[c-nsp] windows wireless authentication

Dan Letkeman danletkeman at gmail.com
Mon Jan 7 12:28:54 EST 2008


Hello,

I have a few 1131ag wap's with the latest ios and having trouble
connecting all of our notebooks using the windows wireless zero
configuration software.  This config seems to work with the intel
wireless config software.  Is there something wrong with the config or
is there an issue with security and the windows software?


Building configuration...

Current configuration : 2992 bytes
!
! Last configuration change at 17:05:25 UTC Mon Jan 7 2008 by admin
! NVRAM config last updated at 16:55:08 UTC Mon Jan 7 2008 by admin
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname ap1.do.blsd.net
!
!
aaa new-model
!
!
aaa group server radius rad_eap
!
aaa group server radius rad_mac
!
aaa group server radius rad_acct
!
aaa group server radius rad_admin
!
aaa group server tacacs+ tac_admin
!
aaa group server radius rad_pmip
!
aaa group server radius dummy
!
aaa authentication login default local
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
!
aaa session-id common
!
resource policy
!
led display alternate
ip subnet-zero
!
!
!
dot11 ssid blsd
   vlan 500
   authentication open
   authentication shared
   authentication key-management wpa
   guest-mode
   wpa-psk ascii 7 11111111111111
!
dot11 network-map
power inline negotiation injector override
!
!
username admin privilege 15 password 7 1111111111
!
bridge irb
!
!
interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 encryption vlan 500 mode ciphers aes-ccm
 !
 ssid blsd
 !
 station-role root
 bridge-group 1
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface Dot11Radio0.500
 encapsulation dot1Q 500
 no ip route-cache
 no snmp trap link-status
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface Dot11Radio1
 no ip address
 no ip route-cache
 shutdown
 !
 encryption key 1 size 128bit 7 1111111111111 transmit-key
 encryption mode wep mandatory
 station-role root
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface FastEthernet0
 no ip address
 no ip route-cache
 duplex auto
 speed auto
 bridge-group 1
 no bridge-group 1 source-learning
 bridge-group 1 spanning-disabled
 hold-queue 160 in
!
interface BVI1
 ip address 192.168.50.150 255.255.255.0
 no ip route-cache
!
ip http server
ip http authentication aaa
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
snmp-server view dot11view ieee802dot11 included
snmp-server community public RO
snmp-server chassis-id TechAP
radius-server attribute 32 include-in-access-req format %h
radius-server vsa send accounting
bridge 1 route ip


More information about the cisco-nsp mailing list