Home > Ask the Networking Experts > Wireless networking with Lisa Phifer Questions & Answers > NAC solution authentication fix for your wireless network
Ask The Networking Expert: Questions & Answers
EMAIL THIS

NAC solution authentication fix for your wireless network

Lisa Phifer EXPERT RESPONSE FROM: Lisa Phifer

Pose a Question
Other Networking Categories
Meet all Networking Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 20 January 2008

We are testing NAC solutions with our Aruba 802.11a/g wireless APs, using Windows 802.1X supplicants. When the user logs on, the Windows roaming profile download fails when the connection is re-established during transition from Machine authentication to User authentication. Do you know of any workaround for this problem?


>
EXPERT RESPONSE

A Windows roaming profile contains environmental information (like desktop items) associated with an individual who uses multiple computers. Whenever that user logs onto a Windows PC, his or her roaming profile is automatically copied from the domain controller to the local computer to provide a consistent environment.

Microsoft's website describes a roaming profile problem that might be what you're experiencing. Specifically, Windows XP users who authenticate with 802.1X and EAP-TLS or PEAP may intermittently fail to download their roaming profiles. According to knowledge base article 938117:

"This problem occurs because EAP-TLS and PEAP-TLS use a client certificate to validate the network connection. The roaming profiles that contain the certificate are stored on a domain controller. When you try to download the roaming profiles after you restart the computer, Windows XP also tries to re-authenticate the user. User re-authentication times out before you can download the roaming profiles."

Microsoft recommends two workarounds for this problem. Either stick to machine (computer) authentication only, or reduce the size of the roaming profile so that the download completes faster. You can configure either EAP-TLS or PEAP to "authenticate as the computer when computer information is available" by using the Authentication tab on the Wireless Connection's Properties panel.


Sound Off! -   Be the first to post a message to Sound Off!


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
Wireless networking with Lisa Phifer
What is 802.11n Greenfield mode used for?
Can you create a persistent wireless connection to a wired LAN?
Wireless troubleshooting: AP not reestablishing association after loss of connectivity
What can we expect in an 802.11n Wireless LAN standard implementation?
Can 802.11 protocols be used with GPRS connectivity?
Next generation wireless local area networks'(WLANs) important features
My wireless laptop connectivity disconnected once I downgraded my OS
How to debug poor WLAN performance
How to know if you're connecting to fake or real access points (APs)
What is the difference between a GRE tunnel and IPsec tunnel?

Network Access Control (NAC)
What is data loss prevention? -- An introduction to DLP
How to set passwords on folders in Windows 2003 servers
NAC vendor Bradford Networks offers simplified product for guest and contractor access
What commands allow network traffic to pass through PIX firewalls?
Intelligent network switches on the rise as more is expected of the network
Where is a cheap wireless access solution requiring no administration/support?
Cisco Trusted Security to boost network security, management
Endpoint security locks down law firm's network
Network access control server eases guest access
Juniper updates network access control

Wireless Network Security
Aruba Networks unveils wireless intrusion prevention enhancements, other security upgrades, at Interop
Wireless hot spot security -- podcast
Wireless troubleshooting: AP not reestablishing association after loss of connectivity
Wireless security protocols -- How WPA and WPA2 work
Wireless security -- How WEP encryption works
Will WPA2-PSK keep wireless networks safe from war drivers?
How to know if you're connecting to fake or real access points (APs)
Wireless network security made easy - from The Book of PF
How do I troubleshoot wireless access points (APs) losing connectivity?
Security across network boundaries with Secure Mobile Architecture

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
network access control  (SearchNetworking.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice

HomeNewsTopicsITKnowledge ExchangeTipsAsk the ExpertsWebcastsWhite PapersNetworking Product Trials
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




All Rights Reserved, Copyright 2000 - 2008, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts