topic Re: Microsoft NPS and 1920s (edge switch) in Operating System - Microsoft

Microsoft NPS and 1920s (edge switch)

rodriguesrui — Fri, 17 Jul 2020 16:53:15 GMT

Hello,

I'm trying to do a MAC autentication on a Radius Server with MS NPS, and i always get authentication failed, or i receive an information on the PC to authenticate.

Sometimes we have equipments on the network that aren't registed on AD and you still want to control it. CORE switch is an 2930f, and edge swith are 6 1920s. NPS is working in wifi-enterprise, but I cannot make mac-authentication to work on machines that aren't registed on AD.

Created an Network Policy - Wired Policy with (Windows Server 2019), with condition:

WIndows Groups (with a AD Group) & NAS Identifier (Name of The switch)

with Constraints:

Authentication Methods: PAP, SPAP

and with Settings:

Standart: Tunnel-Medium-Type (802); Tunnel-PVT-Group-ID (Vlan where I wan to put the machine 221); and Tunnel-Type (Virtual LANs)

All other settings by default.

On the 1920s, After configuring radius, on "Port Access Control" I enabled Admin Mode and Vlan Assigment Mode"

The port is in Authenticator mode, and I tryed the "Control Mode" on Auto and on MAC Based, but i only receive "Authentication Failed"

Re: Microsoft NPS and 1920s (edge switch)

pragav — Mon, 20 Jul 2020 12:35:51 GMT

Hi rodriguesrui,

Have you already tried to switch the encryption mode to auto?

Regards,

Re: Microsoft NPS and 1920s (edge switch)

rodriguesrui — Mon, 20 Jul 2020 17:44:09 GMT

Hi,

the options that port control in the switch allows are:

Auto, Force Authorised, Force Non-Authorised, Mac Based.

If I leave in "Auto" Option, I can enable "MAC Authentication Mode" or not, and if I pick that option, I can choose between: EAP-Md5 or PAP.

I already tried all options.

Re: Microsoft NPS and 1920s (edge switch)

pragav — Tue, 28 Jul 2020 08:18:14 GMT

Hi,

Apologies for the delayed response.

Could you please share the failure event ID recorded in the event viewer of the NPS server to udnerstand the reason

https://docs.microsoft.com/en-us/windows/client-management/advanced-troubleshooting-802-authentication

Regards,

Re: Microsoft NPS and 1920s (edge switch)

pragav — Tue, 04 Aug 2020 09:22:44 GMT

Hi @rodriguesrui ,

Following up to see if you have any update for us

Regards,