Re: [WIRELESS-LAN] Certs for EAP-PEAP

2011-10-21 Thread Craig Pluchinsky
If you don't want to authenticate any users in the NPSDOMAIN then you could do a "rewrite" in your connection request policy. Replace username with OTHERDOMAIN\username. NPS can use basic regex to find and replace. This can be found in Connection Request Policies, YOUR POLICY, Settings then A

RE: Problem with auth, Aruba, Bradford, and IAS

2011-10-21 Thread Osborne, Bruce W
David, We have been a Bradford customer and are currently running Aruba 3.4.4.x on multiple M3 controllers. I tested 802.1x with Bradford, but our current small 802.1x testing is nor using Bradford. We are currently using NPS on Server 2008 R2. Does Bradford have multiple RADIUS servers config

Re: [WIRELESS-LAN] Certs for EAP-PEAP

2011-10-21 Thread Mike King
While we're talking about NPS and regex, just one note to be aware of. When you make a connection policy, and your matching multiple IP addresses, you might be tempted to use the following terminology. 10.1.2.1|10.1.2.2|10.1.2.3 However, be aware that it uses REGEX in the connection policies as

Re: [WIRELESS-LAN] Problem with auth, Aruba, Bradford, and IAS

2011-10-21 Thread Steve Hess
Make sure the Aruba controller isn't sending RADIUS accounting to Bradford on port 1813. This has caused us issues in the past overloading Bradford. We just changed it to a port Bradford doesn't listen on (). Steve Osborne, Bruce W wrote: David, We have been a Bradford customer a

RE: Problem with auth, Aruba, Bradford, and IAS

2011-10-21 Thread Joe Guenther
David, I saw similar RADIUS issues when I upgraded from 3.4.3.1 to 3.4.5.0 I would get RADIUS time outs. Very few authenticaiton requests got through. So as a temporary fix I increased the timeout setting for the AAA authentication. At least now the authentication goes through, but I still g