PEAP config with ACU and 350 Nic

Question

I am trying to config PEAP with a 350 Nic on a Win2K SP4 machine. I can get LEAP to work, but I never see the option to choose PEAP under the Network Security Tab.
I am using ACU verizon 6.3.011, latest version from Cisco. I removed it completely, the shutdown, then reinstalled choosing PEAP from the custom setup menu. However, I never see PEAP as a choice.
I am running ACS ver 3.2 and have PEAP setup with a self generated Cert.
How do I choose PEAP from ACU? of is it supposed to be chosen from withing Win, if so, where, I looked everywhere.
Seth

Answer 1

I have this config running in production right now. PEAP was difficult to setup and get working. Mainly due to the certificates. I had to load a Microsoft CA server and generate certs for both my ACS servers. Then you have to import them into the pc's using the MMC.exe. Make sure you add the certs to the "computer account" .
Steps are:
1) goto RUN and enter mmc.exe
2) ctrl+m (add snap-in)
3) Add certificates snap-in under computer account and local computer
4) Expand the list on the left, highlight "Trusted root certification authorities" , left-click, all tasks, import.
5) Follow the wizard, browse your cert file and import under "Trusted Root certification Authorities"
6) Import all the certs this way, you should have two if you have two ACS servers for redundancy, as I do.
7) Then once in the PEAP setup in the windows auth tab, you'll need to select these certs to activate them. They should now be in that list after the import.
There are also some sticky settings on the ACS servers. This took me about 8months to get working correctly with trial-n-error, testing, production runs and TAC cases. Feel free to email me if you want to take this offline.
I feel your pain.
jk