2009/6/10 Diego Martín Capello <diego@ccc.uba.ar>
Hi alan,
Hi,
self-signed are perfectly fine - but you need to ensure that the CA used is installed onto the client!
you should *never* run an EAP client without certificate validation
I agree with you, but this is only for testing purposes. Each client is responsible for the configuration of his EAP client. Best regards.
alan
It really is an AP issue. Using another AP (SMC WEBT-G) with the same Radius config works... Both Windows XP and Ubuntu connects successfully, no matter if I set certificate validation on or off... Anyway, there are two EAP setting which is supported by the Cisco AP: Open mode with EAP, and something called "Network mode". I'm going to try setting the latter one, maybe it helps. If not, a firmware update will be needed (I think). Thanks for all your comments! Regards Gergely Kiss