MSM AD authentication

[hpmas]

Hello,

We're trying to let external PCs to be able to connect to our wireless network via AD authentication and have access to same workers networks .

So we created new AD directory withen new users .

An external PC arrive and trying to connect to the SSID of the workers but they can't connect .

We also tried via workers user on the external PC but still didn't work .

We also tried to type manually the domain name on that external PC instead of workgroup but still didn't work .

Our question is: Does the PC needs to be rigestered in the domain / JPO in order to let it authenticate successfully ?

And where to configure that ? Is is somewhere on the MSM ?

Log:

Request to RADIUS server from client (mac='A0:88:11:11:11:68') on interface (value='r1v3') was rejected while performing 802.1x Authentication

Thanks .

[MichaelRicardo]

which RADIUS server are you using? - MS NPS can have policy so that only domain joined PC can authenticate with its Radius service. You might want to check this uisng tools

http://www.windowsnetworking.com/articles-tutorials/wireless-networking/Testing-Monitoring-Tools-RADIUS-Servers.html

http://www.iea-software.com/products/radlogin4.cfm

Some Pc have issues authentication with 802.1x - esp windows 7 - google for this.

 https://www.google.co.uk/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8#q=802.1+x+and+windows+7+failed+authentication

https://supportforums.cisco.com/blog/12256681/getting-past-intermittentunexplained-8021x-problems-windows-7

Hope this helps.

Michael

[hpmas]

Hi,

First thank you for the reply

So I understand that this not a MSM configuration , but a radius configuration/vendor . Am I right ?

[MichaelRicardo]

I can not comment on MSM configuration and but if everyone else is able to connect but guest user/PC isn't then problem lie with guest PC.

Can you join your WIFI using valid credential? if not them WIFI SSID is tied down to Domain.

Its difficult TS without seeing it.