WX5004 RADIUS Authentication Issues

[demazter]

Hi,

I have a WX5004 configured to use RADIUS authentication against an NPS Server.  I would like the computer account to authenticate rather than the user account (but cannot get user account to work either)

The NPS server confirms the client (computer account) has been given "Full Access".

The quick view on the WX5004 confirms the client has gone online but for some reason it then goes offline.

The log file shows this:

Oct 12 12:39:52:341 2011

PORTSEC

Information

PORTSEC_DOT1X_LOGIN_FAILURE

-IfName=WLAN-DBSS6:17-MACAddr=00:1C:BF:8A:31:FA-VlanId=1-UserName=host/TEWK-SCI-03314.tewknet.local; The user failed the 802.1X authentication.

Oct 12 12:39:52:338 2011

WMAC

Information

LOG

Client [001c-bf8a-31fa] goes offline & detaches from WLAN [TEWKNETdot1x]. Reason Code [1].

Oct 12 12:39:47:325 2011

RDS

Debug

RDAUTHSUCC

host/TEWK-SCI-03314.tewknet.local@tewknet from Port=0x1006001 Vlan=1 MAC=001c-bf8a-31fa IP=[IPADDR] succeeded to be online

Oct 12 12:39:47:323 2011

RDS

Debug

RDAUTHREQ

host/TEWK-SCI-03314.tewknet.local@tewknet from Port=0x1006001 Vlan=0 MAC=001c-bf8a-31fa IP=[IPADDR] sent authentication request

Oct 12 12:39:47:308 2011

RDS

Debug

RDAUTHREQ

host/TEWK-SCI-03314.tewknet.local@tewknet from Port=0x1006001 Vlan=0 MAC=001c-bf8a-31fa IP=[IPADDR] sent authentication request

Oct 12 12:39:47:302 2011

RDS

Debug

RDAUTHREQ

host/TEWK-SCI-03314.tewknet.local@tewknet from Port=0x1006001 Vlan=0 MAC=001c-bf8a-31fa IP=[IPADDR] sent authentication request

Oct 12 12:39:47:295 2011

RDS

Debug

RDAUTHREQ

host/TEWK-SCI-03314.tewknet.local@tewknet from Port=0x1006001 Vlan=0 MAC=001c-bf8a-31fa IP=[IPADDR] sent authentication request

Oct 12 12:39:47:256 2011

WMAC

Information

LOG

Client [001c-bf8a-31fa] successfully joins WLAN [TEWKNETdot1x], on APID [2] with BSSID [4001-c672-96c0].

Can anyone shed any light on where I am going wrong with this configuration?

I have a second SSID configured to use just WEP and this works perfectly but obviously I would rather have the RADIUS configuration.

Any help gratefully received.

[demazter]

also, just for giggles I changed the configuration on the RADIUS and the client to authenticate using the user account and the same thing happened.

[cuz1000000]

I am having the exact same problems and have been working with H3C tech support for about a month...  Were you ever able to resolve your issue?   If do, would you please share what you did to fix it?

Thanks in advance!

Sandy

ssmith@txbiomedgenetics.org

[smoluh]

hi guys,

i would like to using my NPS (2008R2)  talking to the controller.

already set up Radius on Win Srv, had a quick look at the settings on the H3C device but not really sure where to start.

would much appreciate any help. thanks.

Matt

[Cassio]

Hey,

I have the same problem, but I am using the freeradius in a ubuntu server on a WX3008 with WA2620-AGN.

 -IfName=WLAN-DBSS0:5-MACAddr=D0:DF:9A:1A:79:36-VlanId=1-UserName=cassio; The user passed 802.1X authentication and got online successfully.

From nothing I am disconnected from the wireless, but only in users with Win 7 a have the problem. u

Users with OS linux or even mobile with android nothing happens. No disconnections.

Its look like a problem with the Microsoft´s OS.

The better resolution until now, I saved user and password on wifi setting and reconnect automatic.

After 20 seconds, disconnect in 3 seconds a connect again   :(

But I am shure that the problem is on my win7 or my wireless card driver, because in others clients work well.

[C0LDWiR3D]

Did you guys consult the security manual.

Radius and dot1X is usual described in the security manual of the device.

[Peter_Debruyne]

* Can you please post the cleaned configuration ?

* Did you disable the dot1x handshake on the wlan-ess interface ?

best regards,Peter