In Securing Wifi with IAS Pt.1 - Server Configuration we configured a Windows Server 2003 with RADIUS in an effort to secure a wireless LAN (WLAN). This part will cover the client configuration.

The first part is dependant on your Wireless Access Point (WAP). You will need to edit the security settings and configure it to use RADIUS, select the encryption algorithm (AES), enter the IP address of the Radius server and the enter the shared key you set in the RADIUS Client configuration. Please refer to your WAPs manual. Open the Network Connection Properties window and click the Wireless Networks tab. Select your SSID from the Preferred Networks and press the Properties button.

Under the Association tab, select WPA as the Authentication type and AES as the Data Encryption type.

Switch to the Authentication tab and choose Protected EAP (PEAP) as the EAP type. Also ensure that Authenticate as computer when computer information is available.

Next press the Properties button to bring up the Wireless Authentication - Protected EAP Properties window. Check the Validate server certificate box and then choose Secured Password (EAP-MSCHAP v2). Click the Configure button to make sure that the box is checked so that your login credentials are passed along as for authentication. Click OK, check that the Enable Fast Reconnect box is checked and click OK again to exit out of everything.

Open the Network Connections window and it shoud say Authentication succeeded under the wireless connection.