Win XP PEAP - AP - WLSE express - AD

Hello
I'm trying to set up the following configuration:
- Windows XP client connects to 1130 AP using PEAP with EAP-MSCHAP using the computer account
- AP use WLSE express RADIUS server for authentication
- WLSE express use Windows AD to verify computer account
Is there an example for this configuration?
thanks in advance
Thomas

The procedure for enabling EAP based authentication on the AP is the same for all EAP variants. This document has all the information to enable EAP authentication with a RADIUS server.
http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_example09186a00801bd035.shtml

Similar Messages

WLSE Express with PEAP

Hi All,
We are playing with an WLSE 1030 in combination with PEAP. We think we have a certificate mismatch somewhere. Users are getting a pop-up for there username and password, but get not authenticated.
We imported a CA cert, Server cert and an pvk file with the private key which seems to be correct.
Is someone having a procedure to configure the WLSE Express with PEAP?
Thanks in advance.

I am having a problem importing the certificate to the WLSE Express. Here is teh error that i am getting:
An error has occurred. Please try again or contact an administrator. The error message is:
A validation error has occurred /Radius/Services/cisco-peap/ServerRSAKeyFile: The Server RSA private key cannot be loaded from PEM:/cisco-ar/certs/cisco-peap/server-key.pem. Verify that it contains a valid PEM encoded Server RSA key and that the private key password is correct
Any help would be greatly appreciated.

Can not Authenticate WLSE Express with Active Directory

Hi ,All
I can not authenticate WLSE Express using external database with AD. I have downloaded the agent to the Domain Controller and install it on AD.
At WLSE Express I found log
"Error Server 0 RemoteDomainAuth server domain-auth: Agent API encountered error (1)"
"Error Server 0 Service domain-auth has no active remote servers available"
"Warning Protocol 0 Request from AP101 (10.224.20.143): User insee-wds rejected (ServiceUnavailable)"
"Warning Protocol 0 Request from AP101 (10.224.20.143): User insee-wds rejected (InternalError)"
maybe something wrong on AD ,
If anyone has an idea , please help me.
Thankss.

I got the problem like you.
Do you have any solution to solve this issue?
If you have, please e-mail or post to me and everybody who be like this.
Thank you so much.

Authenticating 1300 Bridges to WLSE Express

I'm curious how I can authenticate my 1300 bridges as a client to a WLSE Express.. The WLSE Express does have a built in AAA server and i've created the usernames, but, i'm not sure where in the 1300 I can assign it to authenticate to the WLSE..
My question I guess is, do I need to point these bridges to authenticate to the Root Bridge, and configure a RADIUS association between the Root Bridge and the WLSE Express? Also, where abouts on the Non-Root bridge (or Workgroup) do I configure this?
Any help would be appreaciated.
Thanks,
Jamie

Administratively Standalone - Active defines that this is the active WDS in WDS domain.
Active, backup, or candidate. If the state is backup, the command (show wlccp wds) also displays the current WDS access point's IP address, MAC address, and priority.
You can configure the WLSE 1030 internal AAA server to authenticate infrastructure APs.
http://www.cisco.com/en/US/customer/products/sw/cscowork/ps3915/products_user_guide_chapter09186a008052dbfd.html

WLSE Express 2.13 SNMP unreachable

Hi,
Has anyone had trouble with SNMP querying Aironet access points with WLSE Express 2.13? Everything was fine with version 2.12 - I could SNMP query and SNMP discover all my access points. After upgrading the WLSE Express to 2.13, I have a few access points that are now SNMP unreachable. I can reach some APs and other APs are SNMP unreachable. The configurations of all the APs are standardized - all lines pertaining to SNMP are the same.
Any clues or tips? Is this a bug with version 2.13?

What do the SNMP Reachable Test in WLSE come back with for the APs in question?.

Is there a way to configure win 8 Laptop to airport express? I can see theN connection to the wireless network, but troubleshooter suggests there's t

Is there a way to configure win 8 Laptop to airport express? I can see the connection to the wireless network, but troubleshooter suggests there's there is no gateway and of course no internet. The connection
shows limited. Any help you could provide would be most appreciated. Further, should I simply buy another router for the windows machine? If I did that, would it interfere with the airport?

The internal HDDs must be formatted in either EXT3 or EXT4 file system because NSS uses Linux OS. This is mainly because the RAM designed to fit with the customized Linux OS's size.
You can connect to an external HDD via a USB or eSATA port. The external HDD's file system can be NTFS, FAT32, AFT or EXT3/4 to be recognized for read/write. You can connect a 2TB USB/eSATA drive connec to the NSS via USB port to format your HDD for NTFS, AFT, FAT32, or EXT3/4 partition.
You can join the NSS to a Windows domainr so all domain users to access NSS. You cannot replace the NSS for the Windows 2003 SP2 server. They are two different products and do different jobs. Windows server is features sets server while the NSS is the files/data server.
Hope that helps!!

WLSE Express - OpenSSL certificate translating issue

Does anyone have suggestions for converting a .PFX file to .PEM? I can't unzip / am getting an error when trying to install the latest version off of www.openssl.com. I need to perform this conversion for WLSE to accept the certificates. (This is needed for WLSE Express to become a AAA Radius server.) Thanks. Russ

When you install an SSL certificate on a BBSM server, it enables visitors to verify the site's authenticity and communicate with it securely through SSL encryption, which protects confidential information, such as credit card numbers, online forms, and financial data from interception and hacking.
This protection is accomplished by using "HTTPS" when coding the page sets. SSL comes in two strengths, 40 bit and 128 bit, which refer to the length of the "session key" that every encrypted transaction generates. The longer the key, the more difficult it is to break the encryption code.
If you are using RADIUS or credit card page sets, you must install an SSL certificate for end users to gain access to the Internet.

Win 7 Zune to Airport Express

Hi everyone can you please help me with something? I'm having trouble with something, I've used Airport Express Streaming Music via iPhone 4 and MacBook Pro, so far it's been great but I have a question. I have Win 7 on my Dell and I wanna ask if my HTC WIN PHONE & Zune (Windows iTunes) can stream through Airport Express? Please help me...

Hello:
This is the link to available downloads:
http://support.apple.com/downloads/#airport%20express
Barry

Cant print from Win XP and Win 7 machines using Airport Express

I have two airport expresses each hooked to a printer. Both are ini ethernet mode only; wireless is turned off. With our two Macbooks, all works perfectly; it was foolproof to set-up and both macbooks can priunt to either printer at will.
We have a Win 7 laptop; oddly, it will only print to one of the two printers
We have a Win XP desktop, it wont print to either printer.
In boht cases on the windows machines, I can see the airport expresses and I can configure3 them using the utilty. I can install the printers using the Bonjour Printer Wizard. Bonjour itself is running on each machine....I can tell as itunes home sharing works perfectly and I can see it as a "Service".
But when I try to print a document, it just never comes out!
I have Geek Squad coming next week....by nice if I could fix it before they get here!

Unfortunately, not all USB printers are compatible with AirPort base stations. In addition, the AirPort's USB port does not support the "advanced" printer functions, like scanning, copying or faxing, of multi-function printers.
To see if your printer is compatible, take a look at thisiFelix Unofficial AirPort Printer Compatibility link. If your printer isn't listed, it doesn't necessarily mean it won't work, but simply that it has not been verified. iFelix also provides the following workaround for printers not on the list that would certainly be worth a try.
Also you can try this Apple Tech Support article to see if it will help: Printer troubleshooting for AirPort Base Stations and Time Capsule
Finally, check out this IBM support article to see if your printer is listed as having a Postscript or PCL3 interface. If it does, then it will most likely work with the AirPort's USB port. Printers that use the "HP LIDIL" interface must be connected to a computer directly and will not work.

Win 98 laptop on airport express

Hi, i got a working aiport express here with a g4 on it, id like to add my win 98 laptop to it so it can have internet and filesharing
i use a asante aerolan pcmcia card. The card can connect to the network, but it never gives my laptop an IP. Im a bit unsure what im doing wrong.
it is using 64 bit WEP. the asante card gives me an option to enter a passphrase, and thats where ive been typing in the password that the g4 uses to get on the network.
I dont have the password to the base station itself, is that the password i need? if so, i need to reset my password on it then eh?
thanks for any insightful info.

it is using 64 bit WEP. the asante card gives me an
option to enter a passphrase, and thats where ive
been typing in the password that the g4 uses to get
on the network.
You can't use the passphrase you need to use the ten character HEX key.
Accessing a Airport Network with a Windows 98 PC or laptop
http://www.ifelix.co.uk/tech/1019.html
One of the problems with WEP is that the actual standard relies on a 10 character HEX key for 40bit WEP and a 26 character HEX key for 128bit WEP.
In order to make things easier for people, vendors use certain algorithms to convert simple alphanumeric passwords (or passphrases) into HEX keys, thus enabling people to use simple memorable WEP password rather than lengthy HEX keys.
The problem is that different vendors use different algorithms to generate the HEX key and therefore a ASCII password on an AEBS will be hashed differently on a Netgear client and vice versa.
One thing is a 13 character 128 bit WEP password will be hashed by all vendors in the same way (if you use 40bit WEP then a 5 character password is required).
Though sometimes not even that works and the HEX key must be used regardless.
iFelix

Trouble connecting to internet on Win Vista machine through Airport Express

Hey all,
I have an Airport Express set up in my apartment and it works well. The problem is that my roommate, who has a laptop running Windows Vista, cannot connect to the internet. He can connect to our wireless network, and the signal strenghth is "excellent" but he cannot get an internet signal. I've tried running Airport Utility and it says an error occurred while trying to connect with the error code -6753.
I'm absolutely hopeless with Windows networking. Does anyone have any tips?

First thing is to contact your ISP and ask them for help. Simple issues could be: you need to restart the cable / dsl modem so it synchs to the AE; they may need to enter the actual MAC address of the router on the network (not as common now).

Diffrence between WLSE and WLSE express

Hi all,
We have 110 AP cisco and we look to bye a solution to helps us to manage ans troubleshoot our networks, we are looking for soltion ciscoworks.
what is difference between Wireless LAN Solution Express and Wireless LAN Solution .
Best regard

The main differences are device scalability, hardware differences like CPU, RAM, HD etc. See the docs for more details on this.

WLSE Express

Hello,
have 8 point to point links with bridges 1310, my question is whether the WLSE can manage and monitor the bridges 1310. (1310 in bridge mode)?
regards,

According to this Cisco doc it can: http://www.cisco.com/en/US/prod/collateral/netmgtsw/ps6380/ps6563/ps6379/prod_qas0900aecd80336a51.html

PEAP username format

I just setup PEAP (MS-CHAP) for wireless authentication from Windows XP client to WLSE express RADIUS server using Windows Domain Authentication. We installed Remote-Agent-ACSse on a domain controller. Everything works fine if we enter username and password without domain name on the XP client. If we enter domain name or use single sign on, XP sends the username in the format <domainname>/<username> (to see in RADIUS debug log on AP) and the authentication fails on the Remote-Agent-ACSse service. If we enable 'authenticate as computer ...' XP sends username in the format host/<hostname>.<domainname> and authentication also fails.
Any idea how to solve this problem?

I think you are running into the same problem i am running into. My Authentications is rejected once it has \ i can't seem to find a solution also. I changed my configuration to use LDAP instead of Windows Domain Authentication and the same thing happens. If i use Aironet Desktop Utility it works fine because the username is simply sent as without the domain.I have a TAC case with cisco and still waiting feedback.

Wlse internal radius server

it is possible to use wlse internal radius server to authenticate users with LEAP.

When you say it should use LEAP is this what you have configured on the phone? The WLSE Express can configure and use more than one of the authentication services at the same time. If more than one service is configured, the WLSE negotiates which one to use. Where are you seeing it is using Cisco-PEAP instead of LEAP? Can you attach these?

Win XP PEAP - AP - WLSE express - AD

Similar Messages

Maybe you are looking for