• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 552
  • Last Modified:

How do I configure 802.1x on Windows Server?

Hello,

Please coukld someone direct me to a nice basic website where I can find instructions on how to create a test environment for IEEE 802.1x?

I found this nice little white paper from Microsoft but it assumes you have some knowlege and an understanding of the various components that have to be installed.

http://www.microsoft.com/downloads/en/details.aspx?familyid=05951071-6b20-4cef-9939-47c397ffd3dd&displaylang=en
0
evansjam
Asked:
evansjam
  • 3
  • 3
1 Solution
 
Rich RumbleSecurity SamuraiCommented:
Depends on your switch, but the rules are the same, configure your switch to use 802.1x and enable the ports with 802.1x. On the clientside 802.1x should be seemless, but it can be configured to use preshared certificates.
So what switch do you have, do you have a radius server and a AD server?
-rich
0
 
evansjamAuthor Commented:
Hello Rich,

At the moment I have a Cisco switch, an MSDN licence and a server which I can install anything onto.  Apart from that, I don't know what else to do.  Sorry if I sound a bit thick.

Best regards,
James
0
 
Rich RumbleSecurity SamuraiCommented:
Which model of switch, some older models and some older Cat-OS software aren't capable.
-rich
0
Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
evansjamAuthor Commented:
CISCO WS-C2960-24TT-L Catalyst
0
 
Rich RumbleSecurity SamuraiCommented:
http://www.cisco.com/en/US/docs/switches/lan/catalyst2960/software/release/12.2_25_fx/configuration/guide/sw8021x.html
That should do it. Then configure your windows radius server: http://technet.microsoft.com/en-us/library/cc731853.aspx
Make sure the clients have the supplicant (xp and newer typically have the 802.1x supplicant installed by default on all NIC's) The supplicant relies on the following services to be started before you can authenticate:
    * The WZCSVC service
    * The Wired AutoConfig service (DOT3SVC) (xp-sp3 clients only)
-rich
0
 
evansjamAuthor Commented:
Thanks for your help, this is great.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now