none
Windows 8 - Cisco:PEAP and Microsoft Protected EAP

    Question

  • I am having an issue with using PEAP in Windows 8.  I recently upgraded from 7 professional to 8 professional.  After the upgrade no matter what I do I can not connect to the wireless network using my oginal PEAP settings.  Is there an update to Cisco and Microsoft implementation of the PEAP protocol?  When replying take into consideration that we do not validate certificates or prompt user to validate and we do not use the Windows User Login information.  Authentication is user based so there is a username and password for wireless login.  Also single signon is disabled as well.

    Monday, August 20, 2012 8:40 PM

All replies

  • Hi there,

    I have just come up with the same problem.

    We are running a 5508 controller on 7.0.166 code.

    The windows 8 install not replying to the M1 response with a M2.

    *Dot1x_NW_MsgTask_5: Aug 23 15:04:15.287: 00:21:00:f9:57:fd dot1x - moving mobile 00:21:00:f9:57:fd into Authenticated state
    *osapiBsnTimer: Aug 23 15:04:19.446: 00:21:00:f9:57:fd 802.1x 'timeoutEvt' Timer expired for station 00:21:00:f9:57:fd and for message = M2
    *dot1xMsgTask: Aug 23 15:04:19.446: 00:21:00:f9:57:fd Retransmit 1 of EAPOL-Key M1 (length 121) for mobile 00:21:00:f9:57:fd
    *osapiBsnTimer: Aug 23 15:04:23.446: 00:21:00:f9:57:fd 802.1x 'timeoutEvt' Timer expired for station 00:21:00:f9:57:fd and for message = M2
    *dot1xMsgTask: Aug 23 15:04:23.446: 00:21:00:f9:57:fd Retransmit 2 of EAPOL-Key M1 (length 121) for mobile 00:21:00:f9:57:fd
    *osapiBsnTimer: Aug 23 15:04:27.446: 00:21:00:f9:57:fd 802.1x 'timeoutEvt' Timer expired for station 00:21:00:f9:57:fd and for message = M2
    *dot1xMsgTask: Aug 23 15:04:27.446: 00:21:00:f9:57:fd Retransmit 3 of EAPOL-Key M1 (length 121) for mobile 00:21:00:f9:57:fd
    *osapiBsnTimer: Aug 23 15:04:31.446: 00:21:00:f9:57:fd 802.1x 'timeoutEvt' Timer expired for station 00:21:00:f9:57:fd and for message = M2
    *dot1xMsgTask: Aug 23 15:04:31.446: 00:21:00:f9:57:fd Retransmit failure for EAPOL-Key M1 to mobile 00:21:00:f9:57:fd, retransmit count 4, mscb deauth count 0
    *dot1xMsgTask: Aug 23 15:04:31.447: 00:21:00:f9:57:fd Sent Deauthenticate to mobile on BSSID 00:1c:58:a3:8c:b0 slot 0(caller 1x_ptsm.c:534)
    *dot1xMsgTask: Aug 23 15:04:31.447: 00:21:00:f9:57:fd Scheduling deletion of Mobile Station:  (callerId: 57) in 10 seconds

    Going to upgrade to the latest 7.0 code to see if that helps.  Sadly i am stuck on 7.0 with some older 1230 ap's in my network.

    what version are you running by chance?

    Simon

    Thursday, August 23, 2012 5:48 AM
  • Hi,

    Maybe it is a compatibility issue. I recorded the issue.


    Juke Chou

    TechNet Community Support

    Sunday, August 26, 2012 12:23 PM
  • I am having an issue with using PEAP in Windows 8.  I recently upgraded from 7 professional to 8 professional.  After the upgrade no matter what I do I can not connect to the wireless network using my oginal PEAP settings.  Is there an update to Cisco and Microsoft implementation of the PEAP protocol?  When replying take into consideration that we do not validate certificates or prompt user to validate and we do not use the Windows User Login information.  Authentication is user based so there is a username and password for wireless login.  Also single signon is disabled as well.

    I'm having similar issues only this is fresh install. Anyone have any idea what I can do? Here's setup:

    Lenovo X220

    Windows 8  Enterprise x64


    Jorge Segarra
    SQLChicken.com || Follow me on Twitter! || SQL University
    Please click the Mark as Answer button if a post solves your problem!

    Tuesday, August 28, 2012 1:48 PM
  • Hi Juke,

    Any update on this issue?


    Wednesday, October 24, 2012 5:23 AM
  • We are seeing the same errors with WLC 5508, ACS 4.2 and an upgraded Win7 to Win 8 HP laptop.  I found one post suggesting an updated wireless driver fixed the problem.

    Thanks,

    David

    • Proposed as answer by IFD Wednesday, February 06, 2013 12:46 AM
    • Unproposed as answer by IFD Wednesday, February 06, 2013 12:46 AM
    Friday, October 26, 2012 10:01 PM
  • Hi, let me share my experience connected my ativ Samsung pro (Windows 8 Pro) to our wireless network.

    Our wireless network using Cisco AP controlled by WLC 5508 running the newest code 7.4.100.0. Authentication method using WPA-2 enterprise & AES and for inner authentication use PEAP-GTC. Radius using Cisco ISE as primary and Free radius 3.x for secondary, and for database user using LDAP.

    what we need is Cisco-EAP network authentication and windows 8 pro provide it so my laptop is able to connect to our wireless network. I do the following step to configure :

    1. go to Settings --> control panel --> network and internet --> network and sharing center --> set up a new connection or network --> manually connect to a wireless network

    2.  in network name form put SSID and security type --> next --> successfully added new ssid

    3. double click "change connection settings" to go further setting parameter

    4.  go to "security tab" --> choose a network authentication method, Cisco: PEAP and then click "setting"

    5. go to "credential tab", and choose "use saved user name and password" or "Prompt automatically for user name and password". click OK, OK , close. and finish. Now I can connect to my wireless network.

    6. Note: for windows 8 standard, there is no Cisco PEAP module. so we install supplicant Odyssey.

    hope this sharing will useful . many thanks 

    Wednesday, February 06, 2013 1:08 AM
  • I don't have Cisco:Peap option on my Windows 8 Pro. Anything i need to install?
    Thursday, September 12, 2013 7:58 PM
  • I have the same issue, I dont see the cisco:peap option.

    I know it would resolve my problem...

    Wednesday, November 06, 2013 8:18 PM