2009/6/10 Diego Martín Capello <diego@ccc.uba.ar>

Hi alan,
> Hi,

>
>
> self-signed are perfectly fine - but you need to ensure that the CA
> used is installed onto the client!
>
> you should *never* run an EAP client without certificate validation

I agree with you, but this is only for testing purposes. Each client is
responsible for the configuration of his EAP client. Best regards.

> alan
>

It really is an AP issue. Using another AP (SMC WEBT-G) with the same Radius config works... Both Windows XP and Ubuntu connects successfully, no matter if I set certificate validation on or off... Anyway, there are two EAP setting which is supported by the Cisco AP: Open mode with EAP, and something called "Network mode". I'm going to try setting the latter one, maybe it helps. If not, a firmware update will be needed (I think).

Thanks for all your comments!

Regards

Gergely Kiss