I have a problem with my WPA-Enterprise configuration using Windows
2003/PKI/RADIUS/Active Directory infrastructure. I am using the Linksys
WAP, which appears to by common amongst all the people having problems (WAP
and Router from Linksys have same wireless functionality).

My tcpdump logs show successful acceptance of authetication via udp port
1812 communications between the WAP and the Windows 2003 RADIUS server, but
the Windows box continues to loop in a "attempting to autheticate" mode.
Many successful "Access Accepted" entries are found in the event log of the
Windows 2003 RADIUS server.

It would appear that the WPA encryption schemes in the Linksys and Vista are
incompatible. This machine was a Windows XP SP2 and worked fine before the
upgrade to Vista, and all other Windows XP SP2 machines which use this WAP
authenticate just fine.


--
Edward Ray
CCIE Security, CISSP, GCIA Gold, GCIH Gold, MCSE+Security, PE

Ed;
Ya take offense when people hit ya about your initials;
But this time ;your initials mean didly squat about WPA;Linksys;and Vista.
NOT ONE SINGLE PROBLEM;running Linksys WPA2 Enterprise; Vista;XP or
"Edward Ray" wrote in message
...
I have a problem with my WPA-Enterprise configuration using Windows
2003/PKI/RADIUS/Active Directory infrastructure. I am using the Linksys
WAP, which appears to by common amongst all the people having problems (WAP
and Router from Linksys have same wireless functionality).

My tcpdump logs show successful acceptance of authetication via udp port
1812 communications between the WAP and the Windows 2003 RADIUS server,
but the Windows box continues to loop in a "attempting to autheticate"
mode. Many successful "Access Accepted" entries are found in the event log
of the Windows 2003 RADIUS server.

It would appear that the WPA encryption schemes in the Linksys and Vista
are incompatible. This machine was a Windows XP SP2 and worked fine
before the upgrade to Vista, and all other Windows XP SP2 machines which
use this WAP authenticate just fine.


--
Edward Ray
CCIE Security, CISSP, GCIA Gold, GCIH Gold, MCSE+Security, PE

Ooops,
Hit the return key by mistake.
Anyhow; it's not Vista now. Look at your hardware. Running Vista;xp; Linksys
WPA2 Enterprise;
Not that you were incorrect before, Vista's stack wasn't altogether till
recently. And with your knowledge;you well know that the network stack is
difficult to tune.
Running WPA; WPA2; WPA2 Enterprise, Vista; automatic key rotation(at
ANY interval);manual; automatic channel selection; manual; and MAC filtering
to boot. NOT ONE SINGLE DROP.
Hardware; it seems may be your problem. Not Vista, Look at your exact
Linksys model; get all the firmware updates
Linksys; Vista; WPA WPA2 and MAC filttering; working fine; here.

Jeff
No accredidation needed-lol

"Edward Ray" wrote in message
...
I have a problem with my WPA-Enterprise configuration using Windows
2003/PKI/RADIUS/Active Directory infrastructure. I am using the Linksys
WAP, which appears to by common amongst all the people having problems (WAP
and Router from Linksys have same wireless functionality).

My tcpdump logs show successful acceptance of authetication via udp port
1812 communications between the WAP and the Windows 2003 RADIUS server,
but the Windows box continues to loop in a "attempting to autheticate"
mode. Many successful "Access Accepted" entries are found in the event log
of the Windows 2003 RADIUS server.

It would appear that the WPA encryption schemes in the Linksys and Vista
are incompatible. This machine was a Windows XP SP2 and worked fine
before the upgrade to Vista, and all other Windows XP SP2 machines which
use this WAP authenticate just fine.


--
Edward Ray
CCIE Security, CISSP, GCIA Gold, GCIH Gold, MCSE+Security, PE

Ed,
Ya know i'm just jazzin ya bout your initials
relax a bit. LOL
Seriously; sounds like it's your linksys, cuz it's definitely not WPA or
Vista.
I myself have a bit of knowledge about this;and trust me, I tryed every
combination I could think of; and looked extensively at this.
It's not Vista; anymore. LOL
Running Vista and XP and encryption; fine here.
Jeff

"Jeff" wrote in message
...
Ooops,
Hit the return key by mistake.
Anyhow; it's not Vista now. Look at your hardware. Running Vista;xp;
Linksys WPA2 Enterprise;
Not that you were incorrect before, Vista's stack wasn't altogether
till recently. And with your knowledge;you well know that the network
stack is difficult to tune.
Running WPA; WPA2; WPA2 Enterprise, Vista; automatic key rotation(at
ANY interval);manual; automatic channel selection; manual; and MAC
filtering to boot. NOT ONE SINGLE DROP.
Hardware; it seems may be your problem. Not Vista, Look at your exact
Linksys model; get all the firmware updates
Linksys; Vista; WPA WPA2 and MAC filttering; working fine; here.

Jeff
No accredidation needed-lol

"Edward Ray" wrote in message
...
I have a problem with my WPA-Enterprise configuration using Windows
2003/PKI/RADIUS/Active Directory infrastructure. I am using the Linksys
WAP, which appears to by common amongst all the people having problems
(WAP and Router from Linksys have same wireless functionality).

My tcpdump logs show successful acceptance of authetication via udp port
1812 communications between the WAP and the Windows 2003 RADIUS server,
but the Windows box continues to loop in a "attempting to autheticate"
mode. Many successful "Access Accepted" entries are found in the event
log of the Windows 2003 RADIUS server.

It would appear that the WPA encryption schemes in the Linksys and Vista
are incompatible. This machine was a Windows XP SP2 and worked fine
before the upgrade to Vista, and all other Windows XP SP2 machines which
use this WAP authenticate just fine.


--
Edward Ray
CCIE Security, CISSP, GCIA Gold, GCIH Gold, MCSE+Security, PE

You start out harsh, then mellow out. WTF?

"Jeff" wrote in message
...
Ed,
Ya know i'm just jazzin ya bout your initials
relax a bit. LOL
Seriously; sounds like it's your linksys, cuz it's definitely not WPA or
Vista.
I myself have a bit of knowledge about this;and trust me, I tryed every
combination I could think of; and looked extensively at this.
It's not Vista; anymore. LOL
Running Vista and XP and encryption; fine here.
Jeff

"Jeff" wrote in message
...
Ooops,
Hit the return key by mistake.
Anyhow; it's not Vista now. Look at your hardware. Running Vista;xp;
Linksys WPA2 Enterprise;
Not that you were incorrect before, Vista's stack wasn't altogether
till recently. And with your knowledge;you well know that the network
stack is difficult to tune.
Running WPA; WPA2; WPA2 Enterprise, Vista; automatic key rotation(at
ANY interval);manual; automatic channel selection; manual; and MAC
filtering to boot. NOT ONE SINGLE DROP.
Hardware; it seems may be your problem. Not Vista, Look at your exact
Linksys model; get all the firmware updates
Linksys; Vista; WPA WPA2 and MAC filttering; working fine; here.

Jeff
No accredidation needed-lol

"Edward Ray" wrote in message
...
I have a problem with my WPA-Enterprise configuration using Windows
2003/PKI/RADIUS/Active Directory infrastructure. I am using the Linksys
WAP, which appears to by common amongst all the people having problems
(WAP and Router from Linksys have same wireless functionality).

My tcpdump logs show successful acceptance of authetication via udp port
1812 communications between the WAP and the Windows 2003 RADIUS server,
but the Windows box continues to loop in a "attempting to autheticate"
mode. Many successful "Access Accepted" entries are found in the event
log of the Windows 2003 RADIUS server.

It would appear that the WPA encryption schemes in the Linksys and Vista
are incompatible. This machine was a Windows XP SP2 and worked fine
before the upgrade to Vista, and all other Windows XP SP2 machines which
use this WAP authenticate just fine.


--
Edward Ray
CCIE Security, CISSP, GCIA Gold, GCIH Gold, MCSE+Security, PE

"Jeff" wrote in message
...
Ooops,
Hit the return key by mistake.
Anyhow; it's not Vista now. Look at your hardware. Running Vista;xp;
Linksys WPA2 Enterprise;
Not that you were incorrect before, Vista's stack wasn't altogether
till recently. And with your knowledge;you well know that the network
stack is difficult to tune.
Running WPA; WPA2; WPA2 Enterprise, Vista; automatic key rotation(at
ANY interval);manual; automatic channel selection; manual; and MAC
filtering to boot. NOT ONE SINGLE DROP.
Hardware; it seems may be your problem. Not Vista, Look at your exact
Linksys model; get all the firmware updates
Linksys; Vista; WPA WPA2 and MAC filttering; working fine; here.

My Linksys WAP54G is running the latest firmware rev 3.04; noe WPA2 just WPA

Ed,
Can't address the WAP54G;because I'm running a WRT54GX2; but; from this
model; running any and all encryption;with no problems.
This includes WEP;WPA*,WPA2*(*including TKIP;AES);not to mention MAC
filtering;and running Vista;and XP on the same network.
No problems at all.
So you can rule out Vista; and at least 1 Linksys model;as the problem.
Jeff


"Edward Ray" wrote in message
...

"Jeff" wrote in message
...
Ooops,
Hit the return key by mistake.
Anyhow; it's not Vista now. Look at your hardware. Running Vista;xp;
Linksys WPA2 Enterprise;
Not that you were incorrect before, Vista's stack wasn't altogether
till recently. And with your knowledge;you well know that the network
stack is difficult to tune.
Running WPA; WPA2; WPA2 Enterprise, Vista; automatic key rotation(at
ANY interval);manual; automatic channel selection; manual; and MAC
filtering to boot. NOT ONE SINGLE DROP.
Hardware; it seems may be your problem. Not Vista, Look at your exact
Linksys model; get all the firmware updates
Linksys; Vista; WPA WPA2 and MAC filttering; working fine; here.

My Linksys WAP54G is running the latest firmware rev 3.04; noe WPA2 just
WPA

"Jeff" wrote in message
...
Ed,
Can't address the WAP54G;because I'm running a WRT54GX2; but; from this
model; running any and all encryption;with no problems.
This includes WEP;WPA*,WPA2*(*including TKIP;AES);not to mention MAC
filtering;and running Vista;and XP on the same network.
No problems at all.
So you can rule out Vista; and at least 1 Linksys model;as the problem.
Jeff
All of my Windows XP SP2 machines can link to the same Linksys WAP using the
same credentials. No, I still think this is a Vista issue. The WAP is
sending authetication request (presumably from the Vista box) to the RADIUS
Server (and Windows 2003 R2 Domain Controller). The RADIUS server sends
back "Access Accept" messages to the WAP, bu they are apparently not
reveived by the Vista machine as it continues to send Access Request to the
RADIUS server via the Linksys WAP.

Ed,
Not a Vista WPA encryption issue, if it was; I wouldn't be able to run
WPA with my linksys
Which I can, so I'm thinking it's your Linksys

Jeff

"Edward Ray" wrote in message
...

"Jeff" wrote in message
...
Ed,
Can't address the WAP54G;because I'm running a WRT54GX2; but; from
this model; running any and all encryption;with no problems.
This includes WEP;WPA*,WPA2*(*including TKIP;AES);not to mention MAC
filtering;and running Vista;and XP on the same network.
No problems at all.
So you can rule out Vista; and at least 1 Linksys model;as the
problem.
Jeff
All of my Windows XP SP2 machines can link to the same Linksys WAP using
the same credentials. No, I still think this is a Vista issue. The WAP
is sending authetication request (presumably from the Vista box) to the
RADIUS Server (and Windows 2003 R2 Domain Controller). The RADIUS server
sends back "Access Accept" messages to the WAP, bu they are apparently not
reveived by the Vista machine as it continues to send Access Request to
the RADIUS server via the Linksys WAP.

"Jeff" wrote in message
...
Ed,
Not a Vista WPA encryption issue, if it was; I wouldn't be able to run
WPA with my linksys
Which I can, so I'm thinking it's your Linksys

Jeff
Which it very well be. Firmware rev is 3.04, circa 11/2005. Does your
Linksys have a later rev? Suspect that since this is a WAP and not a router
(which probably sells better) that Linksys has been lazy about getting out
revs. Interesting that the Access Requests from the Vista to the RADIUS
server via WAP seem to be getting through. The RADIUS server responds, but
the response does not pass through...