Vista and CCMP encrypted wireless network

J

Jason A Ash

I am attempting to get two Vista Business laptops to connect to a
wireless network (corporate) which is using AES Counter Mode with Cipher
Block Chaining Message Authentication Code Protocol (CCMP) to encrypt
the signal. The wireless is provided by a DLink DWS-1008 / DWL-8220AP
system.

The Vista PCs will "see" the network, and realize it's a secure network,
but not login. We are also using a RADIUS system to authenticate the
wireless stations.

Several XP laptops have no problems connecting to this network.

I can, if need be, set up the wireless to also use WPA2-Enterprise, and
will do that if no other solution is available.

Thanks,
Jason A.
 
S

Spaceman

I am not too familiar with CCMP or the DLink you have,
but be sure that security is not based upon MAC addesses,
If it is you would of course have to add the MAC addresses
of the new wireless cards in the laptops to the Dlink setup.
(just a stab in the dark but maybe a problem?)
 
J

Jason A Ash

Nope, I know we don't have MAC filtering enabled. But thanks for the
idea...
 
M

Miles Li [MSFT]

Hello,

Thank you for your post.

From the description, this issue only happen on the Windows Vista clients.
I'd like to know whether the Windows Vista clients have the Service Pack 1
installed. There is a known issue when Windows Vista clients connect to WPA
AP when roaming if previously connected via WPA2 it will not properly
downshift to WPA.

To resolve the issue, please install the Windows Vista Service Pack 1 which
also resolves the issue described in the following Microsoft Knowledge Base
article:

935222 You cannot connect to a wireless network on a Windows Vista-based
computer
http://support.microsoft.com/default.aspx?scid=kb;EN-US;935222

If the problem continues, please also collect the following logs and
information:

1. You mentioned that you are using RADIUS. Which RADIUS system are you
using?
2. What is the exact error when you tried to connect to the wireless
network? Please let us know the exact error WORD BY WORD.
3. Could you please collect the following logs and send them to me:

1- On the command line, please run the following command: netsh ras set
tracing *enabled
2- Please enable Start "Wireless Diagnostic" under Computer Management-
Reliability and Performance- Data Collector Set- System- Wireless Diagnostic
3- Then please try to connect to the network
4- Once you get the failure, please stop repro with netsh ras set tracing *
disabled
5- Please stop wireless diagnostics
6- Please send me the output folder \Windows\tracing,


Please send the log file to (e-mail address removed) with the the following
three lines for this issue in the email body:

Vista and CCMP encrypted wireless network
# 42396980
Miles Li - MSFT

If you have any questions or concerns, please do not hesitate to let me
know.




Best regards,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
J

Jason A Ash

Thank you for the reply.

I have sent this on to my work e-mail, and will be looking to contact
the client, and check the SP version tomorrow.

The RADIUS we are using is the Windows 2003 Server system.
 
M

Miles Li [MSFT]

Hello Jason,

I am just checking on your progress regarding the information that was sent
to you. If you encounter any difficulties, please do not hesitate to let me
know.

Best regards,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top