Network Protocol Server Window Server 2008
IAS
currently
runs
on Windows 2003
Server
configured
as a RADIUS server
which is needed
to migrate to
Windows
Server
2008 R2 on
the new configuration of
NPS.
Using the tool
has been migrated
Iasmigreader.exe
setup
IAS
2003 to
NPS
win
in
Win 2008.
The server is located
within a domain
through
which you have registered
the
ActiveDirectory Domain
Services,
also
has an
Active
Directory Certificate
Services,
DHCPClient
and
Access
Point.
What
is not clear from
the certificate
must be installed on
the RADIUS server and
how it relates to
the Active
Directory Certificate
Services.
When setting
the whole atmosphere
proceeded
with the migration of
existing data
haveRadius
Clients, Remote
RADIUS
Server
Groups, Connection
Request
Policies
and Network
Policies.
The connection method
is certainly
PEAP
with
EAP-MSCHAP
v2.
It
has an
active
Radiusclient
which
tests were
detected
by noting that
wireless
service
and
requests authentication
but yet
the connection is
failed.
January 22nd, 2012 6:50am
Hi Guillermo,
Thanks for posting here.
>
The connection method is certainly PEAP with EAP-MSCHAP v2.
Do you mean we are using PEAP with EAP-MS-CHAP v2 as the authentication method for wireless connection ? Actually This is not a certificate based authentication method
but a password based . Only the NPS server or other RADIUS server is required to have a certificate. The NPS server certificate is used by the NPS server during the authentication process to prove its identity to PEAP clients.
Could you be more specific on this and confirm that ?
I’d like suggest to take look the links below in order to get a better understanding on how NPS works with certificate and the migration scenario:
Certificates and NPS
http://technet.microsoft.com/en-us/library/cc772401(WS.10).aspx
Certificate Requirements for PEAP and EAP
http://technet.microsoft.com/en-us/library/cc731363.aspx
IAS to NPS migration - Moving Certificates
http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/ec50dadf-5591-4a69-9d58-9da2fd5fffa5/
Thanks.
Tiger LiTiger Li
TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
January 23rd, 2012 2:18am
Thanks for
your help as
I can do
to verify the
RADIUS server authentication?
Thanks for
your help
January 24th, 2012 8:45am