Clearpass Error 216 Authentication Failure

[jonchill]

We have an 802.1X wireless network that is currently using Device auth, this works perfectly happily for 95% of clients but we've started seeing clients in the last few weeks fail authentication with user not found and the device won't connect.

These client are mostly new build Windows 7 laptops, they've been connected to the network with a wired connection which worked perfectly fine.

Any help or guidance would be much appreciated.

Thanks

Jon

[jrwhitehead]

In your AD authentication source there is a Base DN. Are the devices that are failing under that Base DN?

[jonchill]

I've checked two of the devices that are failing and both are in LDAP browser.

Thanks

Jon

[Victor Fabian]

Are you seeing user or machine auth failures?

Get Outlook for iOS

[clembo]

jon, please share (or PM) an export of the failed access tracker event to help shed some light on the failure.

[jonchill · Accepted solution]

Thanks everyone, it turns out that its an issue with the computer account in AD. Our server team did some testing and found removing it from the domain and putting in a workgroup and then re-adding it to the domain fixed the issue.

[Tomwbm]

Having a similar issue to Jon's, but issue arises after user(s) is migrated to a new domain. Attaching dashboard details.