NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
GS108T port authentication with 802.1x problem
Recently I bought a couple of GS108T switches that I'm supposed to use together with 802.1x authentication. I set up a PKI structure that worked good and used NPS (network policy server) on Win 2k8...
NogNeetMachinaal wrote: Hello,
What settings did you use on all three for making this work?
For now, I would settle for EAP-MD5.
Grtz - Will
You have to unlock EAP-MD5 in 2008 Server and then choose it in Network Policy Server as authentication option.
http://social.technet.microsoft.com/Forums/en-US/winserverNAP/thread/e801bdac-9347-4efb-9d7c-bcf4d64aa927/
I think they have removed it in Server 2008 R2 though.
you can use md5 instead of certificates (md5 is way less secure of course). the only switches that support eap (what you want to use) are the big 7000 series switches.
polecats wrote: Recently I bought a couple of GS108T switches that I'm supposed to use together with 802.1x authentication. I set up a PKI structure that worked good and used NPS (network policy server) on Win 2k8 to manage the 802.1x. It didn't work, and after a while when I tried tried and tried again I decided to call the Netgear support here i Sweden. I asked them how long the PKI-keyes for the certificates can be (2048 or 4096-bit or something like that). They started a case and now I got an answer: "Notes added by 30002 GS108T and all smart switches only allow port authetication using MD5 Certificate based port authetication is not supported. To have suppport you need managed switch" Now two questions: 1) Isn't GS108T a managed switch? 2) I now certificates aren't supporter, which are the options that I can use instead for 802.1x? Please give me some examples/ideas :) Thanks! /Calle
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
