MAC Authentication With IAS (RADIUS) And Active Directory

Before you beat me up . . . The boss has spoken . . . We are going to
authenticate wireless clients with MAC Authentication using IAS (RADIUS) and
Active Directory running on a 2003 box. I have made some progress, but there
are three problems. I'm a newbie, I have no direct access to the wireless
controller or AP's, and there is little how - to information available on the
net.

Basically, I used two papers from Foundry Networks as a guide to set up and
configure the the server. After some tweaking the IAS Logs now show that
users are being granted access to the network. However, the supplicants
never connect.

My understanding is that the wireless supplicant attempts a connection
through the AP, which sends the request by VLAN to the wireless controller.
The controller then directs the request to the appropriate authentication
server based on which of two networks the supplicant is trying to connect to.
The authentication server verifies the supplicants credentials, in this case
MAC Address, and returns an accept or reject to the controller. A reject
results in no connection to the network and an accept results in a connection
to the proper VLAN and access to the requested network and its resources. My
RADIUS box is sending accept messages, but the supplicant does not connect.

Any help would be appreciated. Especially, how – to help. I still am not
100% confident that I set up the server correctly.

=?Utf-8?B?S2VubmV0aCBSZXlub2xkcw==?=
<(E-Mail Removed)> wrote in
news:A7359374-91D7-4A73-A9EF-(E-Mail Removed):

> Before you beat me up . . . The boss has spoken . . . We are going to
> authenticate wireless clients with MAC Authentication using IAS
> (RADIUS) and Active Directory running on a 2003 box. I have made some
> progress, but there are three problems. I'm a newbie, I have no
> direct access to the wireless controller or AP's, and there is little
> how - to information available on the net.
>
> Basically, I used two papers from Foundry Networks as a guide to set
> up and configure the the server. After some tweaking the IAS Logs now
> show that users are being granted access to the network. However, the
> supplicants never connect.
>
> My understanding is that the wireless supplicant attempts a connection
> through the AP, which sends the request by VLAN to the wireless
> controller. The controller then directs the request to the
> appropriate authentication server based on which of two networks the
> supplicant is trying to connect to.
> The authentication server verifies the supplicants credentials, in
> this case
> MAC Address, and returns an accept or reject to the controller. A
> reject results in no connection to the network and an accept results
> in a connection to the proper VLAN and access to the requested network
> and its resources. My RADIUS box is sending accept messages, but the
> supplicant does not connect.
>
> Any help would be appreciated. Especially, how – to help. I still
> am not 100% confident that I set up the server correctly.
>

There is a section on MAC address authorization in the IAS Technical
Reference at:
http://technet2.microsoft.com/Window...9d5-fdaf-430c-
9ef4-318f8c15baf11033.mspx?mfr=true

You might find some of that content helpful.

--
James McIllece, Microsoft

Please do not send email directly to this alias. This is my online account
name for newsgroup participation only.

This posting is provided "AS IS" with no warranties, and confers no rights.