I've been trying to autheticate a Wireless Acess Point through a Radius Server for last 1 month, but things doesn't seem to be working for me. The Radius Server is authenticating when I test it with the radtest command. It also worked for a Cisco 2950 switch. But no luck when I use the Access Point. I have tried 3 different accesspoints, including Linksys, D-Link and the Firepro, but none of them worked.
I do not get any error when I check the radius in debug mode. It says "Sending Access-Challange to ....", but the client doesn't get authenticated. I seriously need help on this.
1. Do I really need certificates for authentication?
Yes. That conversation is EAP-TLS. *You* have selected that authentication method when you were creating the connection.
Is there a way to achieve WPA with UserName and Password, without installing certificates?
Yes. You can do PEAP with usernames and passwords. You might need to install CA certificate if you are signing your own.
2. Should the AP send "User-Password" attribute to the Radius Server?
No.
Or should the Radius Server send an Access-Challange to the AP, and AP does matching and all.
AP does nothing. It jast passes the challenge to the users machine. Ivan Kalik Kalik Informatika ISP