great - this is the kind of direction I am looking for. thanks --Michael T. Bendorf-- Technology Administrator A-C Central C.U.S.D. #262 Google Voice: 217.408.0043
"I'm trying to teach myself to ask the same questions that you do during your lectures so that I do not need you any more." A good teacher is like a candle - it consumes itself to light the way for others. "The computer revolution hasn't started yet. Don't be misled by the enormous flow of money into bad defacto standards for unsophisticated buyers using poor adaptations of incomplete ideas." - Alan Kay On Tue, Oct 19, 2010 at 12:22 PM, Aaron Hackney <aa...@aaronhackney.com>wrote: > Yes, You can install IAS...it emulates a radius server. I have set > this up with Cisco AP's and windows clients. > > My set up was: WPA-AES w/PEAP. Point the AP to the IAS server as a > radius server and PEAP assures identity of the server. > > You will need a certificate server to generate a cert (or self-sign) > and push that cert to the clients (Or you CAN do PEAP w/o the > certificate but not as secure) > > Then you can use existing AD credentials to authenticate users and > grant or deny them access to the wifi infrastructure. > > When I set this up a few years ago, I started here: > > http://articles.techrepublic.com.com/5100-10878_11-6148543.html?tag=leftCol;articleText > and then followed this guide: > http://downloads.techrepublic.com.com/abstract.aspx?docid=277380 > > HTH > -A > > > On Tue, Oct 19, 2010 at 12:15 PM, Michael T. Bendorf > <bendo...@a-ccentral.us> wrote: > > I do. > > I did see Active Directory listed among the > > controller's authentication methods listed as well... > > > > --Michael T. Bendorf-- > > Technology Administrator > > A-C Central C.U.S.D. #262 > > Google Voice: 217.408.0043 > > "I'm trying to teach myself to ask the same questions that you do during > > your lectures so that I do not need you any more." > > > > A good teacher is like a candle - it consumes itself to light the way for > > others. > > > > "The computer revolution hasn't started yet. Don't be misled by the > enormous > > flow of money into bad defacto standards for unsophisticated buyers using > > poor adaptations of incomplete ideas." > > - Alan Kay > > > > > > On Tue, Oct 19, 2010 at 12:12 PM, Aaron Hackney <aa...@aaronhackney.com> > > wrote: > >> > >> Do you have a Windows AD infrastructure? > >> > >> On Tue, Oct 19, 2010 at 10:37 AM, Ben Story <ben.st...@gmail.com> > wrote: > >> > Do a lot of reading and planning. Make sure you totally understand > >> > Public > >> > Key Infrastructure, 802.1x, supplicants and how it interacts with > things > >> > like DHCP and logins. It is more secure, but it takes a lot of > >> > understanding. > >> > > >> > On Tue, Oct 19, 2010 at 10:22 AM, Michael T. Bendorf > >> > <bendo...@a-ccentral.us> wrote: > >> >> > >> >> Now that I have HP ProCurve MultiService Mobility Access Points and > >> >> Controllers, I wonder if /now/ is the time to move from a pre-shared > >> >> key > >> >> model to something more secure...but I am totally naive here. > >> >> I have glanced at freeradius before, but I really do not know how it > >> >> all > >> >> work or where to start. > >> >> I am reading through their site with earnest right now, but any > >> >> guidance > >> >> would be great! > >> >> --Michael T. Bendorf-- > >> >> Technology Administrator > >> >> A-C Central C.U.S.D. #262 > >> >> Google Voice: 217.408.0043 > >> >> "I'm trying to teach myself to ask the same questions that you do > >> >> during > >> >> your lectures so that I do not need you any more." > >> >> > >> >> A good teacher is like a candle - it consumes itself to light the way > >> >> for > >> >> others. > >> >> > >> >> "The computer revolution hasn't started yet. Don't be misled by the > >> >> enormous flow of money into bad defacto standards for unsophisticated > >> >> buyers > >> >> using poor adaptations of incomplete ideas." > >> >> - Alan Kay > >> >> > >> >> | Subscription info at http://www.tech-geeks.org | > >> > > >> > > >> > > >> > -- > >> > -- > >> > Ben Story > >> > CCSP, CCNA, CCNA Wireless, CCDA > >> > ben.st...@gmail.com > >> > > >> > "You cannot escape the responsibility of tomorrow by evading it today. > >> > -- > >> > Abraham Lincoln > >> > > >> > | Subscription info at http://www.tech-geeks.org | > >> > > >> > >> > >> > >> -- > >> "Don't ask yourself what the world needs. Ask yourself what makes you > >> come alive and then go do that. Because what the world needs is people > >> who have come alive." -Dr. Howard Thurman > >> > >> ****************************** > >> Aaron Keith Hackney > >> aa...@aaronkeithstudios.com > >> Cell 210.325.2196 > >> ****************************** > >> | Subscription info at http://www.tech-geeks.org | > > | Subscription info at http://www.tech-geeks.org | > > > > > > -- > "Don't ask yourself what the world needs. Ask yourself what makes you > come alive and then go do that. Because what the world needs is people > who have come alive." -Dr. Howard Thurman > > ****************************** > Aaron Keith Hackney > aa...@aaronkeithstudios.com > Cell 210.325.2196 > ****************************** > | Subscription info at http://www.tech-geeks.org | >
| Subscription info at http://www.tech-geeks.org |
