WPA, TKIP, MS-CHAPv2 and Vista

[Psymon]

Hi, help please!!

 

 

The Scenario

 

Wondering if anyone else has come across this. We are in the process of allowing students in our college access to the internet on ther personal laptops, without giving them access to the network as such.

 

At current, we are using ACL lists on our HP switches and VLAN's, the student will connect to the Wireless Access Point in there desired location, the ACL's filter out everything apart from DNS, DHCP, HTTP and HTTPS traffic, this allows them to ONLY obtain an IP, communicate with DNS and use HTTP and HTTPS.

 

The rules also filter our access to the local network by DENYING 10.x.x.x adresses but allowing x.x.x.x adresses (internet) 10.x being local networks.

 

At current the process works fantasticly with Windows XP. The test setup is as follows.

 

 

The Setup

 

Sony Vaio laptop with dual boot XP and Vista.

 

With the XP Setup, it works fantastic. WPA, TKIP, MSCHAPv2. Upon connecting to the access point we are asked for credentials (directed via radius to say 802.1x, in the "Wireless Users" group which we have created on AD. We provide the credentials and domain name, and we are in, with only internet access! WOO!

 

This works PERFECTLY as wanted, students are known by AD logging, so its not an open network that anyone can jump into.

 

 

The Problem

 

We open the boot in Vista, we mimic the EXACT settings, WPA, TKIP, MSCHAPv2, checked, double checked, the settings are EXACT, the hardware is EXACT there is no faults.

 

We start the connection, we are asked for credentials, we get "limited connectivity" and have no assigned IP address (windows generated address is shown on ipconfig) and we cannot get access, dispite using the same hardware and settings.

 

Sorry for the "HOLY WALL OF TEXT!!" but if you have any ideas, experience or solutions, please share.

 

PS - We have applied http://support.microsoft.com/kb/932063

[FN-GM]

I had something similar with WIFI in vista, sometimes it just lost the DCHP assigned IP address. ipconfig /release & ipconfig /renew didn't work I rebooted still nothing. I then used Ethernet instead and after a few days it started to work properly again.

[Geoff]

It's a bug in Vista. Wait for SP1.

[Psymon]

Yea, today for a simple test i brought in 2 laptops from home, XP Client and a Vista Client.

 

XP Client connected flawlessly.

 

Vista Client did the same as our in-house tester.

 

That hotfix didnt do anything either, wait till the new year i guess

 

Cheers,

Si

[FN-GM]

With my problem the Vista laptop would connect to certain wireless routers but not all so i just downgraded

[FN-GM]

This might be useful http://edugeek.net/index.php?name=Forums&file=viewtopic&p=113521#113521

[Psymon]

We made some progress updating the firmware on our HP Wireless Services Module.

 

It now connects flawlessly as the previous did. This could be a combination of the Hotfixes and the Firmware update however, due to applying the hotfixes previous to the firmware update.

 

This is , however, purely a fix for Vista and Procurve Wireless Servies module with dumb wireless terminals (200 Series radio ports).

 

However, we are up and running with students vista laptops! Woo!

 

Cheers for the imput guys, hope this helps someone in the near future

 

Si.