PowerConnect 3424 and Port-Based 802.1x security using IAS

Question

Folks,   I was trying to make PowerConnect 3424 work with 802.1x Port-based security using IAS, but have failed miserably. The farthest I've got was IAS giving me following erorr messages:   User MYDOMAIN\user1 was denied access.Fully-Qualified-User-Name = mydomain.local/Users/USER1NAS-IP-Address = 10.100.11.19NAS-Identifier = Called-Station-Identifier = Calling-Station-Identifier = Client-Friendly-Name = SWITCH1 Client-IP-Address = 10.100.11.19 NAS-Port-Type = Ethernet NAS-Port = 1 Proxy-Policy-Name = Use Windows authentication for all users Authentication-Provider = Windows Authentication-Server = Policy-Name = 801.1x Authentication-Type = EAP EAP-Type = MD5-Challenge Reason-Code = 19 Reason = The user could not be authenticated using Challenge Handshake Authentication Protocol (CHAP). A reversibly encrypted password does not exist for this user account. To ensure that reversibly encrypted passwords are enabled, check either the domain password policy or the password settings on the user account. Well, besides the fact that I did not work, I would really like to use computer-based authentication, so the computers would connect to the network even if user hasn't yet logged on. I've followed some 802.1x and IAS threads on this forum, but unfortunatelly most of them talk about 33XX and 53XX series switches and none of them has the solution. They refer to some new firmware lelease that was due in June 2005 or the end of 2005 that were to add certificate-based authentication support, but it ends there.... If possible, could someone please post working configuration settings for IAS server / XP Client and Dell Switch that make all that possible. I'd really like to use 802.1x and not go back to the MAC-based ACL nightmare. Thank you very much!

Adam N · Answer

Hi,   Let me know if you still need help with this.   Regards

Networking General

Was this post helpful?