Vai al contenuto

Mac High Sierra dot1x ethernet


Messaggi raccomandati

Ciao a tutti,

ho bisogno del vostro aiuto. Sto cercando di autenticare il nuovo mac aziendale nella rete ethernet dot1x . Possiedo la CA ma non so come creare un profilo di configurazione che mi faccia inserire il certificato per potermi collegare alla rete aziendale.

Mi potete aiutare per favore?

grazie mille

Link al commento
Condividi su altri siti

sono riuscito a creare il file .mobileconfig con le configurazioni corrette per l'autenticazione 802.1x. Mi restituisce però quando tento di collegarmi: "il server di autenticazione non risponde"

Ho seguito questa procedura:

 

1. Download and install the iPCU    http://support.apple.com/kb/DL851

2. Open the iPCU (the iPCU is install in Applications - Utilities)

3. In the right hand side click on Configuration Profiles.

4. Click on New. (upper left)

5. You will see a new profile with a bunch of payloads (general, passcode, restrictions, etc). Don't worry you do not need to fill most of these out.

6. Click on General and fill out a Profile Name, Identifier (they can be anything) the rest of the fields you can leave blank. I used spam and spam.  

7. Now click on WiFi. Do be scared here. Lion can use WiFi profiles for Ethernet (it will just ignore the SSID field). Click configure.

7a. For SSID ..If your school has a wireless network that uses TTLS with PAP, fill in the SSID name (wireless network name) that your school uses. If your school does not use wireless, then just use an label (e.g. spam).

7b. Ignore the hidden network field (unless of course your school uses a hidden SSID and you want to use wireless for this connection).

7c. Security Type ..Again if this is for ethernet, just use WPA/WPA2 Enterprise. If this profile is going to be used for WiFi, then you need to find out what type of security your school uses. Most likely it will be WPA/WPA2 Enterprise (I hope).

7d. Once you choose WPA/WPA2 Enterprise you will see more options appear. Choose TTLS.

7e. Ignore EAP-FAST settings. Leave all boxes unchecked for EAP-FAST.

7f. For Inner Authenticaiton choose PAP.

8. You will see three tabs, one for protocol (that you already filled out), one for Authentication and one for Trust. You can ignore trust unless you have the certificate from the radius server already loaded on your client. Don't worry if you do not have the cert, the Mac will load it (with your permission) during the first authentication. Ignore the Authentication tab for now.

9. Now look at the top left of the tool and choose Export

9a. for Security, just choose none (don't worry about signing it)

9b. Hit Export.

10. You will get a Save As dialogue box. Give the profile a name (like spam  or something) and choose where you would like to save the profile.

11. Now goto where you save your profile and double click it. System Prefs will launch and try to install the profile.

11a. Just hit continue and continue again.

11b. You will be prompted for "settings" which are the username and password. You can either just hit install (the eapol supplicant will ask you for your credentials during the authentication phase) or you can fill them out now. BE SURE TO INPUT THE CORRECT INFORMATION!!!!. If you insert a bad username or password into this field, it will get saved as a keychain entry (with bad info) and you will never be able to connect. The Mac will just silently fail authentication until you delete the keychain entry and do a fresh auth. Save yourself some trouble and leave the fields blank and just hit install.

11c. You will be prompted for your admin password to install the profile.

12. The profile should be installed now.

13. In system prefs, click show all then click network.

14. If you click on your Ethernet interface you should now have a nifty "connect" button now. Connect via Ethernet into the school's 802.1X protect network and hit connect.

 

Mi sapete aiutare? 

Link al commento
Condividi su altri siti

Archiviato

Questa discussione è archiviata e chiusa a future risposte.

×
×
  • Crea Nuovo...