• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

How to setup WPA-PSK

LuckyTaxi

Diamond Member
We need users to authenticate themselves so they can log into the domain over wireless. I've read that you need a RADIUS server. Then I found another artcile on D-LINK's website stating one can do this with WPA-PSK.

Nevermind, it seems my apple airport doesnt like WPA-PSK for some reason. It keeps reverting to WEP.
 
As far as setup goes, doing WPA-PSK is pretty much like doing WEP: You give the AP and each client a password, it must match exactly (including upper/lower case) and (as a good practice) shouldn't have any leading or trailing spaces (space is an ASCII "20" - not a "blank").

Given the choice of AES or TKIP, try TKIP first, it's the most likely to work. If you can get TKIP to work, leave the SSID and PSK (Pre-Shared Key) the same, and try AES.

AES would be the more desirable, but it's newer and a little less likely to be supported on older WPA-enabled NICs.


Good Luck

Scott
 
WPA is actually a "Key Management" system, part of encryption. Radius is the Authentication side (don't think most home/low end stuff supports this). KeyMangement/Encryption you talk WEP, WPA, CCKM, etc. Authentication, you talk, EAP, LEAP, Open Shared
 
Somehow, I need my laptops at work to authenticate the users to the domain. it's a pain in the ass cuz now they have to log in locally and then map a drive to their shared folder. I dont think we'll be implementing a RADIUS server. Any other option?
 
There should NOT be local accounts or local logon. Have them logon using CACHED accounts. I use WPA (pre-shared keys) for the wireless auth, and then domain logon for the user/machine logon.
 
to authenticate prior to login you require a radius server. I would look into implementing LEAP authentication, you can still use WEP/WPA/WPA2/CCKM/No encryption. The only experience I have is with Cisco's ACS server, and it works beautifully. Do your cards/AP's support LEAP, EAP, Fast, PEAP, or any other EAP based authentication?
 
Back
Top