AP3500

Similar Questions

• 802. 1 x authentication wireless of the against Authenticator RADIUS

  Hi all

  I would check some parameter Wireless 802.1 x authenticaiton client-side.

  The network configuration using

  -Cisco WLC 7.2 and AP3500,

  -ACS 5.3

  -Microsoft Windows server 2008 AD of accommodation and services of the AC (same machine)

  -Client operating system is Microsoft Windows 7.

  Authentication process could use PEAP - MSChap V2 Combo.

  My question:

  01. in the AD environment, ACS 5.3 is part of the computer from the domain?

  02 having connectivity secure, IF security policy forces the client to check "Validate server certificate", which certificate is looking for? East - the certifate of identity of the ACS, requiring a CA to sign the CSR Server?

  03. next customer return, should the customer also need to import this certificate in the certification authorities trusted root?

  Or the client will trust identity certificate ACS against the CA certificate store root certification authorities to roots of trust of the customer where they have the same transmitter?

  04 extra question: If no environment CA suffice simply export ACS self-signed certificate and import it on the client computer, and he trusted?

  Thank you

  Noel

  Christmas Hello-

  Please find my answers below:

  01. in the AD environment, ACS 5.3 is part of the computer from the domain?

  You shouldn't have to make changes to GBA machine, once you join to your domain. You must make sure that the account that you use to join the domain has the appropriate permissions. For more information on which you can check out this link:

  http://www.Cisco.com/en/us/products/ps9911/products_configuration_example09186a0080bc6506.shtml

  02 having connectivity secure, IF security policy forces the client to check "Validate server certificate", which certificate is looking for? East - the certifate of identity of the ACS, requiring a CA to sign the CSR Server?

  Yes, if you want the connection to be secure/encrypted, you will need to use a certificate. The certificate may be either a public/paid. The important part is for the certificate to be pushed to all end workstations. This can be done via GPO

  03. next customer return, should the customer also need to import this certificate in the certification authorities trusted root?

  Or the client will trust identity certificate ACS against the CA certificate store root certification authorities to roots of trust of the customer where they have the same transmitter?

  See above

  04 extra question: If no environment CA suffice simply export ACS self-signed certificate and import it on the client computer, and he trusted?

  See above

  Thanks for the note!