Cisco 350 authentication help

[djjazzyjeff]

Hi, I have some Cisco Aironet 352 APs and 350 pccard wireless nics to use at my company. We have a 2K domain and 2K/IAS/Radius running which I use to authenticate VPN clients coming through my Pix 515. I'd like to lock down the wireless end of my network as much as possible and still allow visiting bigshots to get to the internet via my APs. Can I force authentication to happen before wireless clients get network access with this combination of products or do I need to introduce something else to do this? Thanks all, as usual Cisco stuff confuses me, oh well.

 

[Eyas]

Hi

We're running a similar solution but with Cisco ACS as a Radius. We're using their LEAP to authenticate to the network. This forces the authentication to take place before the client gains access to the network.

I tried it with the MS Radius in the beginning but since the LEAP is indigenius to Cisco that would not work. However, since then the EAP has become a standard so perhaps it will work better now.

HIH

/Eyas