802.1x trouble [Archive]

Fuzz

02-21-2010, 06:44 AM

I'm trying to lab up 802.1x authentication for wired and wireless networks, but I seem to be having trouble getting the RADIUS server (Microsoft IAS) talking with the switch. I think I have configured the switch correctly, but nothing seems to be getting to the server - there are no logs present on the server for IAS at all.

Has anyone got any ideas? I think it's a Microsoft-side issue rather than a switch configuration issue.

crissa

02-21-2010, 07:33 AM

I'm trying to lab up 802.1x authentication for wired and wireless networks, but I seem to be having trouble getting the RADIUS server (Microsoft IAS) talking with the switch. I think I have configured the switch correctly, but nothing seems to be getting to the server - there are no logs present on the server for IAS at all.

Has anyone got any ideas? I think it's a Microsoft-side issue rather than a switch configuration issue.

Hello,
I presume you already checked the port numbers?

1645 RADIUS Authentication
1646 RADIUS Accounting

or

1812 RADIUS Authentication
1813 RADIUS Accounting

See <http://en.wikipedia.org/wiki/RADIUS#UDP_Port_numbers>.

I used freeradius on a Linux box for my ISCW labs and that uses the later ports. I had to add my local network to the freeradius config and, of course, a user.
Bye, Tore

Fuzz

02-21-2010, 08:33 AM

Standard ports are being used, 1812 & 1813. I have the client set (the switch) and configured with the correct shared key. I have the IAS server querying AD for user information, and a remote access policy set. I'm using PEAP authentication and have a certificate installed. I can't figure it out.

crissa

02-21-2010, 10:30 AM

Standard ports are being used, 1812 & 1813. I have the client set (the switch) and configured with the correct shared key. I have the IAS server querying AD for user information, and a remote access policy set. I'm using PEAP authentication and have a certificate installed. I can't figure it out.

Hello,
another troubleshoot idea: Could you try to use the radius server with aaa and authentication login group radius local? With this you could check if the radius server is up and running.
Bye, Tore

anurag007

02-21-2010, 12:05 PM

Standard ports are being used, 1812 & 1813. I have the client set (the switch) and configured with the correct shared key. I have the IAS server querying AD for user information, and a remote access policy set. I'm using PEAP authentication and have a certificate installed. I can't figure it out.
Download Winradius ..try that its very easy to use ....may be that can help...:)