I agree with Philippe but I would say RADIUS *has already become* the
core of any large wireless network.

Version 1.0 of our network was FreeRADIUS and we had to do some custom
work to get it to work with Oracle.  We are now using RADIATOR with a
MSCHAP to LDAP EAP check to support native MS PEAP.

We are "almost" there from what I can see.  Cisco can't advertise the
WPA network and Microsoft doesn't like non-broadcast SSIDs. We need more
voices telling MS to allow users to use non-broadcast network with the
level of preference as broadcast SSIDs.

... Jonn Martell, UBC

Philippe Hanset wrote:

Martin,

RADIUS will become a very predominant piece of Wireless LANs
as it is "required" by 802.1x (and 802.11i) as you mentioned.
(you don't have to use RADIUS for 802.1x...)
You might want to consider other cheap options like:
freeradius (supports all kinds of EAP-types like TLS, TTLS etc...)
Microsoft is big on EAP-PEAP but you might restrict yourself by
using a RADIUS server from Microsoft for future deployments.

Philippe Hanset
University of Tennessee

On Thu, 19 Feb 2004, Martin Jr., D. Michael wrote:


Is anyone out there using Microsoft Internet Authentication Service
(IAS) for RADIUS authentication with their wireless access points?  (We
use Cisco 802.11b/g radios...Aironet 340s, 350s, 1100s)



IAS is free and included with Microsoft Windows 2000 Server and we have
needed to get into using RADIUS authentication with our wireless
implementation.  Using PEAP, EAP, etc.. and 802.1x is not out of the
question (at least long term) but I have many applications were MAC
authentication is the only recourse (wireless printers, bridges,
etc...).



Any advice (or help) would be greatly appreciated.



Thanks,



D. Michael Martin, Jr.

Network Administrator

University of Montevallo

********** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/cg/.



**********
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/cg/.

********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/cg/.

Reply via email to