Re: [WIRELESS-LAN] Another RADIUS Question (802.1x)

2006-03-21 Thread Chris Hessing
"Fast Reconnect" or "Session Resumption" results in about half as many frames being used to reauthenticate the session. In terms of "meat space" time, the difference isn't substantial. However, a full PEAP or TTLS authentication can take up to 100ms to complete. (TTLS is a little faster than PEA

802.1x Native Clients

2006-03-21 Thread Zeller, Tom S
I've been doing extensive testing of PEAP with the XP client and with Mac OS X 10.4. Our access points are mostly Proxim 600s with some HP 420s. Once connected it works great and will stay connected. However, getting connected is wildly inconsistent. On the mac I may have to hit "connect" one t

RE: [WIRELESS-LAN] Another RADIUS Question (802.1x)

2006-03-21 Thread Flagg, Martin D.
I suspect roaming would work better with fast reconnect enabled but have not done much testing. When I finally found the solution I was so happy (it was the first week or two of school and I had other issues to deal with) that I never tested again. The problem was so intermittent and so frustra

Re: [WIRELESS-LAN] Another RADIUS Question (802.1x)

2006-03-21 Thread Keith Moores
802.1X WEP appears to be the problem with the MacBook Pro rather than a specific flavor of EAP. We just tested a yet to be released (hopefully soon) software update from Apple that fixes the problem. -Keith Keith Moore

Re: [WIRELESS-LAN] Another RADIUS Question (802.1x)

2006-03-21 Thread Lee Badman
Thanks, Martin- what does that do to roaming/reauth, and are you doing any voice? Put another way- have you identified trade-offs to disabling fast reconnect on ACS? Lee >>> [EMAIL PROTECTED] 3/21/2006 11:26 AM >>> Sorry, I did not specify, the article states exactly what I found, disable fast

RE: [WIRELESS-LAN] Another RADIUS Question (802.1x)

2006-03-21 Thread Flagg, Martin D.
Sorry, I did not specify, the article states exactly what I found, disable fast reconnect on ACS. Been working great this entire school year. Martin D. Flagg Network Engineer/Administrator Hiram College -Original Message- From: Lee Badman [mailto:[EMAIL PROTECTED] Sent: Tuesday, Ma

Re: [WIRELESS-LAN] Another RADIUS Question (802.1x)

2006-03-21 Thread Lee Badman
OK Martin- share the love. What was your corrective action? As for the Windows hotfix- it made a huge difference in functionality (I just implemented it). But... - Microsoft needs to be contacted and they have to send it to you. - They say it's not well-tested and to be used with caution So...

RE: [WIRELESS-LAN] Another RADIUS Question (802.1x)

2006-03-21 Thread Flagg, Martin D.
I had this problem months ago when I upgraded to 3.2. I finally found the solution by trial and error with no help from Cisco, took about a week of troubleshooting. Martin D. Flagg Network Engineer/Administrator Hiram College -Original Message- From: Lee Badman [mailto:[EMAIL PRO

RE: [WIRELESS-LAN] Another RADIUS Question (802.1x)

2006-03-21 Thread Ruiz, Mike
Our experience very much parallel's Lee's despite our use of MS IAS RADIUS rather than free radius. Not to muddy this particular thread but our Mac experience with PEAP is quite reasonable. However it appears there is a huge issue with the new MacBook Pro laptops connecting to an 802.1x PEAP en

Re: [WIRELESS-LAN] Another RADIUS Question (802.1x)

2006-03-21 Thread Lee Badman
Hi Archana, Long time- hope all is well with you. Just got info from Cisco that I will share with the group, but haven't tried to do anything with it yet: >Regarding your concern, I did a research about this specific situation and >found new information in >this case. >In this moment I let yo

Re: [WIRELESS-LAN] Another RADIUS Question (802.1x)

2006-03-21 Thread Archana Vemulapalli
Lee, We use Cisco 1200s, Free Radius, LDAP (authz), Kerberos(authc), PEAP, WPA. We have this scenario in a pilot environment. We have not seen the symptom you describe. On the other hand I have observed an occasional "validating identity" if a user is on the network for a very long time caus