igorlt78 wrote:
Please, help me because I don´t know what´s going on here...
My company uses a peap-eap network, but I can´t connect using my N8.
I have a Nokia N900 already connected to the network, and the settings that I´ve used are:
EAP MSCHAPv2
username: username@uolcorp.intranet
password: mynewtorkpassword
For some reason I´m able to connect to this network with my N900 without using any certificate. The N900 show me a message telling me that the certificate is not valid, but I can use the internet without any problems.
I´ve tried to put those same data into N8, but I have no lucky yet.
Unfortunately, our IT team also don´t know what to do. They told me that I don´t need a certificate, but they also give me this certificate to make a try.
www.master78.com.br/ca.cer
It didn´t work either!
I noticed that is Windows 7, my login name appers as "UOLCORP\username". So, I tried to use this format of username, but once again, it didn´t work.
Can anyone help me with that?
Tks!
In case of N8 (and other Symbian based models) you really need to have valid Certificate Authority certificate installed on the phone and defined as "Authority Certificate" in EAP-PEAP settings of the phone.
When you say that you already tried using the certificate from the link you posted did you manage to install on the phone and was it selected as a "Authority Certificate" in EAP-PEAP settings of the phone? If certificate was installed and you had edited your phone's access point settings (for this particular WLAN network) so that the particular certificate (probably named as "ca") was selected on the EAP-PEAP settings page then it might be that this CA certificate is not the the one that your IT department has used for signing the "server" certificate they are running on their EAP authentication server.
You mentioned defining the EAP-MSCHAPv2 username on N8 settings but please note that you also need to define the username for EAP-PEAP (not just for EAP-MSCHAPv2).
You could try following settings on the N8 (edit or create new access point for this particular WLAN network):
Security mode: WPA/WPA2
WPA/WPA2 mode: EAP
EAP-plugin settings:
Enable EAP-PEAP and disable EAP-SIM and EAP-AKA.(long press to disable)
Enter EAP-PEAP settings (click on EAP-PEAP)
On first EAP-PEAP settings page:
Personal certificate: not defined
Authority certificate: ca (or whatever is the name of the certificate your IT dep. provides)
Username in use: User defined
Username: username@uolcorp.intranet (or you could try with "username" or "UOLCORP\username")
Realm in use: User defined
Realm: <leave this empty>
TLS privacy: Off
Allow PEAPv0: Yes
Allow PEAPv1: No (you can also try with "Yes" but "No" is likely a better choice since you are using PEAP with EAP-MSCHAPv2 inner authentication, which typically means that PEAPv0 is preferred by the server)
Allow PEAPv2: No
Then go to the next EAP-PEAP settings tab (hit arrow to right on top of screen) and select the EAP-MSCHAPv2 (disable SIM and AKA by long pressing on them)
Enter EAP-MSCHAPv2 settings (click on it).
Username: username@uolcorp.intranet
Prompt password: No
Password: yourpassword
Go back multiple times to save your new access point setting and try connecting.
But like said earlier, if it happens that "ca" certificate that your IT provided you is not really the correct certificate then PEAP/EAP-MSCHAPv2 authentication on your N8 will inevitably fail even if rest of the EAP-PEAP and EAP-MSCHAPv2 settings are correctly defined.
WLAN connection and EAP authentication part is OK if you manage to connect your N8 to (without "EAP-PEAP authentication failed" error) and WLAN Wizard shows you that phone is "Connected" to this WLAN network and WLAN icon on top of the screen shows secured connection symbol. If you still have problems connected to "internet" after WLAN connection was successfully made, e.g. your phone's web browser fails access web sites that are on the internet (but you can access local intranet web sites) then you might also need to configure the web proxy server address and port in to your phone to be able to reach "internet".
Proxy settings can be edited from the advanced settings of the access point. (Settings-> Connectivity -> Settings -> Destinations -> Internet -> select the access point for this particular WLAN network -> Options -> Advanced Settings -> Proxy server address and port. (ask proxy settings from IT if needed).
Support
