08-26-2016 12:35 PM
Im using IAP on the latest code. I setup my ssid to use radius for 802.1x auth. On Radius, I have EAP with a self signed cert. On a windows client, I create the wireless network, turn off "validate Cert" until I get a 3rd party one, and connect using WPA2 Enterpise. I get connected fine. Then I convert the SSID to guest, create a authenticated captive portal, point auth to radius and login keeps failing with the below error. What am I missing?
Contact the Network Policy Server administrator for more information.
Security ID: redbull\RSmith
Account Name: rsmith
Security ID: NULL SID
Account Name: -
Fully Qualified Account Name: -
Called Station Identifier: aca31ec7b99c
Calling Station Identifier: c4b301bb0dc1
NAS IPv4 Address: 192.168.174.250
NAS IPv6 Address: -
NAS Identifier: -
NAS Port-Type: Wireless - IEEE 802.11
NAS Port: 0
Client Friendly Name: Aruba
Client IP Address:
Connection Request Policy Name: NAP 802.1X (Wireless)
Network Policy Name: Aruba
Authentication Provider: Windows
Authentication Server: SDDC02.off.redbull.edu
Authentication Type: PAP
EAP Type: -
Account Session Identifier: -
Logging Results: Accounting information was written to the local log file.
Reason Code: 66
08-26-2016 12:57 PM
Get Outlook for iOS
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
08-26-2016 02:51 PM - edited 08-26-2016 02:53 PM
I did enable it. Under authentication in the network policy on NPS. The check box under MSChap section. I also enabled EAP and EAP settings..
Also, why is it using PAP. I want EAP only. Could EAP not be working becouse its doesn’t have a trusted Cert so PAP is being used instead?
08-26-2016 03:26 PM
Pap is the only thing that works with Captive Portal.
Aruba Customer Engineering
Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base
Validated Reference Design Guides : http://community.arubanetworks.com/t5/Validated-Reference-Design/tkb-p/Aruba-VRDs