WiFi on Vista RC-1

[picch]

has anyone gotten UAWiFi to work with vista yet? I spent the better part of an hour today trying to connect but was unable to even with the correct security settings in place. Since vista is still in beta, i'm unable to determine if this is a problem with vista, UAWiFi, or me setting up the configuration.

[dparm]

Are the certificates different? Maybe they could be imported.

[picch]

The certificates list in vista is about half of what it is in XP however the "Equifax Secure Certificate Authority" option is still there. That's the one I've been trying to use with no luck. (It's also the only Equifax option in vista whereas xp has around 4)

[dparm]

Does Vista have native WPA2 support? I know XP had an optional installer you had to use with certain cards.

[picch]

Yes it does. It has native support for WEP, WPA (Personal and Enterprise) & WPA2 (Personal and Enterprise). I think the MHD router uses WPA2, and if that is indeed the case then it's something with the enterprise part of WPA2, because I was connected fine to the MHD router last week.

[dparm]

My Linksys router has a mixed-compatibility WPA mode. Perhaps try that?

[y2kboy23]

I too have been having problems with connecting to the UAWifi. The thing I noticed is that you can't have security set to WPA2 and also have the 802.1x authentication on at the same time. I have tried many different ways and still no luck.

[ecwilson]

I set up everything exactly as in the picture tutorial (I had two other people verify this). When I finish editing the connection and try to connect to the network, it fails. Note this screen, which says that my settings don't match those of the network.

http://img135.imageshack.us/img135/8613/screenlu6.jpg

Any fix for this yet?

[amccabe]

I was trying to help someone set-up UAWiFi on Vista Beta 2 a cople of days ago with no luck. I haven't tried it with RC2 yet. Hopefully that works.

[ecwilson]

Forgot to say that I am actually on RC2 right now.

[picch]

RC-2 doesn't work either Andrew :(

[dparm]

Have you ever tried copying the certificate from an XP installation to Vista?

[ecwilson]

I'll bite. How would one do this? I'll report back with results after you tell me. Thanks.

[ecwilson]

I tried to import the certificate and it still didn't work.

[dparm]

I'll work on it tomorrow when I'm in the Underground. I installed Vista RC2 on a partition on my laptop HDD, so I'll see what I can do.

[Unregistered]

I'll work on it tomorrow when I'm in the Underground. I installed Vista RC2 on a partition on my laptop HDD, so I'll see what I can do.

Hey Dan, it's Richard the new tech lead. I've been working on getting uawifi to work with vista for a while. I'm pretty sure that it's either a windows networking issue or a permissions thing. Like the certificate needs to be imported as administrator or something along those lines.

[dparm]

Thanks for the heads-up, Rich. I'll take that into consideration.

As Kate had said, it's a beta operating system...they're under no obligation to support it.

[Unregistered]

Thanks for the heads-up, Rich. I'll take that into consideration.

As Kate had said, it's a beta operating system...they're under no obligation to support it.

Yeah but it is being released next month to businesses. Seems logical to be ready when the OS is publicaly released. They should be thinking ahead.

[picch]

Yeah but it is being released next month to businesses. Seems logical to be ready when the OS is publicaly released. They should be thinking ahead.

*bites tongue* Agreed

It has to be something permission related, technically it shouldn't matter what OS you are running, as long as it supports the correct encryption and certificates

[Unregistered]

any progress?

[picch]

None here,
I did however talk to someone with UA Telcom at the TechFair a few weeks ago about it. He didn't know why it wasn't working either but told me he would look into it and let me know his findings. So we'll see if/when that happens

[Unregistered]

I have Windows Vista Business installed on my laptop. I have all the latest drivers. I configured the connection manually per all the specified settings. The problem is that Vista does not recognize the network as WPA or WPA2. It sees it as WEP. I know it is not a hardware issue because I had it fully operational using the same hardware in XP. This totally sucks. I don't want to reinstall XP, but there seems to be no ETA on fixing this.

James West
jawz0414@email....

[picch]

Windows Vista <Insert Edition> doesn't work with UAWiFi and there is no ETA on when this will be fixed

[dparm]

Super.

Does the VPN client work on Vista?

[jharriso]

Super.

Does the VPN client work on Vista?

Mmmmm, nope.
The installer flips out when I try to run it, even as an XP compatible app.
Cisco! Give us a Vista VPN client!

[Martin Scheer]

Just FYI: I successfully installed the Cisco VPN on Vista Business. The version i'm running is 4.8.01.0590, seems like the University's Distro (4.8.02.0010) should work. If it doesn't, you can get the .01 build from here: http://vpnclient.clearchannel.com/

Also, seemingly very few people can get Vista in any flavor running with a RADIUS setup, so it's not a localized issue (see www.broadbandreports.com).

Hope this helps,
Martin

[rprice1]

So does it come down to the certificate doesn't work with vista yet? That'd be no good for anyone who wants to use wifi

[Martin Scheer]

Still no go, however, now it's just giving a connection error rather then the 'Settings are improperly configured' error with 802.x WEP selected. Maybe a good sign?

/M

[dparm]

^ No. 802.x is the PEAP authentication that UAWiFi uses. All that error tells you is that it can't authenticate properly (because you don't have the correct certificate).

[Scott]

Is there an ETA for getting WiFi working for Vista. Where will it be announced when there is a solution.

Thanks.

[dparm]

Once we [OSCR] knows, I'm sure we'll post it on our website. CCIT will probably put it on the UAWiFi page as well.

No ETA as of yet, but they're working on it.

[jbarrett]

I spoke with Ken Boynton today and he informed me that PEAP is "broken" in Vista. Ken (and thousands of others) have notified Microsoft. Undoubtedly, MS engineers are furiously working on a service pack that will fix the problem.

There is no ETA

- Jean

[bgwinkel]

Why oh why didn't anyone realize this? D:

You'd think that with the sheer volume of Beta testing, this large of a problem would have been discovered.

[dparm]

IIRC there was a recent update to Vista RTM that included PEAP & MSCHAP fixes.

[jbarrett]

I saw the same thing Dan and forwarded it on to Ken Boynton. Hopefully, we'll see a resolution soon.

- Jean

[mcbrides]

Why oh why didn't anyone realize this? D:

You'd think that with the sheer volume of Beta testing, this large of a problem would have been discovered.

I told microsoft about it when I was beta testing it. Guess they thought I didn't know what I was talking about.

[dparm]

Don't worry, people on the Dell Community Forum are complaining too -- many of them need LEAP for work and it isn't in Vista.

[picch]

I told microsoft about it when I was beta testing it. Guess they thought I didn't know what I was talking about.

I made Microsoft and ccit/sirt aware of the situation as well, I got the same impression you did.

[Unregistered]

I am facing some problem when I try connecting to my wireless network with CISCO ACS Certificate . To explain in etail, in my office network there is wireless connection and I was able to connect to the same without any issues.We were using WEP key till that time But last week they moved to this authentication based on certificate (CISCO ACS) and then I am not able to connect from my VISTA. Employees who use XP are not having any issues. These are the steps that I did


In the properties, security tab and
In the security type drop down values I chose 802.1X and
In the Encryption type drop down WEP.

In the network authentication method drop down I chose PEAP and checked the checkbox next to "cache user information for subsequent connections to this network "then
clicked setting and in the window that opened

I have enabled "Validate Server certificate" and in the Trusted Root certifcation Authorities I have enabled the certificate that was given by my network team and which I installed in my PC.

I have enabled "Do not prompt user to authorise new servers or trusted certification authorities".


In the "Select Authentication Method" drop down I chose EAP-MSCHAP v2 and I have enabled the "Enable Fast Reconnect" option as well.

Then I clicked "Configure" button and have enabled "Automatically use my Windows logon name and password (and domain if any)

DETAILED LOG:
--------------

Root cause:
Windows cannot connect to "mobile"
Windows was unable to verify the identity of the server.

Detailed root cause:
EAP authentication failed because Windows could not verify the authenticity of the server's certificate
Workaround for hypothesis: Contact the network administrator for "mobile"

Information for connection being diagnosed
Interface GUID: {50e2e69e-29ab-47af-9401-e19158427ae4}
Interface name: Intel(R) PRO/Wireless 3945ABG Network Connection
Interface type: Native WiFi
Profile: mobile
SSID: mobile
SSID length: 6
Connection mode: Infra
Security enabled: Yes
Connection ID: 8
Security settings provided by hardware manufacturer (IHV): No
Profile matches network requirements: Yes
Pre-Association and association status: Success
Security and Authentication:
Configured security type: Open
Configured Encryption type: WEP
Security connect status: Fail 0x0003800b
Number of security packets received: 6
Number of security packets sent: 6
802.1X protocol: Yes
Authentication Identity: Invalid
IAS Server engaged: No
EAP Method supported by IAS Server: Unknown
EAP type: 0
EAP Error: Unknown
Number of 802.1X restarts: 1
Number of 802.1X failures: 1
802.1X status: Fail 0x00050005
Key exchange initiated: No
Unicast keys received: No
Multicast keys received: No


Event Verbosity:0

[jharriso]

Yep, unfortunately, PEAP is totally borked in Vista. Cisco and Microsoft are working on it, who knows when it'll be fixed though.

[moser]

When is the first lawsuit over this due out ? :D

[bgwinkel]

Lawsuit? It's not like we're being forced into it. Microsoft is not under any burden to provide PEAP except to keep it's customers happy (which is something they very much want to do anyway). And there's an OS with non-broken PEAP still supported anyway. XP.

[moser]

I was joking... see smiley face in previous message...

[dcv]

Lawsuit? It's not like we're being forced into it. Microsoft is not under any burden to provide PEAP except to keep it's customers happy (which is something they very much want to do anyway). And there's an OS with non-broken PEAP still supported anyway. XP.

To some degree consumers are being forced into Vista - it is becoming increasingly difficult to purchase a new computer without Vista pre-installed (especially at big box retailers - I was at a Best Buy in Virginia and couldn't find a single computer without Vista installed). I've already had to explain to a few clients in the Zone that came in with brand-spanking-new laptops that they can't get on UAWifi yet because of Vista's PEAP problem - I'm definitely not about to tell them to go out and buy a copy of XP if they want to get on.

I'm in no way advocating suing Microsoft over this, but you know as well as I do that MS is pushing to replace XP with Vista as fast as possible in the retail space, and since they are the only vendor of Windows operating systems, they have the power to do this.

EDIT: On a related note, does sitelicense have VPN Client 5.0 for Vista yet?

[bgwinkel]

you know as well as I do that MS is pushing to replace XP with Vista as fast as possible in the retail space, and since they are the only vendor of Windows operating systems, they have the power to do this.
So...?
EDIT: On a related note, does sitelicense have VPN Client 5.0 for Vista yet?
Yes! \o/ But it's hiding. It still says 4.8.whatever on the front, but when you click "Windows NT/2000/XP" the Beta 5.0 download link is under the 4.8 download link.

[dcv]

So...?

So they are in fact "forcing" Vista upon consumers.

Yes! \o/ But it's hiding. It still says 4.8.whatever on the front, but when you click "Windows NT/2000/XP" the Beta 5.0 download link is under the 4.8 download link.

Sweet, thanks. I'll be recommending it to Vista users.

[jharriso]

Yeah, I pestered the sitelicense people about it, and they finally put it up. Woo!

[Unregistered]

Can you get onto UAWiFi using the VPN Client 5.0?

[jharriso]

No, you can use UAPublic with the VPN client, effectively emulating the experience of using UAWiFi. Except that it is slower.

[nlopez]

svn blame peap.c
svn merge -r$oldrev:$currev peap.c
svn commit -m "Bill broke peap, fire him"

[dparm]

No, you can use UAPublic with the VPN client, effectively emulating the experience of using UAWiFi. Except that it is slower.


I am uncertain as to how much rate-limiting happens on UAPublic. I was able to download a 650MB ISO yesterday at nearly 1MB/sec on UAPublic w/VPN connection.

[mcbrides]

I understand VPN increases security since it encrypts, but isn't a major point of WPA2 and other wireless encryption methods to increase the security of information going between the WAP and your computer? Since UAPublic is not ecrypted what is the benefit of using the VPN software? Would it have the same effect as having UAPublic encrypted? (As in having packets being secure while going between WAP and laptop)

[dparm]

A VPN tunnel wraps all your traffic in a shell of encryption (IPsec, among others). It's still perfectly safe.

[dcv]

Would it have the same effect as having UAPublic encrypted? (As in having packets being secure while going between WAP and laptop)

Yes, exactly - every packet sent or received is encrypted before it leaves or enters your computer. So, if somebody were to sniff your VPN'd traffic (even over UAPublic), they'd only get garbage.

[mcbrides]

Nice. That's what I figured, just wanted to make sure. :)

[Unregistered]

I have tryed to connect my VISTA lapto, but the link is not constant. Each 20 min, it loses the connection. Can I do?

[Unregistered]

I am a cisco certified network administrator and am in one of the dorms I have set up the proper settings and it still does not want to connect properly and signal strength becomes very degraded AFTER i connect to the network. I know my equipment works and i have set up several WAP networks in the past and have been able to make them work. This is not a cisco related problem that our vista pc's will not connect and is soely a problem with your setup or certificates. You guys have a lot of work and need to learn how to make this work especially if you are banning wireless routers from the network.

[picch]

I am a cisco certified network administrator and am in one of the dorms I have set up the proper settings and it still does not want to connect properly and signal strength becomes very degraded AFTER i connect to the network. I know my equipment works and i have set up several WAP networks in the past and have been able to make them work. This is not a cisco related problem that our vista pc's will not connect and is soely a problem with your setup or certificates. You guys have a lot of work and need to learn how to make this work especially if you are banning wireless routers from the network.
:rolleyes:


What wireless card do you have, and what dorm/floor are you on?

[bgwinkel]

I have set up the proper settings and it still does not want to connect properly and signal strength becomes very degraded AFTER i connect to the network.
Chances are you have an Intel card. Intel cards are notorious for aggressive energy management. It wants to use the least amount of power possible to stay connected. That means it will decrease the apparent "signal strength" only because your card is sucking less power. Now the problem with that is that your card will probably drop the network once power gets too low. It's a known issue with almost every RADIUS setup out there. You don't really notice it on your small-area WAP networks because you reconnect very quickly after dropping it. However, on a large-scale setup such as this, you have to reauthenticate, and that's where your noticible connection issues come in.

Considering we don't write the Intel drivers, it's not our fault :)
especially if you are banning wireless routers from the network.
And if in fact you are CCNA than you would realize that rogue routers would screw up the wired network and would cause interferance on the wireless ones.

[Unregistered]

Interestingly we run our ACS with WPA/2 and PEAP and updated on 2003 server and that broke our vista users, the other ACS server that has had no patches applied is fine while the patched machine just sits there like paper weight with the vista boxes. All I see is vista constantly trying to connect and asking for the password over and over but ACS has no entries indicating there is even a machine trying to auth. We rolled the patches off of the ACS box and the issue persists so I need to have all Vista boxes authenticate through the other ACS server.

[Unregistered]

Just so you know on the note of the problem you guys addressed with the vista and degrading power. I am actually running an AMD HP laptop with a broadcom chipset for my wireless and all power saving is turned off. And as one of you asked i am in graham/greenlee floor 2.