The APs use WPA/WPA2-Enterprise (linked to a RADIUS-Server) to check the users authority.
On Macs and iOS devices the connection to AP works fine but if we try to connect a Windows client, Windows shows up the login-screen, checks the password (if you try a wrong password it shows the login-screen again) but then it says that no connection is possible. We also tried it on another laptop (both using Windows 7 Professional), but it still does not work.
Can anybody help us?
Thanks!

This issue is often caused by Windows firewall, and sometimes caused by wireless interfernece. Try disabling the firewall or other anti-virus software. You can also directly connect you AE to your computer via ethernet to access the configuration.
If all else fails, you have hard reset the AE device and reconfigure.

Accept Certificate when connecting to an SSID with WPA2-AES encryption.

When I try to Connect my Iphone to an SSID with WPA2-AES encryption,i need to accept the certificate and gets authenticated.When i switchover to different SSID and reconnect again to the same WPA2-AES SSID i do not get the Certificate accept page.
When i click on the Forget Network and deisconnect from the SSID and re-connect again,i will be prompted to acept the certificate.Is this a normal behavior in Iphone.
Any suggestions would be greatly appreciated.
Thanks and regards,
Sendhil Balakrishnan

Hi
with the config i have i seem to be able to login using either tkip or aes, but i don't think i have got mixed mode configured on the AP so it should only accept WPA2-AES encryption but it also accepts TKIP making me believe something is configured incorrectly.
should i change anything in the config on the AP to only allow WPA2-AES encryption?
many thanks
rogier

Help can't connect to home wifi with new S5

just got my s5 yesterday im having the same problems at home, other computers are working just fine other phones work but mine just says (saved,secured)
i have tryed every thing i know checked every board i can think of and serched google and bing cant find the answer.
the guy that set my phone up wifi transfered my stuff from my s3 to this one in the store and it auto downloaded all my apps with out my wifi at home im allready over 75% data used in one day usually only use 45% all month. i can find a fix for this and im getting irratated because it will be costing me money soon!

jornjr,
Hmm, that is odd let's get to the bottom of this and ensure you can connect to all wifi connections. Please try this: Settings> WiFi> Menu> Advanced> Uncheck Smart Network Switch. Also ensure your "Keep WiFi on during sleep" here are the steps for that: Settings> WiFi> Menu> Advanced> Ensure Keep WiFi on during sleep is set to "Always". Please let us know if this helps.
KarenC_VZW
Follow us on Twitter @VZWSupport

Can't connect to netgear wifi with macbook pro

I have a Netgear N900 router and although I can find the signal I cannot connect to the wifi. Each time I clicked on it, it would fail to connect and say to move closer to the router. However the router has already been upgraded to make the signal strong enough to reach my room. I have tried restarting the router and it has not worked. I have gone into the router through my browser and reserved an IP address and changed my network settings on my computer to "using DHCP with manual address" and entered the reserved IP address. I restarted my computer but now my macbook pro says that it is connected but I can't connect to the internet when i open a browser. I'm not sure if I'm not reserving the IP address correctly or if there is another solution to this problem. If anyone has encountered this problem and found a solution that would be amazing. I have been trying for a month now to fix this. Thanks!

From the menu bar, select
 ▹ System Preferences... ▹ Network ▹ Advanced ▹ TCP/IP
What values are shown for the following?
Configure IPv4
IPv4 Address
Subnet Mask
Router

Connecting myRIO to WiFi with WPA2 Enterprise EAP-TTLS

Similar Messages

Maybe you are looking for