Radius server suggestions for wireless auth

[rshendrix]

I'm looking for Radius server to do wireless authentication.

We have Cisco Aironet 1100 Access Points & currently are
using two APs for radius server purposes but are running up
against the limit of 50 users (MAC addresses).

Any advice on what others are using for similar setups would be appreciated.

Thanks.

 

[dput]

We use the Radius Server that comes with Windows 2000 Server.

Dan

 

[rshendrix]

Thanks dput.

Is the W2K server that you are using in a domain or workgroup?

Do you use MAC address filtering in your setup?

Thank you.

 

[rshendrix]

Also, is there a limit on the number of users that can be setup in the Windows Radius server? I believe I read something somewhere that mentioned the 50 limit just like the Aironet 1100 APs have.

 

[dput]

We are using active directory with a domaain. I am not aware of any limits. Your setup occurs on the AD, not Windows Radius Server for the authorizations, so I can't imagine there being a limit.

Dan

 

[Kurt111780]

We are about to setup a wirless network. Only about 5 people will need access to it. We have windows server 2003 small biz addition. Should I setup a RADIUS server or just setup an access point using WPA-PSK? It would be nice if it was controlled through Active directory. Is it hard to setup and is there an AP you could recommend?

Thanks,
Kurt

It's only easy when you know how.

http://www.seedandgarden.com

 

[dput]

I believe that 802.1x authentication and WPA-PSK are both needed. WPA provides the encryption of the data and 802.1x provides authentication services. We use both.

Dan

 

[JoshT976]

dput

Do you have a high level overview of your 802.1x authentication setup?

 

[dput]

Basically, we installed the Radius Server on our Windows Server, Configured a Radius session, and then set the WAP to match. The biggest issue I had was the MAC Format on the WAP had to be set to Multi-dash format.

Dan

 

[JoshT976]

Multidash? xx-xx-xx-xx-xx-xx? (using dashes?)

What WAP Device do you have?

Joshua

 

[dput]

HP 420 Wireless AP

Dan

 

[Kurt111780]

Dan,

Was installing the radius server on windows difficult or staright forward? I've never set one up.

Thanks,
Kurt

It's only easy when you know how.

http://www.seedandgarden.com

 

[JoshT976]

Setting up Internet Authentication Server was EXTREMELY easy.
Its pretty straight forward and alot of it is wizard driven.

Joshua

 

[dput]

Joshua is right. I found it very simple. Almost too easy, I was concerned if I missed something, but it works great.

Dan

 

[Kurt111780]

ok great, maybe I will try it then. Do you have to do anything on the Access point side?

Thanks,
Kurt

It's only easy when you know how.

http://www.seedandgarden.com

 

[JoshT976]

You need to :

Set up the router / AP for RADIUS mode. Enter the IP of your IAS server. Make sure their "Shared Key" match.

Choose the appropriate authentication type (certificate, etc), and you shoudl be ready to go.

Joshua

 

[dput]

Every AP manufacturer will be different, so you will probably need to read the manual.

Dan

 

[Kurt111780]

We have server 2003 small biz edition. we have not installed service pack 1 yet. Is this a problem? I would like the network to use WPA or WPA2.

Thanks,
Kurt

It's only easy when you know how.

http://www.seedandgarden.com

 

[dput]

I am still on Windows 2000, so I really can't answer whether SP1 is needed or not. My guess is that you will be fine without it. The WPA and WPA2 is established between your Wireless Access Points and your Wireless devices. It will have nothing to do with your server. Your AP's will communicate with your Radius Server to authenticate the users.

Dan

 

[Kurt111780]

I don't understand this article

http://www.windowsnetworking.com/articles_tutorials/Wireless-Networking-Windows-2003.html

when it says:

Without SP1 on Windows Server 2003, the WPA security method isn’t supported and therefore cannot be implemented – which is no longer an issue with Service Pack 1.

Also, do you have to install Certificate Authority and issue certificates?

Thanks,
Kurt

It's only easy when you know how.

http://www.seedandgarden.com