No Radius hosts configured...

Question

For days now, I've been trying to troubleshoot an authentication problem and the solution still eludes me.
I have a Windows 7 SP1 laptop, a wireless client, that should be able to access the wireless network LAB1 with SSID AP1.
It should authenticate with a Windows 2008 R2 SP1 DC/NPS server via a Cisco Aironet 1142 access point.
Authentication is "Open with EAP".
EAP type is EAP-TLS.
Two entries in the Aironet Event Log, I believe, are related to the problem:
Error - No Radius hosts configured or no valid server present in the group rad_eap
Debugging - Station [MAC addr here] Authentication Failed.
The MAC addr is that of the Windows 7 SP1 laptop attempting to connect to the network via the access point.
Could someone verify that my configuration is correct for what I want to accomplish (wireless access by laptops using EAP (EAP-TLS) authentication and - for now - WEP encryption???
Also, what could explain the error message above about no Radius servers? The output of "show run" below seems to indicate that Radius is configured, correctly or not...
Here is the ouput of the "show run" command on the Aironet 1142 (via telnet) - followed by the error messages in the Windows 7 laptop Event Viewer (WLAN Auto-Config section):
AP1#sh run
Building configuration...
Current configuration : 2354 bytes
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec localtime show-timezone
service password-encryption
hostname AP1
logging rate-limit console 9
enable secret 5 $1$4Ipo$roPiDJm93XYFOrN7hngx/1
aaa new-model
aaa group server radius rad_eap
aaa group server radius rad_mac
aaa group server radius rad_acct
aaa group server radius rad_admin
aaa group server tacacs+ tac_admin
aaa group server radius rad_pmip
aaa group server radius dummy
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
aaa session-id common
dot11 syslog
dot11 ssid AP1
   authentication open eap eap_methods
   authentication network-eap eap_methods
   guest-mode
username Cisco password 7 00271A150754
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
encryption mode wep mandatory
ssid AP1
antenna gain 0
power local 2
power client 2
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
encryption mode wep mandatory
ssid AP1
antenna gain 0
dfs band 3 block
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
no keepalive
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
interface BVI1
ip address 10.0.0.51 255.0.0.0
no ip route-cache
ip default-gateway 10.0.0.2
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
radius-server attribute 32 include-in-access-req format %h
radius-server host 10.0.0.12 auth-port 1812 acct-port 1813 key 7 03050A09055D2549485A
radius-server vsa send accounting
bridge 1 route ip
line con 0
line vty 0 4
end
Note: I changed the Radius ports to 1812 and 1813 because that's what Windows uses for Radius (authentication and accounting).
Windows Event Viewer entries
Event ID 8000
WLAN AutoConfig service started a connection to a wireless network.
Network Adapter: Intel(R) PRO/Wireless 3945ABG Network Connection
Interface GUID: {16f026bc-d9fd-4a9d-9020-a32174a4bd6a}
Connection Mode: Automatic connection with a profile
Profile Name: LAB1
SSID: AP1
BSS Type: Infrastructure
Event ID 11000
Wireless network association started.
Network Adapter: Intel(R) PRO/Wireless 3945ABG Network Connection
Interface GUID: {16f026bc-d9fd-4a9d-9020-a32174a4bd6a}
Local MAC Address: 00:1C:BF:68:1E:C5
Network SSID: AP1
BSS Type: Infrastructure
Authentication: Open
Encryption: WEP
802.1X Enabled: Yes
Event ID 11001
Wireless network association succeeded.
Network Adapter: Intel(R) PRO/Wireless 3945ABG Network Connection
Interface GUID: {16f026bc-d9fd-4a9d-9020-a32174a4bd6a}
Local MAC Address: 00:1C:BF:68:1E:C5
Network SSID: AP1
BSS Type: Infrastructure
Peer MAC Address: 64:A0:E7:29:08:E0
Event ID 11010
Wireless security started.
Network Adapter: Intel(R) PRO/Wireless 3945ABG Network Connection
Interface GUID: {16f026bc-d9fd-4a9d-9020-a32174a4bd6a}
Local MAC Address: 00:1C:BF:68:1E:C5
Network SSID: AP1
BSS Type: Infrastructure
Peer MAC Address: 64:A0:E7:29:08:E0
Authentication: Open
Encryption: WEP
FIPS Mode: Disabled
802.1x Enabled: Yes
Event ID 12011
Wireless 802.1x authentication started.
Network Adapter: Intel(R) PRO/Wireless 3945ABG Network Connection
Interface GUID: {16f026bc-d9fd-4a9d-9020-a32174a4bd6a}
Local MAC Address: 00:1C:BF:68:1E:C5
Network SSID: AP1
BSS Type: Infrastructure
Peer MAC Address: 64:A0:E7:29:08:E0
Eap Information: Type 13, Vendor ID 0, Vendor Type 0, Author ID 0
Event ID 12014
Wireless 802.1x authentication was restarted.
Network Adapter: Intel(R) PRO/Wireless 3945ABG Network Connection
Interface GUID: {16f026bc-d9fd-4a9d-9020-a32174a4bd6a}
Local MAC Address: 00:1C:BF:68:1E:C5
Network SSID: AP1
BSS Type: Infrastructure
Peer MAC Address: 64:A0:E7:29:08:E0
Eap Information: Type 13, Vendor ID 0, Vendor Type 0, Author ID 0
Restart Reason: Peer Initiated
Event ID 12013
Wireless 802.1x authentication failed.
Network Adapter: Intel(R) PRO/Wireless 3945ABG Network Connection
Interface GUID: {16f026bc-d9fd-4a9d-9020-a32174a4bd6a}
Local MAC Address: 00:1C:BF:68:1E:C5
Network SSID: AP1
BSS Type: Infrastructure
Peer MAC Address: 64:A0:E7:29:08:E0
Identity: host/PC2.mynet.lan
User:
Domain:
Reason: Explicit Eap failure received
Error: 0x40420110
EAP Reason: 0x40420110
EAP Root cause String: Network authentication failed due to a problem with the user account
EAP Error: 0x40420110
EVent ID 11004
Wireless security stopped.
Network Adapter: Intel(R) PRO/Wireless 3945ABG Network Connection
Interface GUID: {16f026bc-d9fd-4a9d-9020-a32174a4bd6a}
Local MAC Address: 00:1C:BF:68:1E:C5
Network SSID: AP1
BSS Type: Infrastructure
Peer MAC Address: 64:A0:E7:29:08:E0
Security Hint: The operation was successful.
EVent ID 8004
Wireless network is blocked due to connection failure.
Network Adapter: Intel(R) PRO/Wireless 3945ABG Network Connection
Interface GUID: {16f026bc-d9fd-4a9d-9020-a32174a4bd6a}
Connection Mode: Automatic connection with a profile
Profile Name: LAB1
SSID(s): AP1
BSS Type: Infrastructure
Failure Reason:Explicit Eap failure received
Length of block timer (minutes): 20
EVent ID 8002
WLAN AutoConfig service failed to connect to a wireless network.
Network Adapter: Intel(R) PRO/Wireless 3945ABG Network Connection
Interface GUID: {16f026bc-d9fd-4a9d-9020-a32174a4bd6a}
Connection Mode: Automatic connection with a profile
Profile Name: LAB1
SSID: AP1
BSS Type: Infrastructure
Failure Reason:Explicit Eap failure received
The peer MAC address is that of the Aironet access point:
AP1#sh int
BVI1 is up, line protocol is up
  Hardware is BVI, address is ccef.4807.35d2 (bia 64a0.e729.08e0)
  Internet address is 10.0.0.51/8
  MTU 1500 bytes, BW 54000 Kbit/sec, DLY 5000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  ARP type: ARPA, ARP Timeout 04:00:00
[snip]
Dot11Radio0 is up, line protocol is up
  Hardware is 802.11N 2.4GHz Radio, address is 64a0.e729.08e0 (bia 64a0.e729.08e0)
  MTU 1500 bytes, BW 54000 Kbit/sec, DLY 1000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  ARP type: ARPA, ARP Timeout 04:00:00
[snip]
Dot11Radio1 is administratively down, line protocol is down
  Hardware is 802.11N 5GHz Radio, address is 64a0.e72e.ba10 (bia 64a0.e72e.ba10)
  MTU 1500 bytes, BW 54000 Kbit/sec, DLY 1000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  ARP type: ARPA, ARP Timeout 04:00:00
[snip]
GigabitEthernet0 is up, line protocol is up
  Hardware is PowerPC405ex Ethernet, address is ccef.4807.35d2 (bia ccef.4807.35d2)
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  Half-duplex, 100Mb/s, media type is T
  output flow-control is unsupported, input flow-control is unsupported
Note: half-duplex because of the old hub I am using for my practice network. Plastic 5 port switch I had went bad.
Note: yes, I am only using radio 0 for the time being.

Answer 1

Looks like I'm at a dead end.
But since it looks like the rest of the setup is fine, what I would like to do *now* is configure the Aironet to work with WPA2.
WEP was only used for testing (well, if I can't make it work with WPA/2, what about WEP?)
Since the WPA2 - EAP-TLS combination works just fine with the the Linksys, I have to conclude it's just a matter of entering the right commands on the Aironet to make this work.
Yes, I'm almost ready to give up on the web-based GUI, it's closed on me twice when I click on "Apply" and it appears the configuration is not saved entirely (???).
CLI via telnet seems both faster and more reliable but I don't know all the commands. Some of the documentation I've found assumes other situations, such as authentication with LEAP or use of a controller. Still looking...