Vinc, You are right . Most 350s have the Vx *&^%$ stuff in them all thought I believe there are two tools up on the CISCO site to change them to CISCO IOS.
Wayne T Work, Sr. CISSP (Work) 203.217.5004 (Fax) 208-545-4365 Owner and Sr. Information Systems Security Consultant Security Gauntlet Consulting HIPAA Compliance Resource Group www.securitygauntlet.com www.hipaact.com -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Monday, July 14, 2003 2:20 PM To: [EMAIL PROTECTED] Subject: Re: Cisco AP350 series - Freeradius authentication warning. [EMAIL PROTECTED] wrote on 07/14/2003 01:04:37 PM: > I think the problem is the AP configuration too, but since it is on > service right now, and it is set for MAC address authentication, it is > suppossed to send the request to the FR when the MAC is not found in > its database. Casually perusing the 350 docs, it appears as though what you're trying to do _should_ be possible with the 350. Then again, the 350's run that awful VxWorst operating system, so who knows. ;) > Do you think that maybe that setting (I mean forward requests to the > FR) should work right? Can the authentication be shared between the AP > and th > FR? or is it an exclusive job for just one, the FR or the AP? So > should I > try to disable the MAC authentication at the AP just to see if that works? I'd try that, but that basically means you're taking the AP out of service for a while. (You're kind of stuck between a rock and a hard place here.) Why can't you just take all the MAC addresses that are on the access points, put them in FR, and then have the AP _only_ check FR? Wouldn't that eliminate an unnecessary layer of uncertainty? Vincent Giovannone Network Infrastructure Group Information Services Division Rush - Presbyterian St. Luke's Medical Center "A four-year-old will very quickly get over news of the death of Santa if told that it was due to his fully loaded sleigh crashing in the back garden." -- Mil Millington - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
BEGIN:VCARD VERSION:2.1 N:Work;Wayne FN:Wayne T Work (E-mail) ORG:Security Gauntlet Consulting TITLE:Sr. Information Security Consultant TEL;WORK;VOICE:(203) 217-5004 TEL;CELL;VOICE:(203) 217-5004 ADR;WORK:;;56 Applewood Lane;Naugatuck;CT;06770;United States of America LABEL;WORK;ENCODING=QUOTED-PRINTABLE:56 Applewood Lane=0D=0ANaugatuck, CT 06770=0D=0AUnited States of America EMAIL;PREF;INTERNET:[EMAIL PROTECTED] REV:20021023T141508Z END:VCARD
