Select Microsoft: Smart Card or other certificate, and click OK. To configure the TLS authentication method, do the following: Note: It is possible to use a certificate as the EAP Type within PEAP, but this results in a hybrid form of 802.1X, a mix of PEAP and EAP-TLS. In the EAP Types field, select Secured password (EAP-MSCHAP v2). Select the Enable Fast Reconnect checkbox.
Select Microsoft: Protected EAP (PEAP), and click Edit to open the Properties window.Ĭlick the Certificate issued to pop-up menu, and choose the name of the certificate you noted earlier. Select Microsoft: Protected EAP (PEAP), and click OK.
To configure the PEAP authentication method, do the following: In the Configure Authentication Methods window, click Add. In the Specify Access Permission window, select one of the following options as needed for your environment:Īccess is determined by user dial-in properties NAS Port Type-Set to Wireless – Other or Wireless – IEEE 802.11. Consider the following commonly used values for each setting: Select the conditions as needed for your environment. In the Specify Condition window, click Add to add a condition. When prompted, enter a name in the Policy name field.Įnsure the Type of network access server is set to “Unspecified”. In the console sidebar, expand Policies under the “NPS (Local)” item, right-click on Network Policies, and choose New. Shared Secret-Select the Manual option at the bottom of the Shared Secret area, and then enter the password that you set on the access point or the wired switch. IP Address-This will be the IP address of the access point or the wired switch.ĭevice Manufacturer-This should correspond to the wireless and wired devices you are using to support 802.1X.
In the RADIUS Clients pane, right-click either the wireless or wired RADIUS client, select Properties, and then configure the following settings for the access points:įriendly Name-This can be anything, but you should have one friendly name for the wireless and another friendly name for the wired. In the console sidebar, expand RADIUS Clients and Servers, and then click RADIUS Clients. Open Start > Windows Administrative Tools > Network Policy Server. You will need it later when configuring the PEAP or TLS authentication method. Important: Make note of the certificate's name.
0 kommentar(er)
