user was denied access - ap530

[Ert_2]

HI,

I would like to connect to an access point with a radius authentification.
The authentification works wiht the local radius.

I have configured IAS on the domain controller but the authentification failed.

You can see the configuration of my client and the server in the attachment.

Logs in the event viewer:

User user1 was denied access.
Fully-Qualified-User-Name = test.ch/Users/user1
NAS-IP-Address = 127.0.0.1
NAS-Identifier =
Called-Station-Identifier = 00-14-C2-B4-95-50:VLAN_TEST
Calling-Station-Identifier = 00-0E-35-B4-B2-BA
Client-Friendly-Name = AP
Client-IP-Address = 192.168.1.10
NAS-Port-Type = Wireless - IEEE 802.11
NAS-Port = 1
Proxy-Policy-Name = Use Windows authentication for all users
Authentication-Provider = Windows
Authentication-Server =
Policy-Name = acces-wifi
Authentication-Type = EAP
EAP-Type =
Reason-Code = 65

Any ideas?

[Mohieddin Kharnoub]

Hi

I checked Microsoft support for Reason-Code=65 and its description is:

Reason = The connection attempt failed because remote access permission for the user account was denied. To allow remote access, enable remote access permission for the user account, or, if the user account specifies that access is controlled through the matching remote access policy, enable remote access permission for that remote access policy.

So i suggest you to check if that dial-in permissions are checked in the user's account profile.

Good Luck !!!

[Ert_2]

I check all the possiblities, it doesn't work :-(

[Matt Hobbs]

On your IAS server, you need to add PEAP in Authentication > EAP Methods

[patoche]

Hi,

You seem to have an issue with the NAS-IP identifier sent by the AP530 (127.0.0.1).

What version are you running on the AP530 ?
Could you share the config file running on the 530 ?

Cheers