M and MSM Series
cancel
Showing results for 
Search instead for 
Did you mean: 

MSM AD authentication

 
Highlighted
hpmas
Occasional Contributor

MSM AD authentication

Hello,

We're trying to let external PCs to be able to connect to our wireless network via AD authentication and have access to same workers networks .

So we created new AD directory withen new users .

An external PC arrive and trying to connect to the SSID of the workers but they can't connect .

We also tried via workers user on the external PC but still didn't work .

We also tried to type manually the domain name on that external PC instead of workgroup but still didn't work .

Our question is: Does the PC needs to be rigestered in the domain / JPO in order to let it authenticate successfully ?

And where to configure that ? Is is somewhere on the MSM ?

Log:

Request to RADIUS server from client (mac='A0:88:11:11:11:68') on interface (value='r1v3') was rejected while performing 802.1x Authentication

 

Thanks .

3 REPLIES 3
Highlighted
MichaelRicardo
Frequent Advisor

Re: MSM AD authentication

which RADIUS server are you using? - MS NPS can have policy so that only domain joined PC can authenticate with its Radius service. You might want to check this uisng tools

http://www.windowsnetworking.com/articles-tutorials/wireless-networking/Testing-Monitoring-Tools-RADIUS-Servers.html

http://www.iea-software.com/products/radlogin4.cfm

Some Pc have issues authentication with 802.1x - esp windows 7 - google for this.

 https://www.google.co.uk/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8#q=802.1+x+and+windows+7+failed+authentication

https://supportforums.cisco.com/blog/12256681/getting-past-intermittentunexplained-8021x-problems-windows-7

Hope this helps.

Michael

Highlighted
hpmas
Occasional Contributor

Re: MSM AD authentication

Hi,

 

First thank you for the reply

So I understand that this not a MSM configuration , but a radius configuration/vendor . Am I right ?

Highlighted
MichaelRicardo
Frequent Advisor

Re: MSM AD authentication

I can not comment on MSM configuration and but if everyone else is able to connect but guest user/PC isn't then problem lie with guest PC.

Can you join your WIFI using valid credential? if not them WIFI SSID is tied down to Domain.

Its difficult TS without seeing it.