Comware Wireless / Unified Series
1832839 Members
2899 Online
110047 Solutions
New Discussion

Problem with authenticate users between 830 Unified Access Controller and Microsoft RADIUS Server

 
eko12
New Member

Problem with authenticate users between 830 Unified Access Controller and Microsoft RADIUS Server

Hi ,

 

I  started to configure  830 Unified Access Controller with Microsoft RADIUS Server for authentication users but i have problem with authentication .

 

If you have possibility to help ,where could be the problem 

 

Below you have all configuration on 830 Unified Access Controller 

====================================================================

 

<HP>
<HP>
<HP>dis
<HP>display cur
<HP>display current-configuration
#
version 5.20, Release 3308P29
#
sysname HP
#
domain default enable xxxxxxx
#
telnet server enable
#
port-security enable
#
oap management-ip 192.168.0.101 slot 0
#
wlan country-code AL
#
wlan auto-ap enable
#
password-recovery enable
#
vlan 1
#
vlan 17
#
radius scheme test
primary authentication 10.200.1.30 key cipher $c$3$e7perW9GGBC+9j7qcut2e+FAywHJ25d8ZSSPr94=
nas-ip 10.200.17.154
#
domain xxxxxxx
authentication login local
authentication lan-access radius-scheme test
accounting lan-access radius-scheme test
access-limit disable
state active
idle-cut disable
self-service-url disable
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
pki domain local_domain
crl check disable
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$nmBMe/uKDpkC4Xtv6LT2J3/1dyLYc5D+
authorization-attribute level 3
service-type ssh telnet
service-type web
#
wlan rrm
dot11a mandatory-rate 6 12 24
dot11a supported-rate 9 18 36 48 54
dot11b mandatory-rate 1 2
dot11b supported-rate 5.5 11
dot11g mandatory-rate 1 2 5.5 11
dot11g supported-rate 6 9 12 18 24 36 48 54
#
wlan service-template 1 crypto
ssid INTERNAL_TEST
bind WLAN-ESS 1
cipher-suite ccmp
security-ie wpa
service-template enable
#
ssl server-policy access-policy
pki-domain local_domain
#
interface Bridge-Aggregation1
#
interface NULL0
#
interface Vlan-interface1
ip address dhcp-alloc
#
interface GigabitEthernet1/0/1
port link-aggregation group 1
#
interface GigabitEthernet1/0/2
port link-aggregation group 1
#
interface WLAN-ESS1
port link-type hybrid
undo port hybrid vlan 1
port hybrid vlan 17 untagged
port hybrid pvid vlan 17
mac-vlan enable
port-security port-mode userlogin-secure-ext
port-security tx-key-type 11key
undo dot1x handshake
dot1x mandatory-domain xxxxxxx
undo dot1x multicast-trigger
#
wlan ap ap11 model MSM460-WW id 2
serial-id CN48D33064
radio 1
service-template 1
radio enable
radio 2
service-template 1
radio enable
#
ssh server enable
#
ip https ssl-server-policy access-policy
ip https enable
#
load xml-configuration
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
user privilege level 3
#
return
<HP>

===================================================

 

 

 The error that appearing during authentication syslog procces is : PORTSEC_DOT1X_LOGIN_FAILURE

 

On attachment you have also logic desing wireless 

 

If you have possibility based on these configurations and error which appears to help us where could be the problem

  

 

 

Best Regards

 

 

 

P.S. This thread has been moved from Community Feedback & Suggestions to Comware Wireless / Unified Series. - Hp Forum Moderator