01-30-06 02:29 AM
"examnotes" <vn@discussions.microsoft.com> wrote in news:B8CEA1E3-
0191-4ED1-821B-DC07486D5DAC@microsoft.com:
> Hi,
>
> How do i configure wireless authentication using PEAP-MSCHAPv2 without a
> certificate.
> My setup is Windows 2000 AD and IAS, RADIUS and cisco AP1200.
>
> Regards
> VN
>
It is not recommended that you do this. It is more secure to take advantage
of the ability of PEAP-MS-CHAP v2 to provide mutual authentication, so that
the clients authenticate your IAS server using the server certificate and
the server authenticates users with user name and password. With this
configuration you ensure that clients are actually connecting to your
servers, not to a rogue wireless access point that is being used to harvest
user credentials.
That said, the way that you do it is to deselect the "Validate server
certificate" checkbox on client computers.
--
James McIllece, Microsoft
Please do not send email directly to this alias. This is my online account
name for newsgroup participation only.
This posting is provided "AS IS" with no warranties, and confers no rights.
[ Post a follow-up to this message ]
| 
