Cisco AP1200, EAP and IAS

[Steve Carr]

Anyone getting this to work. I've tried all sorts of configs and can't get a
user to authenticate. I've set up the Cisco AP to send an EAP request based
on a username and password a lient sends them to a Win2K RADIUS server with
EAP Authentication enabled (I believe it uses MD5-Challenge) in addition to
MSCHAP v2 etc. No luck. I don't see anything in the iaslog file or in the
eventlog. I do see communication between the AP and the IAS server (as well
as an LDAP request to AD fro IAS) but as far as I can tell the RADIUS packet
sent back to the AP says no go since the event log on the AP says
"Authentication Failed"
Anyone doing this and succeeding? I'd love to hear.

Specs:
Cisco AP 1230 with IOS
Win2K Server with SP3 plus
AD on W2K servers with SP3 plus.

 

[Steve Carr]

nevermind, I figured it out. The IAS server needed a hotfix (Q313664) to
allow PEAP as an option instead of EAP-MD5. Once that was installed, it
worked flawlessly.