topic RE: Laptops unable to connect to wireless in ExtremeCloud IQ- Site Engine Management Center

Laptops unable to connect to wireless

Kent_Sapp — Wed, 29 Jul 2015 18:21:00 GMT

Our school district's Windows 7 laptops are unable to connect to the wireless with the "validate server certificate" setting enabled under the wireless properties. If I uncheck that box the laptop is able to connect. With about 1000 laptops unchecking that on all will be a pain. Would adding a certificate to the NAC solve this problem?

RE: Laptops unable to connect to wireless

Ronald_Dvorak — Wed, 29 Jul 2015 18:38:00 GMT

Hi Kent,

as it isn't clear from your post my assumption is that ...

The Win7 laptop is connected to a SSID which is using 802.1X PEAP and is authenticated via the NAC which has a conenction to a databse (i.e. LDAP) to check the accounts.

Correct ? If not please let us know how the systems interwork which each other.

-Ron

RE: Laptops unable to connect to wireless

Kent_Sapp — Wed, 29 Jul 2015 18:39:00 GMT

Yes, that is correct.

RE: Laptops unable to connect to wireless

Gareth_Mitchell — Wed, 29 Jul 2015 18:45:00 GMT

Kent

You'll need to either deploy the CA certificate to the clients trusted certificate store or uncheck the validate server certificate box, which I think can be done via Group Policy definition.

The problem seems to be that the client can't match the server certificate as a trusted one, this is why it works when the client is told not to validate the server certificate it works.

This article might help: https://gtacknowledge.extremenetworks.com/articles/Solution/802-1x-User-PEAP-User-Rejected-in-NAC

-Gareth

RE: Laptops unable to connect to wireless

Doug — Wed, 29 Jul 2015 18:49:00 GMT

For reference if needed.... https://technet.microsoft.com/en-us/library/Dd283093(v=WS.10).aspx & https://www.microsoft.com/en-us/download/details.aspx?id=3365

RE: Laptops unable to connect to wireless

Kent_Sapp — Wed, 29 Jul 2015 19:30:00 GMT

Is there a was to export the current certificate in NAC so I can deploy it on a laptop?

RE: Laptops unable to connect to wireless

Gareth_Mitchell — Wed, 29 Jul 2015 19:30:00 GMT

Where is your root CA, if NAC is terminating 802.1X the certificate will be self signed and probably not what you want?

This article might help: https://gtacknowledge.extremenetworks.com/articles/How_To/How-To-Update-NAC-Internal-Communications-...

RE: Laptops unable to connect to wireless

Kent_Sapp — Wed, 26 Aug 2015 21:09:00 GMT

Just an update. We got a certificate from GoDaddy and added the wireless settings to a gpo. Our laptops are now connecting without issue. Thank you for all your advice.

RE: Laptops unable to connect to wireless

Drew_C — Wed, 26 Aug 2015 21:09:00 GMT

Hi Kent, Thanks for coming back and updating the thread. Glad to see you got it sorted out!