Ditto on what Mike says. I'm not the biggest msft fan but IAS on 2003 works great. You do however need to think abou the number of authentication request per-second you may encounter. I think a bad A$$ server would do about 80 PEAP tunnels per second. Probably more than you need. Don't forget redundancy (of course) and have your IAS servers close to the authenticators.
-Emerson -----Original Message----- From: Ruiz, Mike [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 10, 2007 3:48 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Is anybody using (IAS) internet authentication service for RADIUS? Microsoft RADIUS does PEAP and TLS not just PEAP. For us and over 2500 users authenticating on wired and wireless ports IAS works great. We have Windows, MAC OS X clients as well as port authentication from Enterasys hardware authenticating against it. Mike -----Original Message----- From: Wim Bos [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 10, 2007 3:43 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Is anybody using (IAS) internet authentication service for RADIUS? Nick, I miss Radiator in your list. A basic pentium4 based server would cover your needs as far as hardware is concerned. All will work correctly. The Microsoft radius server only does peap. The issue with that it needs a very controlled client setup. Not all windows solutions work nicely. The other configuration that is typically used is radiator or free radius or openradius in combination with secureW2 (www.securew2.com). All these radius servers can make a connection to windows AD to check username-PW. Just as a note. It is possible to show the usernames instead of mac addresses in Airwave by connecting the airwave as a billing server to the radius server. Wim Bos -----Original Message----- From: Urrea, Nick [mailto:[EMAIL PROTECTED] Sent: woensdag 10 januari 2007 21:31 To: wim Subject: [WIRELESS-LAN] Is anybody using (IAS) internet authentication service for RADIUS? I want to setup a RADIUS server here at UC Hastings Is anybody using IAS in Windows Server 2003 for their RADIUS server? Is there a recommended solution from Microsoft to Install WPA / 802.1x Free Radius vs. a Microsoft Solution. Also what is the volume of users you have accessing the RADIUS server. What would be a suggested hardware requirement for 800 users We currently have a Bluesocket Solution with an Airwave AMP manageing Cisco 1231 APs in Thick mode. Bluesocket allows you to do 802.1x pass through for authentication. We use the Bluesocket for QoS, Firewall, and DHCP. ------ Nicholas Urrea IT Department UC Hastings College of the Law [EMAIL PROTECTED] 415-565-4718 ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
