802.1x and windows 2000

[Cameron Kim]

I am testing out 802.1x (wired) in our lab. Equipment
consists of cisco 3750 switch, cisco ACS 3.2.3 (radius
server) and a win 2k sp4 fully patched client.
Authentication on the machine is setup to

1) enable network access control using 802.1x (PEAP)
2) authenticate as computer when computer information is
available.

The problem that i am having is that the machine account
gets authenticated on bootup (which is ok). But once a
user logs on, an EAP-start frame should be sent by the
client (to restart the eap authentication process). But
this doesn't happen. I need this to be able to set dynamic
vlan's by userid.

I've googled around and found a setting in the regkey for
authmode = 1, but that didn't work either.

Any thoughts?

 

[Shilpa Sinha [MSFT]]

Hi

Problem:
========
The problem that i am having is that the machine account gets authenticated
on bootup (which is ok). But once a user logs on, an EAP-start frame should
be sent by the client (to restart the eap authentication process). But this
doesn't happen. I need this to be able to set dynamic vlan's by userid.

Resolution:
==========
Maybe the following article will help:

Reference Link:
==============
http://support.microsoft.com/default.aspx?scid=kb;en-us;313664&Product=win20
00

Title:
=====
Using 802.1x Authentication on Computers Running Windows 2000

Shilpa Sinha
This posting is provided "AS IS" with no warranties, and confers no rights.