Networking Forums

Networking Forums > Wireless Networking > Wireless Networks > PEAP/MSCHAPV2 need server certificate ??

Reply
Thread Tools Display Modes

PEAP/MSCHAPV2 need server certificate ??

 
 
me
Guest
Posts: n/a

 
      08-31-2005, 07:58 PM
Hello,
We have cisco 1100 and windows 2003 server (sp1) with IAS (Radius).
I use PEAP/MSCHAPV2 protocol and i have create (with Certificate service) a
certificate for my IAS Server.
THE TROUBLE : When i connect from the windows client, everything is ok. But
when i connect with the Intel PRO/Wireless client, i have an error with the
certificate of the IAS server. I cannot disable the PEAP server certificate
configuration on the Intel Client like the Windows CLient. i have try to put
the Certificate of the server on the client computer but i have the same
thing ..
HOW to do like the Windows client with the intel client ? is there a way to
best configure the Cisco 1100 (aaa for example) for not waiting for the
server certificate ?

Thanks for helping me ...


 
Reply With Quote
 
 
 
 
Jerry Peterson[MSFT]
Guest
Posts: n/a

 
      08-31-2005, 11:27 PM
The server certificate verification is commonly referred to as "mutual
authentication". This mechanism exisits to ensure that a client is
connecting to the intended network. Essentially, mutual authentication is a
process to fight "man in the middle" type attacks.

Perhaps searching their literature for references to mutual authentication
may uncover a method to disable the feature.

--
Jerry Peterson
Windows Network Services - Wireless

This posting is provided "AS IS" with no warranties, and confers no rights.
"me" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hello,
> We have cisco 1100 and windows 2003 server (sp1) with IAS (Radius).
> I use PEAP/MSCHAPV2 protocol and i have create (with Certificate service)
> a certificate for my IAS Server.
> THE TROUBLE : When i connect from the windows client, everything is ok.
> But when i connect with the Intel PRO/Wireless client, i have an error
> with the certificate of the IAS server. I cannot disable the PEAP server
> certificate configuration on the Intel Client like the Windows CLient. i
> have try to put the Certificate of the server on the client computer but i
> have the same thing ..
> HOW to do like the Windows client with the intel client ? is there a way
> to best configure the Cisco 1100 (aaa for example) for not waiting for the
> server certificate ?
>
> Thanks for helping me ...
>



 
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
PEAP-MSChapV2 only administrators stay connected kraber Wireless Networks 4 05-22-2006 09:11 AM
Wireless PEAP with MSCHAPv2 John Wireless Networks 0 03-17-2006 09:29 PM
Wireless Bridge Supporting PEAP-MSCHAPv2 Ernie Wireless Networks 0 09-29-2005 05:42 PM
Wireless PEAP/MSCHAPV2 client programming question Jim Howard Wireless Networks 6 07-02-2005 11:53 AM
linux PEAP MSCHAPv2 problems sinner Wireless Internet 1 07-28-2004 02:38 PM



1 2 3 4 5 6 7 8 9 10 11