HP MSM 760 HTML auth with RADIUS problem (URGENT)

[Karol Karkowski]

Hi

I use HTML-based auth with local and RADIUS source checked on my VSC.
The problem is that when i log using local account, everthing is ok, when I use AD account via Radius, Controller auhenticate me but there's no Internet connection. When I use local account exactly the same way, everthing is ok.

I have actually the newest firmware 5.4.1
I use access-controled mode and egress-vlan with NAT

please help

[Fred!]

Any message in the log when you attempt to log in?

I'm not quite clear, in the VSC are you setup to use "RADIUS" or "Active Directory" as the authentication method?

[Karol Karkowski]

Thanks for answer

No, I couldn't find any related messages in the controller log.
When I go the VSC->User session tab, I can see this user as logged in

To be precise, in my VSC I have checked following:

-HTML -based auth
-Local
-Remote - RADIUS (with predefined profile)

Because I coudn't solve my problem, lately I have changed my VSC to Active Directry, so actually I have:

-HTML -based auth
-Local
-Remote - Active Directory

I added controler to domain and now my configuration works great.

So my problem is not so urgent now,
Although it seems strange for me, why the previous config didn't work correctly.

[Fred!]

OK, yes if the only thing you've changed is to point to the AD then it is weird. The only cas I could imagine is the RADIUS server rejecting the request or not answering because the NAS ID is not correct or because the MSM controller has not been authorized at the RADIUS server. But then again, you should see traces in the log saying Timeout or rejected with RADIUS printed in big letters in the log. Strange indeed... That said, I'm glad it is working for you :)

[Karol Karkowski]

Yes, exactly as you said, it is strange, I am curious what is the reason.

In the log there wasn't any such messages and in radius (Win 2003 IAS) I could find in logs that user had granted access with no errors or warnings.

I am happy that it work now at my client site.

anyway thanks for help