I finally carved out some time to see how hard it would be to reconfigure my company's DMZ-based wireless network for "WPA Enterprise" authentication rather than the standard WPA-PSK configuration that was in use.
Using no more than a current version of the Linksys WRT54G, a Windows 2003 server with Active Directory, Certificate Authority, and Internet Authentication Services installed, it's pretty straightforward to put together a wireless network that offers WPA encryption with RADIUS-server based PEAP authentication that supports both WPA-enabled Windows and Macintosh clients.
The advantages, of course, being that there is no common 'shared key' as each user will have his/her unique login, including guests.
Can you provide the links to the instructions you are using?
Thanks
Doug,
To be honest, I had to crunch through a handful of sites to get the instructions down right; funny how easily it is to leave little things out that send you on a wild hunt for more info.
I've got basic guidelines and screenshots of my configuration in a Word doc; let me get that polished up a bit and I'll publish it online shortly for my own reference as well for future reference.
Would be appreciated. I'd like to share this info with non-profits I work with.
I want to get them off of WEP and PSK as fast as possible.
Any links would be nice too.
Doug,
Okay, here's a first draft of the steps I took to enable a simple WPA RADIUS authentication infrastructure.
WPA, RADIUS, & Protected EAP Authentication
I will fill in and touch up the instructions with more notes and screenshots as needed.
[Link fixed]
nice job, the link kind of wrong. I think it can't link directly to the page. I have to click "encryption guides" on top then click on the document itself
Very nice. Would you be interested in getting paid for creating more of theses?