Ask questions via twitter! Message any question to @answers on twitter. We'll publish the question and send you a reply each time there's a new answer.
Next Question

Answered Question

 
M$1 July 23, 2009 05:57 PM

Delpoying Wireless Network Policies via GPO on a network that runs on a Cisco 4400 controller with WPA-PSK and TKIP. NO Radius server...

Is this possible to deploy wireless policies via group policy on our network? We do NOT have a radius server. I read that it is not possible to deploy with a WPA-PSK security setting. Is this incorrect? Currently this policy is enforced with these settings on our main domain controller:

Network Properties
Network Authentication: WPA-PSK
Data Encryption: TKIP

IEEE 802.1x
EAPOL-Start message: Transmit
Max start: 3
Start Period: 60
Held Period: 60
Authentication period: 30

EAP Type: Protected EAP
UNCHECKED Validate server certificate

CHECKED Authenticate as computer when computer information is available.

Computer Authentication: With user re-authentication

I have been able to connect perfectly for years with the Cisco settings and PSK. I see our network name, click in, and enter the key.

Now, after these settings are applied, I can still "see" the network, I just can't connect. It will prompt me for a password, and then it feels as if it simply doesn't try to verify it with the controller. Instant non-connection. Why?

I just want this to work and prompt for key when on the domain. This will make our life easier, and limit our clients to a single ssid. Which is truly my main concern.

Hope you can help.

Thank you.
Interesting Question?  Yes (1)   No (0)   

Interesting: robbrown

RSS
 
 

Best Answer  Decided by Votes

 
July 23, 2009 06:22 PM
A Radius server isn't required. TKIP is stronger with a radius server, but one isn't required. This is both an advantage and disadvantage of TKIP. A preshared key can be used.

I'd troubleshoot by breaking things apart. In a safe environment, start by setting up an unsecured network, then add each layer of functionally / component into the config of the 4400 and your Group Policy Object (GPO).


Helpful Answer?  (1)   (0)   

Helpful: dward

Tip robbrown for this answer
Permalink | Report
Voted as best: girlieq3000
   Reply  
 
 
 
July 23, 2009 06:52 PM
I'm with @robbrown on this. In addition I don't see why an encryption method would affect or impact your group policy settings. Although this does seem to get complicated... I'm not to much up on this GPO stuff. But the onion approach sounds best especially since you had it working. I'd just analyze what you changed.. and if you can't figure that out then just start pealing layers off one at a time. Or as Rob suggested start from scratch with an open Hot spot and add a layer. Keep in mind there a lot of conflicts and weird incompatibilities out there in the WiFi market. You could always try different encryption like WPA-AES. It sounds like theirs an authentication problem though or an out-out compatibility problem. I once grabed a pseudo random key generated off grc.com for a WPA key and pasted it in and I had accidentally put in one character two many and it completely locked down the AP to any WiFi access. I had login from a wired connection to straighten that out. (of coarse this was a consumer grade device).

You just might for kicks google your WiFi adapter and see if its been known to have any problems. (Of coarse firmware upgrades on both your adapter and router are always good ideas).

Report
 
 

Answer this Question

How tips and payments work

This question has already been resolved. You may add an answer to it but you will not be eligible to win best answer or any associated tips.

Ask a Question


140 characters left
Top of Page
Buy Mahalo Dollars with Credit Card or PayPal

Top Members

This Week All Time
  • buddawiggi
    buddawiggi
    2nd Degree Black Belt
    27543 Points
    M$789.91 Earned
  • opher
    opher
    Purple Belt
    4443 Points
    M$196.22 Earned
  • annelisle
    annelisle
    Purple Belt
    2997 Points
    M$91.22 Earned
   See All
 

Most Popular Tags

mahalo(1618)
iphone(465)
music(461)
google(357)
food(321)
online(295)
beer(279)
money(262)
movies(258)
apple(251)
aotd(235)
health(220)
video(207)
free(205)
dog(205)
   See All
 

Categories

Welcome New Members


 
 
Mahalo Dollars are the currency of Mahalo Answers.

Each Mahalo Dollar costs $1.

Once you earn more than 40 Mahalo Dollars, you can request to be paid via PayPal. Each Mahalo Dollar is currently worth $0.75 when paid out via PayPal. Learn More

 
 

Please log in to use this function.