PEAP under Cisco Unified Wireless Networks with ACS 4.0 and Windows 2003
Document ID: 72013

Contents
Introduction Prerequisites Requirements Components Used Network Diagram Conventions Windows Enterprise 2003 Setup with IIS, Certificate Authority, DNS, DHCP (DC_CA) DC_CA (wirelessdemoca) Windows Standard 2003 Setup with Cisco Secure ACS 4.0 Basic Installation and Configuration Cisco Secure ACS 4.0 Installation Cisco LWAPP Controller Configuration Create the Necessary Configuration for WPAv2/WPA PEAP Authentication Install the Certificate Templates Snap−in Create the Certificate Template for the ACS Web Server Enable the New ACS Web Server Certificate Template ACS 4.0 Certificate Setup Configure Exportable Certificate for ACS Install the Certificate in ACS 4.0 Software CLIENT Configuration for PEAP using Windows Zero Touch Perform a Basic Installation and Configuraiton Install the Wireless Network Adapter Configure the Wireless Network Connection Problem: Odyssey Client Prompts Three Times for Token Authentication Platform PEAP Authentication Fails with ACS Server Related Information

Introduction
This document describes how to configure secure wireless access using Wireless LAN controllers, Microsoft Windows 2003 software and Cisco Secure Access Control Server (ACS) 4.0 via Protected Extensible Authentication Protocol (PEAP) with Microsoft Challenge Handshake Authentication Protocol (MS−CHAP) version 2. Note: For information about the deployment of secure wireless, refer to the Microsoft Wi−Fi web site and Cisco SAFE Wireless Blueprint.

Prerequisites
Requirements
There is an assumption that the installer has knowledge of basic Windows 2003 installation and Cisco controller installation as this document only covers the specific configurations to facilitate the tests.

For initial installation and configuration information for the Cisco 4400 Series Controllers, refer to the Quick Start Guide: Cisco 4400 Series Wireless LAN Controllers. For initial