AOS-W 6.5.3.x | User Guide 802.1X Configuration for IAS and Windows Clients | 1109
Chapter 45
802.1X Configuration for IAS and Windows Clients
This chapter provides examples of how to configure a Microsoft Internet Authentication Server, and a Windows
XP wireless client for 802.1X authentication with the switch (see 802.1X Authentication on page 259). for
information about configuring the switch
For more information about configuring computers in a Windows environment for PEAP-MS-CHAPv2 and EAP-
TLS authentication, see the Microsoft document Step-by-Step Guide for Setting Up Secure Wireless Access in a
Test Lab, available from Microsoft’s Download Center (at www.microsoft.com/downloads. Additional
information on client configuration is available at
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/wificomp.mspx#EQGAC.
This chapter describes the following topics:
n Configuring Microsoft IAS on page 1109
n Configuring Management Authentication using IAS on page 1111
n Window XP Wireless Client Sample Configuration on page 1113
Configuring Microsoft IAS
Microsoft Internet Authentication Server (IAS) provides authentication functions for the wireless network. IAS
implements the RADIUS protocol, which is used between the Alcatel-Lucent switch and the server. IAS uses
Active Directory as the database for looking up computers, users, passwords, and group information.
RADIUS Client Configuration
Each device in the network that needs to authenticate to a RADIUS server must be configured as a RADIUS
client. You must configure the Alcatel-Lucent switch as a RADIUS client.
The steps to perform this task may very depending on the version of Windows currently running on your server. For
complete details on configuring Windows IAS, refer to the Windows documentation available (at
www.microsoft.com/downloads).
To configure a RADIUS client:
1. From your windows server, navigate to Start > Settings > Control Panel > Administrative
Tools>Internet Authentication Service.
2. In the Internet Authentication Service window, select RADIUS Clients.
3. To configure a RADIUS client, select Action > New RADIUS Client from the menu at the top of the
window.
4. In the New RADIUS Client dialog window, enter the name and IP address for the switch. Click Next.
5. In the next window that appears, enter and confirm a shared secret. The shared secret is configured on
both the RADIUS server and client, and ensures that an unauthorized client cannot perform authentication
against the server.
6. Click Finish.
Remote Access Policies
The IAS policy configuration defines all policies related to wireless access, including time of day restrictions,
session length, authentication type, and group-related policies. See Microsoft product documentation for
To Next Page
Loading...