WPA/WPA2 on Cisco 1042N AP

Hi Guys,
I need to configure WPA or WPA2 authentication on cisco 1042N access points. But I believe that for this requirement I need to have either an internal or external RADIUS server, but my customer want to just a normal WPA/WPA2 authentication like what we configure on cisco WAP200 or WAP4410 accesspoints, is there any work arounds to configure WPA/WPA2 authentication in a simpler manner rather than configuring RADIUS server option? Please advise.
Regards,
Suthakar

you don't need a RADIUS server to do WPA/WPA2. RADIUS is only needed if you are looking to do 802.1x for your authentication.
To do WPA2/AES
dot11 ssid TEST
authentication open
authentication wpa version 2
wpa-psk ascii 0 12345678
Interface Dot11Radio0
encryption mode ciphers aes
Steve

Similar Messages

Cisco W-Phone 7925G WPA/WPA2

i am trying to configure WPA/WPA2 pre shared key security for the 7925G series wireless phones
and having wism module (4400) as a controller,
controller side i have configured security wpa with encryption tkip........... and wpa2 with aes
laptops connects normally but cisco wireless phone 7925G just show in security configuration
statis wep
leap
peap
eap-tls
etc etc etc
but not showing and wpa or wpa2 security typ
i have attached phone's firmware in attached
please see and give your feed back
that how i can make it work
thanks

Have you selected akm ?
Configuring the Pre-shared Key
When using Auto (AKM) with WPA Pre-shared key or WPA2 with Pre-shared key for authentication, you must configure a Passphrase/Pre-shared key in the Wireless Security Credentials area.
Pre-shared Key Formats
The Cisco Unified Wireless IP Phone 7925G supports ASCII and hexadecimal formats. You must use one of these formats when setting up a WPA Pre-shared key:
Hexadecimal
For hexadecimal keys, you must enter 64 hex digits (0-9 and/or A-F); for example, AB123456789CD01234567890EFAB123456789CD01234567890EF3456789C
ASCII
For ASCII keys, you must enter a character string that uses 0-9, A-Z (upper and lower case), including symbols and is from 8 to 63 characters in length; for example, GREG12356789ZXYW
To set up a Pre-shared key in the Wireless Credentials area, follow these steps:
Sent from Cisco Technical Support iPad App

IOS 5 can't connect to WPA/WPA2 Enterprise Wireless Network

After upgrading multiple iPhone 4 (CDMA versions) to IOS 5.0, I have not been able to get them to connect to our WPA/WPA2 Enterprise wirless network. We use a Cisco Wireless LAN Controller. The wireless network is capable of doing WPA or WPA2 Enterprise with PEAP. These phones all connected to this network fine before the upgrade.
When connecteding to the network, it prompts me for the username and password and when I tap join it sits for about 10-15 seconds then says "Unable to join the network" with a Dismiss button.
It connects to non-Enterprise networks just fine. I have tested it on WPA Personal and WPA2 Personal networks and it has worked on several without issue.
I have tried "forget this network" with no success.
Is anyone else having this problem? I know of at least three Verizon iPhone 4's that have this exact same problem. I haven't seen one working with this configuration yet.

I have the same problem:
Cisco WLC's -> WPA2 Enterprise AES + EAP-PEAP 802.1x with CCKM
Pre 5.0 - all worked fine
Post 5.0 - it tries to connect and after few moments i get error - couldn't connect.
Info from controller:
10/17/2011 12:16:37 CEST           INFO           172.16.16.X           Sending EAP request to client from radius server. 6.f. ..l
10/17/2011 12:16:38 CEST           ERROR           172.16.16.X           Retransmitting EAP-ID request to client,retransmission timer expired. 5.y. ..l
10/17/2011 12:16:39 CEST           ERROR           172.16.16.X           Retransmitting EAP-ID request to client,retransmission timer expired. 5.y. ..l
10/17/2011 12:16:40 CEST           ERROR           172.16.16.X           Authentication failed for client as EAP ID request from AP reached maxmium retransmissions. 5.yp ..l
10/17/2011 12:16:40 CEST           ERROR           172.16.16.X           De-authentication sent to client. 5.oP ..l
10/17/2011 12:16:40 CEST           ERROR           172.16.16.X           5.yp ..l
10/17/2011 12:16:40 CEST           ERROR           172.16.16.X           EAPOL-key is invalid, scheduling client for deletion. 5.yp ..l
On the Radius server i don't see any activity regarding this device.
I had this network configured on my iPhone - after upgrade and restore it remembered it. Every time i was in vicinity of my Enterprise WLAN it tried to connect - resulting int express battery drain - 6-7 hrs and battery was empty from 100%

Wlc 5508: windows 8 can't connect using wpa+wpa2

Dear All,
I need your help.
My customer have Cisco WLC 5508 (cisco wlc 7.0.116.0) .
We create ssid with layer 2 security wpa+wpa2.
Using Windows 8, it's can't connect to the wireless lan.
But if I change, the ssid, with layer 2 security wep.
It can connect / connected.
Please help.
Thanks,
Jerri

This is a known issue with Windows 8. You need to upgrade your firmware to 7.0.250.X for wireless clients running Win8.
Another thing, choose one: Either WPA or WPA2. Don't enable one and "hope" the wireless client will make the choice because most of the time, they won't.

Wireless Networking - unable to select an encryption type for WPA/WPA2

I recently upgraded to 10.5.3 and didn't notice until now that Network preferences no longer provides an option for specifying the encryption method (TKIP or AES-CMP) for a new wireless network? I don't recall ever having had this issue before. Is this new to 10.5.3 or has this been a recognized problem prior to 10.5.3? I can only select from WPA Personal or Enterprise, WPA2 Personal or Enterprise (ignoring the WEP options here).
Is there another area of the OS that I can modify to change the encryption type?
This is weird...

While I was able to get WEP to work, it would only switch to WEP for both bands, and I wasn't too excited about this option. So to max out security, what I did was keep my dual band Airport Extreme running on WPA2 (5GHz N-only for all my Mac equipment; a wireless G for ipod touch). I then bought a linksys/cisco WRT54G2 for about $40 new from Amazon, and connected it with ethernet to the Airport Extreme base. Took a little fiddling to get it to behave as a bridge (can describe for you how I did this if you go down this route). But most importantly, maxed out security for WEP on this device by not broadcasting the SSID (don't on my other network either), having a very obscure SSID name (think strong password), set an equally obscure random password of all character types, setup up MAC filter so it could only be connected to my Pronto (and one of my notebooks for configuration). Also run it on a different 2.4ghz channel than the Airport Extreme to minimize conflict. Copied the info over to the Pronto config program (I use bootcamp to do this on my notebook), and everything works great. I do wish Apple gave us complete control over both bands (like the level of config I've done here), but the solution here was still pretty clean. My understanding is that Philips is planning to add WPA/WPA2 to Pronto capability by year-end (the connect/re-connect times are slower and they didn't want their products taking a performance hit, but I'd happily wait an extra second or two after picking up the remote to not expose my network via WEP). Hope that helps, but probably not what you wanted to hear. I found it a fairly quick and inexpensive workaround for now.

Difference Between Layer 2 Security and WPA & WPA2 Parameters

Hello Everyone, thank you everyone to read me again.
I have one questions about security WLAN configuration. I created one SSID when I configured the tab security I see this:
I'm not an expert how you can see but I thought that when you use WPA + WPA2 you will use an PSK to join the network.
I see I can use 802.1X in layer 2 security.
I don't really understand what the difference betwen this options. I mean if I use 802.1X for layer 2 security I need to stablish a WEP KEY?
IF I use a WPA +WPA2 for layer 2 security and 802.1X for Auth Key Managment I need to use a Radius?
Exist any documentation about this options?

Look at it this way.
WPA+TKIP
Uses pre shared key and is not supported by 802.11n
WPA2+AES
Also uses pre shared key and is supported by 802.11n
WPA+TKIP or WPA2+AES and 802.1x
Requires a radius server or the use of LDAP
Also requires a certificate
Server side certificate for PEAP and a server and client side certificate for EAP-TLS.
You also want to only use either WPA/TKIP or WPA2/AES, not both and don't mix and match.
Sent from Cisco Technical Support iPhone App

Access connections doesn't recognize NIC as WPA/WPA2 capable

In WZC my Cisco 802.11b NIC is recognized as connecting to my home WPA/WPA2 network but AC does not show the options at all in the wireless configuaration options. I have AC 5.02 installed. The only available wireless security options in the config screen are:
Use Static WEP keys
Use 802.1x EAP Cisco (LEAP)
Use 802.1x EAP Cisco (EAP-FAST)
Use Windows to Configure Wireless Network
I know AC 5.02 is capable of listing WPA options if a WPA card is recognized but in my case to the only recognition comes via WZC. I have the latest Cisco wireless driver v3.8.26.01 installed and working fine with WZC Any thoughts?
Message Edited by wayned on 11-07-2008 05:15 AM
IBM Thinkpad X31 - 2672-PXU
Intel 1.6Ghz, 2 GB Kingston RAM
Bios 3.02
Windows XP Pro SP3

You'd need to remove a few things before swapping the card, it's under the touchpad (UltraNav).
Instructions on how to go about it, as well as the list of compatible cards (just stay away from the ones that are "b" only) are available in the HMM:
http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=MIGR-46464
Hope this helps.
Cheers,
George
In daily use: R60F, R500F, T61, T410
Collecting dust: T60
Enjoying retirement: A31p, T42p,
Non-ThinkPads: Panasonic CF-31 & CF-52, HP 8760W
Starting Thursday, 08/14/2014 I'll be away from the forums until further notice. Please do NOT send private messages since I won't be able to read them. Thank you.

Wireless-Card doesn't not work with WPA/WPA2 but with WEP [Solved]

Hello I have a MacBook (late 2007) with a wireless-card from Broadcam, the card works with WEP and the classic configuration over rc.conf very well. But I can't get the card running with WPA and the net network-profiles.
Here is the link to the driver - http://www.broadcom.com/support/802.11/linux_sta.php
eth2 = wireless-card
eth1 = firewireanything
eth0 = wired-card
rc.conf
# /etc/rc.conf - Main Configuration for Arch Linux
# LOCALIZATION
# LOCALE: available languages can be listed with the 'locale -a' command
# HARDWARECLOCK: set to "UTC" or "localtime"
# USEDIRECTISA: use direct I/O requests instead of /dev/rtc for hwclock
# TIMEZONE: timezones are found in /usr/share/zoneinfo
# KEYMAP: keymaps are found in /usr/share/kbd/keymaps
# CONSOLEFONT: found in /usr/share/kbd/consolefonts (only needed for non-US)
# CONSOLEMAP: found in /usr/share/kbd/consoletrans
# USECOLOR: use ANSI color sequences in startup messages
LOCALE="en_US.utf8"
HARDWARECLOCK="UTC"
USEDIRECTISA="no"
TIMEZONE="Europe/Berlin"
KEYMAP="us"
CONSOLEFONT=
CONSOLEMAP=
USECOLOR="yes"
# HARDWARE
# MOD_AUTOLOAD: Allow autoloading of modules at boot and when needed
# MOD_BLACKLIST: Prevent udev from loading these modules
# MODULES: Modules to load at boot-up. Prefix with a ! to blacklist.
# NOTE: Use of 'MOD_BLACKLIST' is deprecated. Please use ! in the MODULES array.
MOD_AUTOLOAD="yes"
#MOD_BLACKLIST=() #deprecated
#MODULES=(sky2 snd-mixer-oss snd-pcm-oss snd-hwdep snd-page-alloc snd-pcm snd-timer snd snd-hda-intel soundcore)
# Scan for LVM volume groups at startup, required if you use LVM
USELVM="no"
# NETWORKING
# HOSTNAME: Hostname of machine. Should also be put in /etc/hosts
HOSTNAME="macbook"
# Use 'ifconfig -a' or 'ls /sys/class/net/' to see all available interfaces.
# Interfaces to start at boot-up (in this order)
# Declare each interface then list in INTERFACES
# - prefix an entry in INTERFACES with a ! to disable it
# - no hyphens in your interface names - Bash doesn't like it
# DHCP: Set your interface to "dhcp" (eth0="dhcp")
# Wireless: See network profiles below
eth0="eth0 192.168.1.220 netmask 255.255.255.0 broadcast 192.168.1.255"
INTERFACES=(!eth0 !eth1 eth2)
# Routes to start at boot-up (in this order)
# Declare each route then list in ROUTES
# - prefix an entry in ROUTES with a ! to disable it
gateway="default gw 192.168.1.1"
ROUTES=(!gateway)
# Enable these network profiles at boot-up. These are only useful
# if you happen to need multiple network configurations (ie, laptop users)
# - set to 'menu' to present a menu during boot-up (dialog package required)
# - prefix an entry with a ! to disable it
# Network profiles are found in /etc/network.d
# This now requires the netcfg package
NETWORKS=(wireless)
# DAEMONS
# Daemons to start at boot-up (in this order)
# - prefix a daemon with a ! to disable it
# - prefix a daemon with a @ to start it up in the background
DAEMONS=(syslog-ng network net-profiles netfs alsa crond portmap fam hal)
/etc/network.d/wireless
CONNECTION="wireless"
INTERFACE=eth2
HOSTNAME=macbook
IP="static"
IFOPTS="192.168.1.225 netmask 255.255.255.0 broadcast 192.168.1.255"
GATEWAY=192.168.1.1
DNS1=192.168.1.1
# Wireless Settings (optional)
ESSID=3Com
#KEY=
IWOPTS="mode managed essid $ESSID channel 11"
#WIFI_INTERFACE=wlan0 # use this if you have a special wireless interface
# that is linked to the real $INTERFACE
#WIFI_WAIT=5 # seconds to wait for the wireless card to
# associate before bringing the interface up
USEWPA="yes" # start wpa_supplicant with the profile
WPAOPTS="" # use "" for normal operation or specify additional
# options (eg, "-D ipw")
# see /etc/wpa_supplicant.conf for configuration
Can I set here the WPA/WPA2-Key also? Why here ESSID? Do I need still a configuration in wpa_supplicant.conf?
Thats very confusing and not explained.
WPAOPTS? Do I need to add something like "-D wext"?
/etc/wpa_supplicant.conf
# This is a network block that connects to any unsecured access point.
# We give it a low priority so any defined blocks are preferred.
ctrl_interface=DIR=/var/run/wpa_supplicant GROUP=wheel
network={
key_mgmt=NONE
priority=-9999999
network={
ssid="3Com"
proto=WPA
key_mgmt=WPA-PSK
pairwise=CCMP TKIP
group=CCMP TKIP
psk="topsecret"
priority=5
# WPA2
# proto=WPA RSN
I need help. Please
Last edited by hoschi (2009-01-04 20:21:58)

fwojciec wrote:If this info is not in the wiki it might be worth it to add it -- it's all detailed in /etc/network.d/examples/complete.example though.
Thats the reason why I was so confused.
My new and well working configuration:
# /etc/rc.conf - Main Configuration for Arch Linux
# LOCALIZATION
# LOCALE: available languages can be listed with the 'locale -a' command
# HARDWARECLOCK: set to "UTC" or "localtime"
# USEDIRECTISA: use direct I/O requests instead of /dev/rtc for hwclock
# TIMEZONE: timezones are found in /usr/share/zoneinfo
# KEYMAP: keymaps are found in /usr/share/kbd/keymaps
# CONSOLEFONT: found in /usr/share/kbd/consolefonts (only needed for non-US)
# CONSOLEMAP: found in /usr/share/kbd/consoletrans
# USECOLOR: use ANSI color sequences in startup messages
LOCALE="en_US.utf8"
HARDWARECLOCK="UTC"
USEDIRECTISA="no"
TIMEZONE="Europe/Berlin"
KEYMAP="us"
CONSOLEFONT=
CONSOLEMAP=
USECOLOR="yes"
# HARDWARE
# MOD_AUTOLOAD: Allow autoloading of modules at boot and when needed
# MOD_BLACKLIST: Prevent udev from loading these modules
# MODULES: Modules to load at boot-up. Prefix with a ! to blacklist.
# NOTE: Use of 'MOD_BLACKLIST' is deprecated. Please use ! in the MODULES array.
MOD_AUTOLOAD="yes"
#MOD_BLACKLIST=() #deprecated
#MODULES=(sky2 snd-mixer-oss snd-pcm-oss snd-hwdep snd-page-alloc snd-pcm snd-timer snd snd-hda-intel soundcore)
# Scan for LVM volume groups at startup, required if you use LVM
USELVM="no"
# NETWORKING
# HOSTNAME: Hostname of machine. Should also be put in /etc/hosts
HOSTNAME="macbook"
# Use 'ifconfig -a' or 'ls /sys/class/net/' to see all available interfaces.
# Interfaces to start at boot-up (in this order)
# Declare each interface then list in INTERFACES
# - prefix an entry in INTERFACES with a ! to disable it
# - no hyphens in your interface names - Bash doesn't like it
# DHCP: Set your interface to "dhcp" (eth0="dhcp")
# Wireless: See network profiles below
eth0="eth0 192.168.1.220 netmask 255.255.255.0 broadcast 192.168.1.255"
INTERFACES=(!eth0 !eth1 !eth2)
# Routes to start at boot-up (in this order)
# Declare each route then list in ROUTES
# - prefix an entry in ROUTES with a ! to disable it
gateway="default gw 192.168.1.1"
ROUTES=(!gateway)
# Enable these network profiles at boot-up. These are only useful
# if you happen to need multiple network configurations (ie, laptop users)
# - set to 'menu' to present a menu during boot-up (dialog package required)
# - prefix an entry with a ! to disable it
# Network profiles are found in /etc/network.d
# This now requires the netcfg package
NETWORKS=(3com)
# DAEMONS
# Daemons to start at boot-up (in this order)
# - prefix a daemon with a ! to disable it
# - prefix a daemon with a @ to start it up in the background
DAEMONS=(syslog-ng network net-profiles netfs alsa crond portmap fam hal)
CONNECTION="wireless"
DESCRIPTION="Very verbose complete wireless example"
INTERFACE=eth2
HOSTNAME=macbook
# Interface Settings (use IP="dhcp" for DHCP)
IP="static"
IFOPTS="192.168.1.225 netmask 255.255.255.0 broadcast 192.168.1.255"
GATEWAY=192.168.1.1
# DNS Settings (optional)
DOMAIN=localdomain
DNS1=192.168.1.1
DNS2=
SEARCH=
# Standard Wireless Settings
ESSID=3Com
SECURITY=wpa-config # One of wep, wpa, wpa-config, none
KEY=""
# Scans to see if network is available before connecting (reccomended)
SCAN="YES"
# Time to wait to connect to a network. Default 15.
TIMEOUT=10
# Pass *custom* options to iwconfig. Usually not needed (optional)
IWOPTS="mode managed essid $ESSID channel 6 key restricted $KEY"
# Any extra arguments for wpa_supplicant
WPA_OPTS=
# For SECURITY='wpa-config' only - filename of a wpa-supplicant config
WPA_CONF=/etc/wpa_supplicant.conf
# This is a network block that connects to any unsecured access point.
# We give it a low priority so any defined blocks are preferred.
ctrl_interface=DIR=/var/run/wpa_supplicant GROUP=wheel
network={
key_mgmt=NONE
priority=-9999999
network={
ssid="Linksys"
proto=WPA RSN
key_mgmt=WPA-PSK
pairwise=CCMP TKIP
group=CCMP TKIP
psk="areulookingatmybreasts"
priority=5
network={
ssid="3Com"
proto=WPA
key_mgmt=WPA-PSK
pairwise=CCMP TKIP
group=CCMP TKIP
psk="nomam"
priority=5
# WPA2
# proto=WPA RSN
There are also profiles for the Linksys-Router and for wired cable.
Thanks for the help!
Last edited by hoschi (2009-01-04 20:21:23)

Airport no longer works with WPA, WPA2 or WEP after 10.4.8 update.

A little disappointing.
After updating to 10.4.8 (I first did Software Update, then read here that the downloaded is safer, so I downloaded, repaired permissions, rebooted, installed 10.4.8 again from the download, rebooted, repaired permissions once more)
Now when I try to use the Airport on my MacBook Pro 17" I cannot connect to my wireless router (DLINK-524) with any security turned on (WPA, WPA2 or WEP). The signal strenght flashes on full (I'm close to the router) and off and I do not connect.
Any clue how to fix this?
Macbook Pro 17" Mac OS X (10.4.7)
Macbook Pro 17" Mac OS X (10.4.7)

I just did that - I tried a rollback with an "archive and install", and then stopped at 10.4.7. My problems persist... I'm actually quite amazed! Qurious if a clean install would solve the issue, but not curous enough to try. The way i see it, a re-install (even doing an "archive thingy") should include resetting all drivers. Well, either I am wrong and they are saved along with user settings - or else your explanation seems the only viable one; that there was a firmware upgrade included in this install. I admit - I did NOT read any readme. On the other hand, I tried my first install using the normal update.
=)
Anyway, after deleting all system prefs, deleting and reconnecting networks, repairing disk permissions and key rings, deleting keyrings etc. etc. - doing it all over again in different orders etc., I tried "arhive and install" back to 10.4.7. When that doesn't solve it, I give up. I have now opened my network - disabled crypt, and settle for simple connection control on MAC adresses. That works.
I would REALLY appreciate a fix, ladies and gentlemen on Apple. I mean really as in I am gonna egg your house if you don't give me...

WPA/WPA2 Powerbook G4 can't connect to dome Airport Extreme

Hi,
My Security settings are now set to WPA/WPA2 Personal on my dome Airport Extreme.
The only computer that can't connect to it is my 15" Powerbook G4. It shows the airport at the top, but only gives me the option of running WPA. I am running OS 10.4.11, because I need to keep classic on one computer!
I do not have the option of setting my airport to just WPA
From what I've read in this forum, I'm just not sure if I will be able to connect wirelessly with this computer.
Any help or advise out there?
Thanks!!

Oh geez, I can't even post to the right forum. Apologies!

Problem with connetction to wrt54g2 via wireless connection with WPA/WPA2 & wireless MAC filter

Hello,
I'm Alexey from Novosibirsk, Russia.
I have a problem with connection to wrt54g2 from my DELL D630 notebook via wireless connection. When I setup WPA/WPA2 in wireless security and wireless MAC filter I can't connect from notebook to WRT - in Windows I see that dynamic IP address from WRT is not assigned. When I switch off security mode to disable always OK, but I need a wireless security between DELL and WRT.
Connection via cable Ethernet port is OK.
Can You help me?

Have you tried the different laptop...?
Download 1.71 MB the firmware for WRT54G2 v1 and reflash the router's firmware.After reflashing/upgrading the router's firmware,reset the router for 30 seconds and reconfigure the router from scratch.

E70 doesn't work with WPA/WPA2!

Hello, ppl!
Does anybody know if there is any chance that E70 will work with WPA/WPA2 encryption? Found it is not working with my home router configured to WPA but works with WEP. However WEP isn't strong protection and I'd prefer WPA. I just took phone to see it's capabilities before buying but lack of WPA would stop me from purchase - WM devices never had such trouble
'd like to hear from someone who do really know if this device will ever work with WPA and maybe it could do now.
PS. have installed latest firmwares to the router and mobile phone.

ST.x wrote:
Maos wrote:
iphitus wrote:Sorry, I upped a new netcfg but forgot to run the update scripts on archlinux.org.... done now, the package is up.
I am very impressed of what all of you are doing but out of curiosity I ask in the most humble way when the x86_64 package will be up?
ABS
Doh! Don't know why I didn't think of that...

I'd like to know if mac os 9.2 can support wpa/wpa2

hi,
i've been given a macbook pro to repair (2001) and i want to connect to a wpa/wpa2 network. is that possible ?
if not i'll advise to change router's security level but it won't be secure...

In a way, it is possible, but the portability may become limited. You could connect a wireless Ethernet bridge (also known as a gaming or media adapter) to the Ethernet port of the computer. There are wireless Ethernet bridge devices from several manufacturers (such as ASUS, Linksys and Netgear). Look for a model that is small (possibly with power supply from batteries or perhaps USB). A wireless Ethernet bridge does not (normally) require special software, and can thus be used under almost any operating system.
Jan

Connecting to WPA/WPA2-Enterprised network

hi all,
i just came to mcgill and was trying to connect to the school network. But it kept saying something like 'authorization failed'. School website has only instructions for BlackBerrys:
"Select wpa.mcgill.ca * (WPA/WPA2-Enterprise). Fill in the following fields:
Name: wpa.mcgill.ca *
SSID: wpa.mcgill.ca *
Security Type: PEAP
User Name: McGill Username
User password: McGill Password
CA Certificate: Thawte Premium Server CA
Inner Link Security: EAP-MS-CHAP V2
Token: None Selected
Server subject: blank
Server San: blank "
Help plz
Solved!
Go to Solution.

idecline wrote:
hi all,
i just came to mcgill and was trying to connect to the school network. But it kept saying something like 'authorization failed'. School website has only instructions for BlackBerrys:
"Select wpa.mcgill.ca * (WPA/WPA2-Enterprise). Fill in the following fields:
Name: wpa.mcgill.ca *
SSID: wpa.mcgill.ca *
Security Type: PEAP
User Name: McGill Username
User password: McGill Password
CA Certificate: Thawte Premium Server CA
Inner Link Security: EAP-MS-CHAP V2
Token: None Selected
Server subject: blank
Server San: blank "
Help plz
Try configuring your N97 with these instructions:
Since your WLAN network seems to require more advanced PEAP authentication settings you should probably create / edit appriate WLAN connection profile, known as (Internet) Access Point, manually in a following manner:
1. Go to Tools -> Settings -> Connection -> Network Destinations
2. Check if your earlier failed attempt to connect has already created an non-funtional IAP named as your WLAN network SSID (look for a entry named wpa.mcgill.ca) under "Internet" destination.
3. If you can see existing IAP named as your WLAN SSID then you can Edit that one with necessary changes. (skip to 7.)
4. If you don't see any existing IAPs that are named like your WLAN network then go to the desired "Destination" (e.g. Internet) and select Options -> Add Connection Method.
5. Assuming you are in the coverage area of your WLAN network you can let phone "Automatically check for connection methods" (i.e. phone scans available WLAN networks) and you should be able to select the correct WLAN network name (wpa.mcgill.ca) from the list. Once you have selected the WLAN network your "Internet" Destination should now have been added with a new Access Point (IAP) that is named "wpa.mcgill.ca". Note that at this point the particular connection method is still incorrectly configured for your purposes (since by defaul it has EAP-SIM & EAP-AKA authentication methods enabled).
6. Now you should manually Edit your newly created wpa.mcgill.ca Internet Access Point with necessary PEAP settings.
7. Configure following WLAN and authentication settings:
"Connection name" defaults to name of your WLAN network (wpa.mcgill.ca) but you can also change this if you wish
- "Data Bearer" naturally needs to be "Wireless LAN"
- "WLAN network name" should match your WLAN network's name (SSID) exactly (wpa.mcgill.ca)
- "Network status": Public
- "WLAN network mode": Infrastructure
- "WLAN Security mode": WPA/WPA2
=> Go to "WLAN security settings"
- Ensure that "WPA/WPA2 mode is set to "EAP"
- Leave "WPA-2 Only mode" to "OFF" unless you are absolutely sure that your WLAN network is configured to stricly pure WPA2 mode (i.e. network might be configured to support both WPA and WPA2 security thus enabling WPA-2 Only mode on the phone will cause all your connection attempts to fail).
=> Go to "EAP plug-in configuration"
- Enable "EAP-PEAP" and make sure that "EAP-SIM" and "EAP-AKA" are disabled (via Options -> Disable)
=> Select "Configure" for EAP-PEAP authentication method
- Leave "Personal Certificate" to "Not defined"
- Select "Thawte Premium Server CA" to be used as an "Authority certificate"
- Set "User name in use" to "User defined" (since there is no Personal Certificate where it could be read automatically)
- Enter your username (McGill Username) to "Username" field
- Set "Realm in use" to "User defined" and leave following "Realm" field empty.
- Note that in case your username (McGill Username) contains the realm (i.e. format is username@realm ) then you can enter realm part of your ID to "Realm" field and enter only the username part to the "Username" field.
- Configure "Allow PEAPv0" to Yes
- Configure both "Allow PEAPv1" and "Allow PEAPv2" to "No"
=> Go to "EAP's" tab to configure inner authentication method for the PEAP (use the small arrow pointing right on top of the screen to move between tabs)
- Enable "EAP-MSCHAPv2" authentication method and Disable all other methods (Option -> Enable / Disable)
- Select "Edit" for the EAP-MSCHAPv2
- Enter you username (McGill Username) to "User name" field
- Configure "Prompt password" to No or Yes depending on whether you want your password to be prompted everytime you make an connection or if you prefer saving your password to following "Password" field permanenly so that it won't be prompted during everytime you connect to this WLAN network with PEAP/EAP-MSCHAPv2 authentication.
- If you you selected "No" to password prompting then enter your password (McGill Password) to "Password" field.
=> Exit the configuration with "Back" (several times) and you should hopefully be able to connect with this setup.
If needed you can also change the priority order of the connection methods (IAP's) within the Internet Destination since your new connection most likely ended up being lowest priority WLAN connection within your Internet destination. This should however not be a problem unless you have some other WLAN networks defined as an IAP and these other WLAN networks are simultaneously available at the location of the wpa.mcgill.ca WLAN network.
Hope this helps you to get connected!!
Message Edited by saataja on 17-Sep-2009 05:16 PM

Could not access wifi (wpa,wpa2)

hi, all
im developing an access point(ap), but i have critical problem...
in auth mode WPA(personal, enterprise mode, and aes, tkip, tkip-aes), WPA2(personal, enterprise mode, and aes, tkip, tkip-aes), any devices can connect to my ap except for iphone
i could not understand why only iphone disassociated my ap
belows are logs...
Apr 5 10:05:05 jingyun-ui-iPhone kernel[0] <Debug>: 500368.098888 wlan.N[10295] AppleBCMWLAN Joined BSS:     @ 0x812f4200, BSSID = 00:90:a3:47:4f:c1, rssi = -45, rate = 54 (100%), channel = 4, encryption = 0x8, ap = 1, failures =   0, age = 42, ssid[ 6] = "cc3900"
Apr 5 10:05:05 jingyun-ui-iPhone kernel[0] <Debug>: AirPort: Link Up on en0
Apr 5 10:05:05 jingyun-ui-iPhone kernel[0] <Debug>: en0::startOutputQueues (0)
Apr 5 10:05:05 jingyun-ui-iPhone kernel[0] <Debug>: IO80211PeerManager::doEnable
Apr 5 10:05:05 jingyun-ui-iPhone kernel[0] <Debug>: en0: BSSID changed to 00:90:a3:47:4f:c1
Apr 5 10:05:05 jingyun-ui-iPhone kernel[0] <Debug>: en0::IO80211Interface::postMessage bssid changed
Apr 5 10:05:05 jingyun-ui-iPhone kernel[0] <Debug>: en0: BSSID changed to 00:90:a3:47:4f:c1
Apr 5 10:05:05 jingyun-ui-iPhone kernel[0] <Debug>: en0::IO80211Interface::postMessage bssid changed
Apr 5 10:05:05 jingyun-ui-iPhone kernel[0] <Debug>: IO80211Peer::queuePacket ff:ff:ff:ff:ff:ff alllocate queue for ac 0
Apr 5 10:05:05 jingyun-ui-iPhone configd[48] <Notice>: network changed: v4(pdp_ip0:163.222.71.173, en0-:192.168.0.66) DNS! Proxy-
Apr 5 10:05:05 jingyun-ui-iPhone configd[48] <Notice>: Captive: CNPluginHandler en0: Inactive
Apr 5 10:05:05 jingyun-ui-iPhone configd[48] <Notice>: network changed: v4(pdp_ip0:163.222.71.173) DNS Proxy
Apr 5 10:05:05 jingyun-ui-iPhone mDNSResponder[31] <Error>: DeregisterInterface: Frequent transitions for interface en0 (192.168.0.66)
Apr 5 10:05:05 jingyun-ui-iPhone mDNSResponder[31] <Error>: mDNS_RegisterInterface: Frequent transitions for interface en0 (FE80:0000:0000:0000:3ED0:F8FF:FE24:E898)
Apr 5 10:05:05 jingyun-ui-iPhone kernel[0] <Debug>: 500368.199680 wlan.N[10296] AppleBCMWLANCore:startRoamScan(): 3365 Delaying RoamScan; because Join Mgr Busy 1 isWaitingforIP 1
Apr 5 10:05:08 jingyun-ui-iPhone Preferences[12524] <Warning>: -[APOtherNetworkController keyboardWillShow:]
Apr 5 10:05:08 jingyun-ui-iPhone kernel[0] <Debug>: 500371.085227 wlan.N[10297] AppleBCMWLANNetManager::handleDisassoc(): status = 0, reason = 15, flags = 0x0, authtype = 0, addr = 00:90:a3:47:4f:c1
Apr 5 10:05:08 jingyun-ui-iPhone kernel[0] <Debug>: 500371.089803 wlan.N[10298] AppleBCMWLANNetManager::leaveNetworkAsync(): kDeauthdCurrNetwork already set. Skipping call to leaveNetworkASync
Apr 5 10:05:08 jingyun-ui-iPhone kernel[0] <Debug>: 500371.089933 wlan.N[10299] AppleBCMWLAN Left BSS:       @ 0x812f4200, BSSID = 00:90:a3:47:4f:c1, rssi = -45, rate = 54 (100%), channel = 4, encryption = 0x8, ap = 1, failures =   0, age = 45, ssid[ 6] = "cc3900"
Apr 5 10:05:08 jingyun-ui-iPhone kernel[0] <Debug>: 500371.090008 wlan.A[10300] AppleBCMWLANCore::deleteAllPktFilters(): Deleted IPv4/IPv6 and Magic packet filters
Apr 5 10:05:08 jingyun-ui-iPhone kernel[0] <Debug>: AirPort: Link Down on en0. Reason 1 (Unspecified).
Apr 5 10:05:08 jingyun-ui-iPhone kernel[0] <Debug>: en0::stopOutputQueues
Apr5 10:05:08 jingyun-ui-iPhone kernel[0] <Debug>: IO80211PeerManager::doDisable
Apr 5 10:05:08 jingyun-ui-iPhone kernel[0] <Debug>: en0::IO80211Interface::postMessage bssid changed
Apr 5 10:05:08 jingyun-ui-iPhone Preferences[12524] <Warning>: WiFi: Joined (null)
Apr 5 10:05:09 jingyun-ui-iPhone Preferences[12524] <Warning>: -[VPNConnectionStore reloadVPN]: The active VPN configuration has changed from to (null)
Apr 5 10:05:09 jingyun-ui-iPhone Preferences[12524] <Warning>: -[VPNBundleController _vpnConfigurationChanged:] (0x1ed9d110:<VPNBundleController: 0x1ed9d110>): _serviceCount(0), serviceCount(0), toggleInRootMenu(0), RootMenuItem(1)
Apr 5 10:05:09 jingyun-ui-iPhone kernel[0] <Debug>: 500372.046796 wlan.N[10301] AppleBCMWLANCore::setASSOCIATE(): [wifid]: lowerAuth = AUTHTYPE_OPEN, upperAuth = AUTHTYPE_WPA2_PSK, key = CIPHER_PMK , don't disassociate    .
Apr 5 10:05:09 jingyun-ui-iPhone kernel[0] <Debug>: 500372.130819 wlan.A[10302] AppleBCMWLANNetManager::prepareToBringUpLink(): Delaying powersave entry in order to get an IP address
Apr 5 10:05:09 jingyun-ui-iPhone kernel[0] <Debug>: 500372.130940 wlan.N[10303] AppleBCMWLAN Joined BSS:     @ 0x81459000, BSSID = 00:08:9f:d2:f4:a0, rssi = -73, rate = 54 (100%), channel = 9, encryption = 0xc, ap = 1, failures =   0, age = 0, ssid[ 6] = "iptime"
Apr 5 10:05:09 jingyun-ui-iPhone kernel[0] <Debug>: AirPort: Link Up on en0
Apr 5 10:05:09 jingyun-ui-iPhone kernel[0] <Debug>: en0::startOutputQueues (0)
Apr 5 10:05:09 jingyun-ui-iPhone kernel[0] <Debug>: IO80211PeerManager::doEnable
Apr 5 10:05:09 jingyun-ui-iPhone kernel[0] <Debug>: en0: BSSID changed to 00:08:9f:d2:f4:a0
Apr 5 10:05:09 jingyun-ui-iPhone kernel[0] <Debug>: en0::IO80211Interface::postMessage bssid changed
Apr 5 10:05:09 jingyun-ui-iPhone kernel[0] <Debug>: en0: BSSID changed to 00:08:9f:d2:f4:a0
Apr 5 10:05:09 jingyun-ui-iPhone kernel[0] <Debug>: en0::IO80211Interface::postMessage bssid changed
Apr 5 10:05:09 jingyun-ui-iPhone kernel[0] <Debug>: IO80211Peer::queuePacket ff:ff:ff:ff:ff:ff alllocate queue for ac 0
Apr 5 10:05:10 jingyun-ui-iPhone kernel[0] <Debug>: 500372.210844 wlan.N[10304] AppleBCMWLANCore:startRoamScan(): 3365 Delaying RoamScan; because Join Mgr Busy 1 isWaitingforIP 1
Apr 5 10:05:10 jingyun-ui-iPhone kernel[0] <Debug>: 500372.376670 wlan.N[10305] AppleBCMWLANJoinManager::handleSupplicantEvent(): status = 6, reason = 0, flags = 0x0, authtype = 0, addr = 00:00:2c:f4:02:00
Apr 5 10:05:10 jingyun-ui-iPhone profiled[12552] <Notice>: (Note ) profiled: Service starting...
so my question is that what means for reason=15 (wlan.N[10297] AppleBCMWLANNetManager::handleDisassoc(): status = 0, reason = 15, flags = 0x0, authtype = 0, addr = 00:90:a3:47:4f:c1)
, and why handleDisassoc function is called with reason=15?
android, windows could connect my ap, so i think there is no problem with wpa,wpa2 authentication packets.
are there ideas?
ps1. what is the best way to debug this problem for windows?
ps2. please save me. this problem makes my lifespan decrease.

    Mifrett, don't panic. I'm here to assist you. It sounds like the software update may be conflicting with the software of the applications that were previously downloaded to your device. I recommend that you uninstall a few applications in Settings>Manage Apps> tap the app>tap uninstall application. Once you have uninstalled a few applications, power your device off/on. You may redownload the applications that you previously had. However, this time, the applications will be downloaded to your phone with the latest app software. I trust that these steps will improve the performance of your device. Keep us posted. We're here for you.
LasinaH_VZW
VZW Support
Follow us on Twitter @VZWSUPPORT

WPA/WPA2 on Cisco 1042N AP

Similar Messages

Maybe you are looking for