Cisco 1242 and EAP-TLS

[jow.01]

Hi

I am hoping someone can help me complete my wifi link using a pair of Cisco 1242's. I and trying to set up a workgroup bridge with security. I can get the bridge working with WEP as a starting point to make sure it was working.

I want to use RADIUS and MS Certificate Authority to use EAP-TLS. I have 1 1242 setup to access the RADIUS which will authenticate my laptop when it has a certificate issues. So I think that end is ok. My problem lies with the workgroup bridge 1242 and it's certificate as it needs to work as a supplicant. When I try to retrieve a certificate from the CA using MSCEP all works ok and a certifcate is installed on the AP but it is a router certificate and not a computer one. When I try to manually assign a computer certificate I do not get as far as when I use the MSCEP.

I have attached a diagram of my set up.

I am sure the certificate is the problem as event log on the windows server will report different errors as I intensionally "break" things until the only thing left is the certificate authentication.

Please help as I am ripping my hair out as I am so close to getting this working.

Cheers

Darren

[Wifi-Guru]

I am not a Cisco expert, but you can get / request a user certificate and you should be able to install that certificate on the supplicant in the AP.

But, if someone ever gets a hold of that AP (steals it) you now have given away your certificate structure.

~K