I'm attempting to complete a test lab build of 802.1x using an 4802CF switch
and IAS.
Unfortunately I just don't seem able to get the certificate based
authentication to work.  I've managed to get the MD5 working OK. But I'm
after getting the computer based certifcates working.
However, it seems that when I get a Remote Access Policy which matches the
incoming RADIUS request I don't get anything logged.  But if a connection
misses a policy match then it seems to match as such.  So I can only assume
that the RADIUS process is at least working.  Is there any where I can check
what is happening with the certificates.

[ Post a follow-up to this message ]

examnotes <MarkCTRMint@discussions.microsoft.com>
wrote in news:C9B7BF7E-D02B-4799-9DF2-DA9A29CBEBE1@microsoft.com:

> I'm attempting to complete a test lab build of 802.1x using an 4802CF
> switch and IAS.
> Unfortunately I just don't seem able to get the certificate based
> authentication to work.  I've managed to get the MD5 working OK. But
> I'm after getting the computer based certifcates working.
> However, it seems that when I get a Remote Access Policy which matches
> the incoming RADIUS request I don't get anything logged.  But if a
> connection misses a policy match then it seems to match as such.  So I
> can only assume that the RADIUS process is at least working.  Is there
> any where I can check what is happening with the certificates.

Ensure that the certs conform to the minimum cert requirements in the
Help topic "Network access authentication and certificates" in Windows
Server 2003 IAS or VPN Help, or on the web at
http://www.microsoft.com/technet/pr...03/library/Serv
erHelp/9d8b61c9-a870-4627-a8f2-148625fd7fba.mspx

Also check your configuration against the instructions in "Deployment of
IEEE 802.1X for Wired Networks Using Microsoft Windows" at
http://www.microsoft.com/downloads/...=05951071-6b20-
4cef-9939-47c397ffd3dd&DisplayLang=en

--
James McIllece, Microsoft

Please do not send email directly to this alias.  This is my online account
name for newsgroup participation only.

This posting is provided "AS IS" with no warranties, and confers no rights.

[ Post a follow-up to this message ]