Secure wireless on existing network

My boss wants to provide internet wireless capability to service customers while they are waiting. We have a small LAN with forty workstations and only one port on our router to the outside. I am worried about security. I was thinking of putting a wireless router on our network. Will this secure my network from the wireless users and still get them access to the internet?

I think to secure internet access, you can do something called web authentication. with web authentication, a user will first go thorugh the process of authentication before accessing the internet. The following documents explain how to configure web authentication.
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008067489f.shtml
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008076f974.shtml

Similar Messages

Do I need to setup my AirPort Express on a modem before trying to connect it wirelessly to my time capsule existing network?

I have an airport express that I used in another location. I brought it home and want to use it with my existing network and time capsule to do AirTunes. I can't get the Express to show up in my airport utility to even set it up. Do I need to connect it to my time capsule with an ethernet cable first to configure, or should it be showing up as a device to add to my network automatically?

1. i would restore the express to factory defaut by holding the reset button on the unit with a paperclip while you are powering it on
2. if it restored, you should be able to see it in your wifi icon at top of screen as "airport express"
or you can see it in airport utility
3. then if you want to connect it wirelessly to your time capsule, you would choose "extend network" and put in relevant security and password....this would make the express a wireless access point, fed by your time capsule(main router)
if you chose to do it wired which is a better way if you have access to ethernet port at wall, you would choose "create a wireless network" and then under the "network" tab you would choose "Bridge Mode".....this would make the express a wired access point, fed by your time capsule(main router)

Using WRT45G wireless router with a pre-existing network?

I am an NYU student, so I am already connected to a pre-existing network. However, I would like to have wireless internet in my room, so I bought the WRT45G router. Is it possible to do this? I don't have an actual, physical modem. There is just an internet jack in my room.

Yes. Simply hook up the Internet port of the WRT to the internet jack. Then plug your computer to a LAN port. Configure your WRT going to http://192.168.1.1/ (default password is "admin" unless you have changed that).
1. Set the router to "Automatic Configuration - DHCP".
2. Save Settings.
That should do it. You should be able to check the Status tab and see that the router got an IP address from your campus network.
For the security of your network and your computer I highly recommend to do the following things as well. Don't forget to save the settings for each page where you make changes.
- change the router password. You can do that on the Administration tab.
- change the SSID to something else than "linksys" on the Wireless tab.
- turn off the SSID broadcast after you have connected your computer for the first time wireless. (Wireless tab)
- turn on wireless security (on the wireless security subtab). Choose WPA2 Personal if possible (i.e. your computer allows it). Else WPA Personal. Choose TKIP or TKIP+AES depending on the setting before. Enter a pre-shared key (a stronger password or passphrase). You must enter the identical key in your computer when you connect the first time.
Without wireless security anyone can use your router and most likely is able to connect to your computer as well. Therefore: use it!

I have a 3rd party "TPLink ADSL wireless" router controlling DHCP , Now require Airport Basestation and Timecapule to merely join the existing network. I know this was a work around once posted, but can't find it again? Help....

I have a 3rd party "TPLink ADSL wireless" router controlling Internet and DHCP , Now require my (Airport Basestation and Timecapule) to merely join the existing network. I know this can be done but it was a bit of a work around the automatic setup. The autmatic setup only offers (Create new/WDS/Extend) Does anyone know how to do it, or can point me to the post.
Many thanks

Unfortunately, I need to connect both devices (Extreme and Timecapsule) via wireless. The ADSL router is not conveniently located to allow me to cable them directly. They are both being used to drive a bank of non networkable printers and external harddrives via the USB ports on each.
My frustration with myself is I had it setup, but failed to record for future, the trick in how to unhide the "join network option". I then had a failed firmware update from Apple and then needed to reset the routers and bang the settings were gone.
The Security setting is not an issue I know those I am using WPA2 personal.
I would be grateful for the wireless setup if you have it handy...
Thanks do much

HP Deskjet 3050 - Unable to connect to WPA secured wireless network

Hello,
My first post here so please excuse any faux pas on my part. I bought this HP Deskjet 3050 a week ago and have been waging war with it ever since. I'd be really grateful if someone could possibly advise on how I can resolve this.
I am unable to connect the printer to my secured wireless network, even though other computers, cell phones, etc. are connected without issue. I have tried WPA, WPA2 and WPA2-Mixed security modes with the same failure. Specifically, the connection wizard reaches 66% and then displays the error that the wizard is unable to find network/printer. If I disable the security, the printer connects fine.
I'm using a Linksys WRVS4400N router with firewall and associated firewall settings disabled. The router is broadcasting on 802.11G/N mixed mode.
I'm installing the software supplied on the setup CD on a Windows XP SP3 system. I have confirmed that the network the PC and printer are connected to are the same.
A question as well, if I may: I haven't tried these drivers yet but I see there are updated drivers for the printer dated 14/12/2010. The release notes indicate improved networking, but don't elaborate beyond this. Does anyone know if there was a known problem with connecting to secured networks that has now been fixed?
Finally, just a note that I'm partially sighted and am using a screen reader on all systems. I'll try my best to be as helpful as I can but please do excuse me if I occasionally can't find settings, etc. on screen and need a bit more detailed help.
Thanks in advance for your help, which I really will appreciated.
Have a pleasant day,
All the best for now and take care,
Hussein.
It's not the fact it can't be done, it's the fact it hasn't been done, yet.
This question was solved.
View Solution.

HI,
firstly, apologies for the delay getting back to you. Poor health has meant I've had little time nor inclination to do much on the computer side of htings.
Anyway, I'm please to say the problem with the HP 3050 failing to connect to my network is now solved. It seems to be a bug with the setup software, and that seems to include the latest version posted Dec 2010.
To resolve the problem, I did the following:
1. Disable all security options for the network, so it's just an open network.
2. Connect the HP 3050 to the network using the setup wizard. This time it connected OK for me.
3. Locate the printer's IP address. I used the client list table accessed through my router's interface. You may be able to get this through the printer's on-screen menu, but as I'm partially sighted, this wasn't an option for me.
4. Log into the printer's control panel at http://ip.address.of.printer e.g. http://192.168.2.108
5. Under the advanced options, configure the settings for the network, including security protocol and passphrase. Remember to enter the SSID of the network exactly as configured on the router.
6. Apply the settings and log out of the printer's control panel.
7. Log back into the router's control panel and re-apply the security options. Be sure that they match those match those entered for the printer.
Hopefully this will be of use to others in the same position.
Thanks again for your time.
Best,
H.
It's not the fact it can't be done, it's the fact it hasn't been done, yet.

Bridge does not work for wireless clients - connecting to existing network.

Hi - I really hope somebody can help out here, after hours of trial & error, I have finally given up
I need to connect my Airport Extreme Base Station to my existing network. I have a linksys router (192.168.15.1) connected to my modem and this linksys router acts as DHCP server too.
I suppose I have to use "bridge mode" for that to work. But should the linksys be connected to the AEBS using the AEBS's WAN or LAN port?
If I use "bridge mode", then wired computers to the AEBS works fine - getting an IP from the linksys etc. BUT, the wireless clients will have a self-assigned IP and not get through to the internet. It's like the AEBS will not allow wireless clients to "get through" unless AEBS itself is handing out IP addresses.
Page 36 of this manual ( http://manuals.info.apple.com/en/DesigningAirPort_Networks10.5-Windows.pdf ) shows the setup I want. But in the picture, it says "Ethernet WAN port" but the text says: "The Apple wireless device (in this example, a Time Capsule) uses your Ethernet network to communicate with the Internet through the Ethernet LAN port ( <--> )." I don't know which one to use, WAN or LAN - they show WAN but say LAN?
When I set it up as "share an IP address", the AEBS status tells me "double nat" and to change from "shared IP" to "bridge mode". I do that, and everything seems fine - for the wired clients. Now the wireless clients cannot connect, Airport on the MacBook Pro just say "Connection failed" and the MacBook says "Invalid password" (translated from danish), even though I set the Airport Utlity to save the password in keyring, so it should be correct... If I disable wireless encryption, the wireless clients will connect but get a self-assigned IP, and therefor not work (cannot get online)...
It seems the only way I can get wireless to work, is if I set AEBS up as DHCP, but then it won't be on the "same network" as the linksys (192.168.15.1), but rather on 10.0.x.x as I select. If I select 192.168.x.x within AEBS, I'm also getting some error messages, conflict/subnet thing.
Anyway - I really hope somebody knows how to get wireless clients to get an IP address from existing ethernet when connected to the AEBS.
Thanks!!

I've given up and had to go back to running "Double NAT" which also reports as a "problem" within the AEBS, but I just "ignore" it so the light will always be green.
It still ***** though, as "Double NAT" is also a reason for "Back to my Mac" not working properly, but how the ** am I supposed to avoid Double NAT when the wireless will not work in bridged mode?!

Use wireless router with existing network and switch?

I have an existing network using a T1 into a switch; all the computers and the server are connected to the switch. Some distance away, via ethernet cable to the switch, I would like to connect a wireless router, one computer wired to that router, and other computers connect via wireless. Our server provides DHCP. Is this possible? How best to do it? Which Linksys router would be best for the purpose? Thanks for the help!

The "correct" device to use would be a wireless access point like the Linksys WAPs and not a WRT router. WRT routers are supposed to connect to the internet on its own.
You can set up a WRT router as simple access point. see here for the setup.
The best router is the one which best suits your needs. All wireless routers and access point provide wireless access. It depends on what you want (802.11n, 11b, 11g, range, speed, etc.). The newer routers are better from the specifications but usually also have more firmware bugs. But that's pretty much all one can say based on your generic requirements.

Unable to connect to a secure wireless network - Event ID: 8002 Task Category: AcmConnection..., Event ID: 11006, Event ID: 11006

Hi,
I have a Dell Latitude E6440 running Win 7
Enterprise 64 on a domain. It will connect to any unsecured network, and it can see the secured network in the list when I click the wireless connection icon on the system tray. When I go to manage wireless networks, the secured network does not show
up (and thus, I cannot delete the network to try to re-add it). Normally, we would add the secure network here. I click Add, give the name in the correct syntax, add the needed information (WPA/2-Enterprise, EAS or TKIP), and hit Next, it immediately returns
with "An unexpected error occurred". A similar thing happens when I hit Connect from the list of available networks that pops up when I open the system tray icon: it says it was unable to connect, when I hit troubleshoot, it says that it could not
identify the problem. The event log shows the error below. I haven't been able to find any resolutions here or elsewhere that address the fact that I can connect to unsecured wireless networks, but not secured wireless networks.
Other notable troubleshooting steps:
Uninstalled/Reinstalled wireless adapter with the latest driver
Other laptops are able to access the same secure wireless network
The first WLAN-AutoConfig error in the event log was Event ID: 12013, attempting a 802.1x authentication. Then Event ID: 11006; stating "Explicit Eap failure received". After a few days of alternating all 3 errors, they started to only error on
Event ID 8002.
Log Name: Microsoft-Windows-WLAN-AutoConfig/Operational
Source: Microsoft-Windows-WLAN-AutoConfig
Date: 6/4/2014 11:53:55 AM
Event ID: 8002
Task Category: AcmConnection
Level: Error
Keywords: (512)
User: SYSTEM
Computer: [COMPUTERNAME.DOMAIN]
Description:
WLAN AutoConfig service failed to connect to a wireless network.
Network Adapter: Intel(R) Centrino(R) Advanced-N 6235 Interface GUID: {f27af762-dff8-4927-84e0-7f4ade30dcc9}
Connection Mode: Connection to a secure network without a profile Profile Name: [SECURE NETWORK NAME]
SSID: [SECURE NETWORK SSID]
BSS Type: Infrastructure
Failure Reason:The specific network is not available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WLAN-AutoConfig" Guid="{9580D7DD-0379-4658-9870-D5BE7D52D6DE}" />
<EventID>8002</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>24010</Task>
<Opcode>191</Opcode>
<Keywords>0x8000000000000200</Keywords>
<TimeCreated SystemTime="2014-06-04T16:53:55.956762800Z" />
<EventRecordID>1475</EventRecordID>
<Correlation />
<Execution ProcessID="432" ThreadID="5348" />
<Channel>Microsoft-Windows-WLAN-AutoConfig/Operational</Channel>
<Computer>[COMPUTERNAME.DOMAIN]</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="InterfaceGuid">{F27AF762-DFF8-4927-84E0-7F4ADE30DCC9}</Data>
<Data Name="InterfaceDescription">Intel(R) Centrino(R) Advanced-N 6235</Data>
<Data Name="ConnectionMode">Connection to a secure network without a profile</Data>
<Data Name="ProfileName">[SECURE NETWORK NAME]</Data>
<Data Name="SSID">[SECURE NETWORK NAME]</Data>
<Data Name="BSSType">Infrastructure</Data>
<Data Name="FailureReason">The specific network is not available.</Data>
<Data Name="ReasonCode">163851</Data>
<Data Name="ConnectionId">0x6</Data>
</EventData>
</Event>

check this article:http://technet.microsoft.com/en-us/library/cc735927(v=ws.10).aspx
also could contact your domain administrator to ask for help.

Hi, I am trying to print to an HP4050n via a secure wireless network. It prints but the default page setting sent to the printer is JIS B5. I have to hit the "Go" to get the printer to print. I have the correct setting in my Printer Settings (Letter).

I am attempting to print via a wireless (secure) network to an HP4050n printer. The document prints AFTER I choose "GO" on the printer. It is waiting as it wants me to load the JIS B5 paper/tray. I have the printer defined as Letter but in spite of that, it is requesting a different setting. I am thinking that because I am using the Generic PCL setting (I also tried the HP 4/5 PCL ) it is not communicating correctly. It does print once I get up and hit the GO button.
Any ideas? Thanks.

The paper size would normally be coming from the application rather than some setting in the driver. I've never seen the Generic PCL driver send a request for B5, but then I do use A4 rather than Letter and I don't have a PCL printer at home to check this. But I do think it has more to do with the application/document being printed.
For the application that you are using, is there are a separate Page Setup menu?
If the page and document is correctly set to Letter, you mention a wireless secure. If you mean something more than a wireless network that requires a password to access it, such as using https to connect to a remote server, then it could be settings for the shared printer queue. Although these shared printers are usually just an access point (throughport) for the remote client. Still, if you do have some additional network server for this secure wireless network, then this could be contributing to the incorrect paper size call.

Joining secure wireless network

I am trying to join a secure wireless network at work. I have added a secure network name. I am confused about which security profile to choose (WEP, WPA, LEAP...). I chose WPA personal and had the IT admin enter password without result.
Are there any documents that outline this process?
Many thanks

I am confused about which security profile to choose (WEP, WPA, LEAP...).
If you select the network name from the AirPort menu, it should prompt you a password and it will know the type of encryption being used.
Also... your IT admin should know the type of encryption. Why didn't he tell you what to use?
Other information in KB 106424, AirPort: Joining an encrypted wireless network.

Can I use the Airport Express to create a secure wireless network in a wireless-only hotel?

Can I use the Airport Express to log onto an unsecured hotel wireless network, without an ethernet cable, to create a secure wireless network for my MacbookAir, IPad, IPhone, etc.? If so, how is that done?

will the Airport Express allow you to log onto a hotel wireless network, and broadcast a secure wireless network in your room for your wireless devices, like the Ipad, Iphone, etc.?
The bottom line with a single AirPort Express is no.
The AirPort Express can only "extend" a wireless network when the network is being provided by another Apple router.
As you might imagine, it is extremely unlikely that that the hotel network....which no doubt uses professional wireless access points provided by a manufacturer of commercial systems.....would be compatible with an AirPort Express.
In many years of travel domestically and internationally, I cannot recall a time when a single AirPort Express would "extend" the signal provided by a hotel's wireless network.
However, if you had two AirPort Express devices handy, you might be able to configure one to "join" the hotel network and provide an Ethernet signal to the second AirPort Express, which would be configured to "create" your own "private" wireless network.

Time Capsule only runs with 1,1Mbit up/down during data transfer, internet speed is ok, TC is used to extend an existing network

Hello Everyone,
I have a new 2TB Time Capsule running with a MacBook Air. I want to use the TC to access data (Aperture library, iTunes library, other Files) and to backup my MacBook Air via Time Machine. I set it up, integrated the TC in my Network (FritzBox) by choosing "extend existing network" and it works. BUT only with 1.1Mbit/second while writing or reading Data to/from it. Internet speed is very good, like it was before. While the 1.1Mbit/second seem to be ok with Aperture and iTunes (streaming music and movies) it is still painfully slow and I'm not realy happy with that
I've read that:
The 1.1Mbit problem is pretty common when Time Capsule is integrated and used to extend a network (bridge modus), it also looses all ethernet connectivity then (that woul explain why connecting it by ethernet didn't help during initial setup and data transfer)
Is there a solution besides ditching the Fritzbox and using the TC to build the network? Because basicly I still need the Fritzbox for its DECT features.
Thank you for any help in advance and have a nice day,
Olli

You have double hop wireless with this setup..
You should bridge the TC.. that is router bridge not wireless bridge, and plug the TC into the Frizyboy by ethernet.
Then you can setup the TC wireless to reinforce the fritzy..
Same wireless name as SSID.
Same security settings... really should be WPA2 AES or in TC personal.
Same password..
Just different wireless channel.
Then you can use 5ghz on the TC if you are up close and personal.

Airport Base Station - setting up base station to already existing network

Hello,
I just replaced a network switch on the network. Since I did that I am unable to get Internet connection from our main base station in the server room that distributes the IP addresses. I did a reset to the base station and tried to get it to show on the already existing network, but I'm having some issues getting the base station configured with the other base stations on the network. How do I get this main base station to show up on our network?
Right now our other base stations are not getting valid IP addresses. The base station that is setup to distribute IP addresses is getting valid addresses from our provider. If someone could give me any suggestions I would appreciate it.
We are running Apple 10.2.4 on our network.

OK - starts to make sense now. If you did a factory reset of the base station then more than likely the airport network name for it is the Apple default name, and you probably lost the WDS in Wireless Mode.
Do you know the old network name and the network password? Do you know how the other 4 or 5 base stations were configured - ie as a WDS network and whether as relay or remote base stations. You should not need to change anything on these base stations if you know how your AEB (main) was setup in the first place.
One step back from this, you need to confirm that the DSL modem is connecting to your ISP. Connect the ethernet cable from the DSL modem to your Mac and confirm that you can log onto your ISP or internet. If it works then lets go onto the AEB you reset.
Apple publish setup manuals for their AirPort Base Stations - they can be downloaded at: http://support.apple.com/manuals/#airport
1. Reset your AEB to its factory default again.
2. Turn-off the AEB and connect one of its ethernet ports to your Mac by ethernet cable, and connect the DSL modem to the WAN port on the AEB by ethernet cable.
3. Power up your Mac, the DSL modem and the AEB and wait for all to complete their startup sequence. Then open AirPort Utility - you should see your AEB under a generic network name. Click on the AEB.
4. Use the auto setup procedure by clicking 'Continue'. Follow the onscreen instructions for setting up a new network. When asked, use the 'original network name' for your school network. When asked for a network password, use the 'original network password' for your school network (what sort of network security were you using - WPA2 Personal - use whatever you had previously.
5. At some stage you will also be asked to give the AEB a name and admin password - use whatever they were previously.
6. When the setup procedure is complete and the AEB finishes restarting, the AEB will reappear in AirPort Utility. Click on the AEB and click 'Manual Setup'. You may be asked for the admin password to get into the configuration profile.
7. Click on the 'Wireless' tab and set the 'Wireless Mode:' to 'Participate in a WDS network' if not already set to this. While in this pane, look at 'Channel:' - do you remember what this was set to previously (if not, you may need to connect one of the other AEBs by ethernet cable to a Mac and use AirPort Utility to check the Channel setting.
8. Now, click on the 'Internet' icon at the top of AirPort Utility. Check that 'Connection Sharing:' is set to 'Off (Bridge Mode)' - if not, change it.
9. Now, click 'Update' and wait for the AEB to restart.
10. Now, disconnect the ethernet cable from the Mac to the AEB ethernet port.
11. Open Airport Utility, and hopefully, you can now see the AEB and the other 4 or 5 base stations.
Let us know what happens.

Joining an existing network as a client

I've had an Airport Express for about 3 years...recently needed to reconfigure because of upgrade to my Belkin wireless router security.
I need the steps to join an existing network as a client, including providing the WPA password. I've been throught the setup guides...have gotten as far as a) connecting to the network using the Windows utility
b) seeing the AEBS in the Airport Admin utility
....but from this point, I'm lost.
Windows XP Home, SP2.
Thank you.

Hello showbizkid41. Welcome to the Apple Discussions!
To set up the AirPort Express Base Station (AX) as a "Wireless Client," using the AirPort Admin Utility, either connect to the AX's wireless network or temporarily connect your computer directly (using an Ethernet cable) to the Ethernet port of the AX, and then, try these settings:
AirPort tab
o Base Station Name: <whatever you wish or use the default>
o Wireless Mode: Join an Existing Wireless Network (Wireless Client)
o Wireless Network: <type in your wireless network name or select it from the pop-up menu>
o Wireless Security: WPA Personal
o Password: <enter your wireless network security password or key>

Secure wireless authentication

I have just been reading all the posts about secure wireless access and I am
not happy with the direction Novell has chosen to take.
I have been extremely pleased with Netware, GroupWise & ZenWorks but Novell
is starting to loose it's appeal.
Let me summarize what I have learned and see if I have made any mistakes
with my understanding.
1. Novell has stopped development on their Radius server and have no plans
to resume development.
2. Novell contributed code to the open source FreeRadius project.
http://www.novell.com/news/press/arc...2/pr05008.html
3. There isn't any Radius server with 802.1x authentication that runs on
Netware (Netware kernel).
a. Novell's Radius server (BMAS or the newer NMAS server) doesn't do
802.1x authentication.
b. I have contacted Funk and this is their reply. Steel-Belted Radius
Server will run on Windows and Solaris (Linux is coming).
http://www.funk.com/News&Events/sbr_linux_pn.asp
c. MTG House hasn't gotten back to me about a solution for Netware. (I
am doubtful, I didn't find anything on their website.)
4. You need to run a Radius server that does 802.1x authentication and will
work/integrate with eDir.
a. FreeRadius (Linux) will integrate with Edir.
http://www.novell.com/documentation/...ius/index.html
http://www.novell.com/coolsolutions/feature/15383.html
b. Funk's Steel-Belted Radius server (Windows, Solaris & Linux is in
beta).
http://www.funk.com/radius/default.asp
c. Aegis Server
http://www.mtghouse.com/products/aeg...er/index.shtml
5. You need a 802.1x Client to authenticate to a Radius server for wireless
authentication.
a. Microsoft has 802.1x support in their client. (read this from other
posts in this forum)
b. Novell isn't planning on putting 802.1x support in the NW Client.
(read this from other posts in this forum)
c. There are 2 Radius clients that integrate with the NW Client for
Radius Edir authentication.
1. Funk's Odyssey Client ($45 - $50 per workstation depending on
quantity) + added annual maintenance costs.
$2281.25 for 50 Client licenses & annual maintenance.
http://www.funk.com/radius/wlan/wlan_c_radius.asp
2. Aegis' Client ($32 - $39.99 per workstation depending on
quantity) + added annual maintenance costs.
$2240.00 for 50 Client licenses & annual maintenance.
http://www.mtghouse.com/products/aeg...nt/index.shtml
http://www.mtghouse.com/novell_app_note_122204.pdf
3. When FreeRadius is integrated with Edir is this separate client
still needed?
I didn't see anything about a separate client being needed while
reading the Integrating FreeRadius with Edir documentation.
6. FreeRadius support is going to be built-in to the next version of Edir.
http://www.novell.com/news/press/arc...2/pr05008.html
Why didn't Novell contribute code to port FreeRadius to Netware?
At this point in time they are still giving us a choice between the Netware
kernel and the Linux kernel. To me that says they are willing to make
things work with both systems until they drop support for the Netware
kernel. Ok, so give me support for 802.1x authentication in the Netware
kernel. I don't have stray single purpose servers floating around my
network and I don't want to have to begin that practice just to get Radius
802.1x authentication working.
I also won't put my district at a disadvantage by upgrading to the Linux
kernel until I know Linux well enough to administer it properly. I am the
IT department at this district so I don't have a great deal of extra time to
run about learning the new things I would LOVE to learn. I'm sure I'm not
the only person in this situation so Novell should take these things into
concideration before they just drop support for a product they say they are
still supporting. Obviously all of the real support is going toward the
Linux side at Novell.
Daniel Blake
Milford Central School

Ok, I'll give them the benefit of the doubt and say fine the Netware kernel
might as well be considered dead. So they are giving me support via
FreeRadius if I just migrate to OES (Linux). Ok, I might/can live with that
as a Novell decision.
But that still doesn't explain why they don't give us some client to log in
via 802.1x. Giving us the server but not the client is like giving us a
locked door without a key. That's just plain stupid. I would rather stay a
Netware - OES shop, but if Novell can't think something this simple through
then I'm a little nervous about staying with them. What could they think up
next?
I guess Novell has decided to port all it's software to Windows cause it
sucks so bad at business decisions. GroupWise & ZenWorks run completely on
Windows now, so why do I need OES at all? Except for complexity &
integration issues of course. I mean why would I need to purchase Edir for
Windows if I didn't stay with OES? Or Nsure Identity Manager for that
matter. So if we start looking deeper into this we see Marketing all over
this thing. Novell Marketing has always done such a good job for Novell.
Novell has given me a real choice that will work though. If I migrate
completely to a Windows network it just works without any added costs. Heck
it even makes my installs easier without having to install the NW Client on
every new workstation. I can still run ZenWorks & GroupWise too.
Now, how is Novell Marketing going to screw up and make me hate GroupWise &
Zenworks so I migrate completely away from Novell products? Way to go
Novell!
Daniel Blake
Milford Central School
"Jim Michael" <[email protected]> wrote in message
news:[email protected]...
> mcsdtech wrote:
>
>> 1. Novell has stopped development on their Radius server and have no
>> plans to resume development.
>
> Correct, so far as we know.
>
>> 2. Novell contributed code to the open source FreeRadius project.
>> http://www.novell.com/news/press/arc...2/pr05008.html
>
> Yes. Code to allow easier integration with eDirectory.
>
>> 3. There isn't any Radius server with 802.1x authentication that runs on
>> Netware (Netware kernel).
>
> Correct.
>
>> a. Novell's Radius server (BMAS or the newer NMAS server) doesn't do
>> 802.1x authentication.
>
> Correct. It was developed quite a while before 802.1x even existed.
>
>> b. I have contacted Funk and this is their reply. Steel-Belted
>> Radius Server will run on Windows and Solaris (Linux is coming).
>> http://www.funk.com/News&Events/sbr_linux_pn.asp
>
> Correct, but Stell-Belted Radius is probably the last solution I would
> look at. Radiator is a commercial product that runs on Linux or Windows
> (it is Perl-based) and you will get far better support from them on
> eDirectory issues and general Radius problems. freeRADIUS is what I would
> run on Linux if you don't want to spend a dime on the software.
>
>> c. MTG House hasn't gotten back to me about a solution for Netware.
>> (I am doubtful, I didn't find anything on their website.)
>
> Not familiar with them.
>
>> 4. You need to run a Radius server that does 802.1x authentication and
>> will work/integrate with eDir.
>> a. FreeRadius (Linux) will integrate with Edir.
>> b. Funk's Steel-Belted Radius server (Windows, Solaris & Linux is
>> in beta).
>
>> c. Aegis Server
>
> And Radiator (what I run) http://www.open.com.au This is the solution we
> run.
>
>> 5. You need a 802.1x Client to authenticate to a Radius server for
>> wireless authentication.
>
> Correct.
>
>> a. Microsoft has 802.1x support in their client. (read this from
>> other posts in this forum)
>
> Correct. Technically, the "support" is in Windows, not the MS client.
>
>> b. Novell isn't planning on putting 802.1x support in the NW Client.
>> (read this from other posts in this forum)
>
> Correct.
>
>> c. There are 2 Radius clients that integrate with the NW Client for
>> Radius Edir authentication.
>> 1. Funk's Odyssey Client 2. Aegis' Client ($32 - $39.99 per
>> workstation depending on
>
> Correct.
>
>> 3. When FreeRadius is integrated with Edir is this separate
>> client still needed?
>
> Yes. You ALWAYS need a 802.1x supplicant (client) on the workstation.
> Windows has one built-in, which works FINE against eDirectory. HOWEVER,
> because of the way it works you must log into eDirectory *after* fully
> logging into windows. That is unacceptable to most organizations (you
> would have to manually log in and map drives to NW, etc). This is why
> there are third-party clients that integrate specifically with the NetWare
> client.. they allow the 802.1x authentication to "insert" itself
> in -between the Windows and eDirectory login, thus preserving all of the
> normal features like dynamic local user, zen policies, etc.
>
>> I didn't see anything about a separate client being needed
>> while reading the Integrating FreeRadius with Edir documentation.
>
> A client is always assumed.
>
>> Why didn't Novell contribute code to port FreeRadius to Netware?
>
> Because Novell's future direction is Linux, and there isn't much demand
> for a NetWare Radius server.
>
>> At this point in time they are still giving us a choice between the
>> Netware kernel and the Linux kernel. To me that says they are willing to
>> make things work with both systems until they drop support for the
>> Netware kernel. Ok, so give me support for 802.1x authentication in the
>> Netware kernel. I don't have stray single purpose servers floating
>> around my network and I don't want to have to begin that practice just to
>> get Radius 802.1x authentication working.
>
> You can always make your wishes known at
> http://support.novell.com/enhancement
>
>> I also won't put my district at a disadvantage by upgrading to the Linux
>> kernel until I know Linux well enough to administer it properly. I am
>> the IT department at this district so I don't have a great deal of extra
>> time to run about learning the new things I would LOVE to learn. I'm
>> sure I'm not the only person in this situation so Novell should take
>> these things into concideration before they just drop support for a
>> product they say they are still supporting. Obviously all of the real
>> support is going toward the Linux side at Novell.
>
> I understand the frustration, but I doubt things will change. There is a
> big difference between "supporting" existing products and adding major
> enhancements to products to support new standards. I just don't think
> Novell believes it is worth dedicating development resources to enhancing
> Radius on NetWare, for those few that can't/won't run a Linux or Windows
> box where the software already exists.
>
>
> --
> Jim
> NSC SYsop

Secure wireless on existing network

Similar Messages

Maybe you are looking for