Cisco 1200 WAP with WPA-Microsoft Radius

[Clarksville]

Does anyone know if a Cisco Aironet WAP can be configured to use WPA w/Radius authentication if the Radius server is Microsoft Internet Authentication Service?

I want to use an authenticaion type more indivudualized than WPA-PSK without spending a lot of $.

any advice appreciated.

 

[ADB100]

Yes. I have this configured at the moment on a 1100 and a 350 (both 802.11b and running IOS 12.3(7)JA2). The Microsoft IAS Configuration doesn't change whether the AP uses Open/WEP or WPA/TKIP.

The Cisco Aironet AP's support WPA/TKIP only or WPA/TKIP with fallback to Open/WEP for non-WPA capable clients. I have some HP iPAQ PDA's with in-built wireless but I had problems using WPA/TKIP when the AP's were configured with the fallback ability (the iPAQ's would only every use Open/WEP):

My AP configurations when using WPA/TKIP with Open/WEP fallback were (I have included only the relevent parts):
!
dot11 ssid WPA&FALLBACK
authentication open eap eap_methods
authentication network-eap eap_methods
authentication key-management wpa optional
accounting acct_methods
guest-mode
!
interface Dot11Radio0
!
encryption mode ciphers tkip wep128
!
ssid WPA&FALLBACK
!


WPA/TKIP Only:
!
dot11 ssid WPA-ONLY
authentication open eap eap_methods
authentication network-eap eap_methods
authentication key-management wpa
accounting acct_methods
guest-mode
!
interface Dot11Radio0
!
encryption mode ciphers tkip
!
ssid WPA-ONLY
!

HTH

Andy