Vista and CCMP encrypted wireless network

I am attempting to get two Vista Business laptops to connect to a
wireless network (corporate) which is using AES Counter Mode with Cipher
Block Chaining Message Authentication Code Protocol (CCMP) to encrypt
the signal. The wireless is provided by a DLink DWS-1008 / DWL-8220AP
system.

The Vista PCs will "see" the network, and realize it's a secure network,
but not login. We are also using a RADIUS system to authenticate the
wireless stations.

Several XP laptops have no problems connecting to this network.

I can, if need be, set up the wireless to also use WPA2-Enterprise, and
will do that if no other solution is available.

Thanks,
Jason A.

I am not too familiar with CCMP or the DLink you have,
but be sure that security is not based upon MAC addesses,
If it is you would of course have to add the MAC addresses
of the new wireless cards in the laptops to the Dlink setup.
(just a stab in the dark but maybe a problem?)



"Jason A Ash" <> wrote in message
news:OHvEF$...
>I am attempting to get two Vista Business laptops to connect to a wireless
>network (corporate) which is using AES Counter Mode with Cipher Block
>Chaining Message Authentication Code Protocol (CCMP) to encrypt the signal.
>The wireless is provided by a DLink DWS-1008 / DWL-8220AP system.
>
> The Vista PCs will "see" the network, and realize it's a secure network,
> but not login. We are also using a RADIUS system to authenticate the
> wireless stations.
>
> Several XP laptops have no problems connecting to this network.
>
> I can, if need be, set up the wireless to also use WPA2-Enterprise, and
> will do that if no other solution is available.
>
> Thanks,
> Jason A.

Nope, I know we don't have MAC filtering enabled. But thanks for the
idea...

Spaceman wrote:
> I am not too familiar with CCMP or the DLink you have,
> but be sure that security is not based upon MAC addesses,
> If it is you would of course have to add the MAC addresses
> of the new wireless cards in the laptops to the Dlink setup.
> (just a stab in the dark but maybe a problem?)
>
>
>
> "Jason A Ash" <> wrote in message
> news:OHvEF$...
>> I am attempting to get two Vista Business laptops to connect to a
>> wireless network (corporate) which is using AES Counter Mode with
>> Cipher Block Chaining Message Authentication Code Protocol (CCMP) to
>> encrypt the signal. The wireless is provided by a DLink DWS-1008 /
>> DWL-8220AP system.
>>
>> The Vista PCs will "see" the network, and realize it's a secure
>> network, but not login. We are also using a RADIUS system to
>> authenticate the wireless stations.
>>
>> Several XP laptops have no problems connecting to this network.
>>
>> I can, if need be, set up the wireless to also use WPA2-Enterprise,
>> and will do that if no other solution is available.
>>
>> Thanks,
>> Jason A.
>

I would try the WPA2 then I guess
sorry I couldn't be better help

--
James M Driscoll Jr
MCTS (Vista)
Spaceman


"Jason A Ash" <> wrote in message
news:...
> Nope, I know we don't have MAC filtering enabled. But thanks for the
> idea...
>
> Spaceman wrote:
>> I am not too familiar with CCMP or the DLink you have,
>> but be sure that security is not based upon MAC addesses,
>> If it is you would of course have to add the MAC addresses
>> of the new wireless cards in the laptops to the Dlink setup.
>> (just a stab in the dark but maybe a problem?)
>>
>>
>>
>> "Jason A Ash" <> wrote in message
>> news:OHvEF$...
>>> I am attempting to get two Vista Business laptops to connect to a
>>> wireless network (corporate) which is using AES Counter Mode with Cipher
>>> Block Chaining Message Authentication Code Protocol (CCMP) to encrypt
>>> the signal. The wireless is provided by a DLink DWS-1008 / DWL-8220AP
>>> system.
>>>
>>> The Vista PCs will "see" the network, and realize it's a secure network,
>>> but not login. We are also using a RADIUS system to authenticate the
>>> wireless stations.
>>>
>>> Several XP laptops have no problems connecting to this network.
>>>
>>> I can, if need be, set up the wireless to also use WPA2-Enterprise, and
>>> will do that if no other solution is available.
>>>
>>> Thanks,
>>> Jason A.
>>

Hello,

Thank you for your post.

From the description, this issue only happen on the Windows Vista clients.
I'd like to know whether the Windows Vista clients have the Service Pack 1
installed. There is a known issue when Windows Vista clients connect to WPA
AP when roaming if previously connected via WPA2 it will not properly
downshift to WPA.

To resolve the issue, please install the Windows Vista Service Pack 1 which
also resolves the issue described in the following Microsoft Knowledge Base
article:

935222 You cannot connect to a wireless network on a Windows Vista-based
computer
http://support.microsoft.com/default...b;EN-US;935222

If the problem continues, please also collect the following logs and
information:

1. You mentioned that you are using RADIUS. Which RADIUS system are you
using?
2. What is the exact error when you tried to connect to the wireless
network? Please let us know the exact error WORD BY WORD.
3. Could you please collect the following logs and send them to me:

1- On the command line, please run the following command: netsh ras set
tracing *enabled
2- Please enable Start "Wireless Diagnostic" under Computer Management-
Reliability and Performance- Data Collector Set- System- Wireless Diagnostic
3- Then please try to connect to the network
4- Once you get the failure, please stop repro with netsh ras set tracing *
disabled
5- Please stop wireless diagnostics
6- Please send me the output folder \Windows\tracing,


Please send the log file to with the the following
three lines for this issue in the email body:

Vista and CCMP encrypted wireless network
# 42396980
Miles Li - MSFT

If you have any questions or concerns, please do not hesitate to let me
know.




Best regards,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
================================================== ===
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.

Thank you for the reply.

I have sent this on to my work e-mail, and will be looking to contact
the client, and check the SP version tomorrow.

The RADIUS we are using is the Windows 2003 Server system.

Miles Li [MSFT] wrote:
> Hello,
>
> Thank you for your post.
>
> From the description, this issue only happen on the Windows Vista clients.
> I'd like to know whether the Windows Vista clients have the Service Pack 1
> installed. There is a known issue when Windows Vista clients connect to WPA
> AP when roaming if previously connected via WPA2 it will not properly
> downshift to WPA.
>
> To resolve the issue, please install the Windows Vista Service Pack 1 which
> also resolves the issue described in the following Microsoft Knowledge Base
> article:
>
> 935222 You cannot connect to a wireless network on a Windows Vista-based
> computer
> http://support.microsoft.com/default...b;EN-US;935222
>
> If the problem continues, please also collect the following logs and
> information:
>
> 1. You mentioned that you are using RADIUS. Which RADIUS system are you
> using?
> 2. What is the exact error when you tried to connect to the wireless
> network? Please let us know the exact error WORD BY WORD.
> 3. Could you please collect the following logs and send them to me:
>
> 1- On the command line, please run the following command: netsh ras set
> tracing *enabled
> 2- Please enable Start "Wireless Diagnostic" under Computer Management-
> Reliability and Performance- Data Collector Set- System- Wireless Diagnostic
> 3- Then please try to connect to the network
> 4- Once you get the failure, please stop repro with netsh ras set tracing *
> disabled
> 5- Please stop wireless diagnostics
> 6- Please send me the output folder \Windows\tracing,
>
>
> Please send the log file to with the the following
> three lines for this issue in the email body:
>
> Vista and CCMP encrypted wireless network
> # 42396980
> Miles Li - MSFT
>
> If you have any questions or concerns, please do not hesitate to let me
> know.
>
>
>
>
> Best regards,
> Miles Li
>
> Microsoft Online Partner Support
> Microsoft Global Technical Support Center
>
> Get Secure! - www.microsoft.com/security
> ================================================== ===
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ================================================== ===
> This posting is provided "AS IS" with no warranties, and confers no rights.
>

Hello Jason,

I am just checking on your progress regarding the information that was sent
to you. If you encounter any difficulties, please do not hesitate to let me
know.

Best regards,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
================================================== ===
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.