I
RON
S
HIELD
W
HITE
P
APER
W
HITE
P
APER
: 802.1X P
ORT
A
UTHENTICATION
W
ITH
M
ICROSOFT
’
S
A
CTIVE
D
IRECTORY
Additional Tips
If the attempt to obtain a DHCP address fails due to a timing issue (the authentication process was not successful
before the DHCP request timed out) the client may not have a proper DHCP address. Once authentication is
successful and a network connection is granted by the Foundry device, Windows 2000 Professional (SP3 with all
802.1X patches) and Windows XP (SP1) clients should renegotiate a DHCP address with the DHCP server after a
short period of time.
If this is not the case, you can manually release and renew the DHCP address with the following command line
commands:
C:\> ipconfig /release
C:\> ipconfig /renew
These commands can also be placed in a batch file and placed onto the desktop to speed the process of renewing
a DHCP address. An example of the batch file commands are:
ipconfig /release
ipconfig /renew
pause
exit
If you need to manually control the Local Area Connection authentication prompt, temporarily disconnect the
network cable from the client for 10 seconds and then reattach it. This will trigger a new EAP-MD5
authentication process and allow the user to enter the authentication credentials again.
Chia sẻ với bạn bè của bạn: |