|
Originally Posted by Roudou
|
OK I just finished tsting and WPA-TKIP + 802.1x works just fine in both scenario :):
1) no certificates installed on the X30 + "permit login using my certificates" OFF + "validate server cretificates" OFF
2) an installed Root CA certificate (click on certificate issued by CA in file explorer and installation goes smooth and automatically) + "permit login using my certificates" OFF + "validate server cretificates" ON :exc:
When in scenario 2) I removed my CA root certificate, it fails to authenticate and I get the following error message in "Odyssey client/Detailes status/authentication" : authentication reason "client issued alert 40 (handshake failure)
It would be interesting to see what you get in this detailed status. Try scenario 1) first. Authentication is solely based on the username and password you entered on the client (no certificate story here).
That'all I could do for now. Hope it heps.
|
First off, I would just like to thank you for the help. :)
Scenario 1 was exactly what I was doing before. I am not using any certificates, just the username/password for authentication. I made sure none of the checkboxes pertaining to certificates were checked off when I ran the config. I still got the error that says "Client and server could not agree on an authentication method"
I tried scenario #2 even though I am not using any certificates just to see what error I would get. In that case the error that came up was "Client issued alert 42 (Bad certificate)" This error seems tomake sense considering I do not have a certificate.
I am beginning to think there is a problem on the router end because it seems that you can get the WPA/TKIP to work with no problems. I tried to do this in the Dell WLAN utility rather than using Odyssey but I do not have the same options (such as the ability to use the username/password combo)
I do have one question for you. What EAP method did you use? I am using EAP/PEAP because that is what I use on my laptop. I tried a few other methods but they didnt seem to work either. Ill keep trying.