Security

Hi,

anyone encounter any issues with Radius on win2012. I setup new radius server 2012 but i can't seems to get it to talk to my IAP.

I followed the setup guide for win 2008R2 radius setup.

Regards,

Roy Chan

You can fallow my manual if you want it to work with 802.1x

http://community.arubanetworks.com/t5/Aruba-Instant-Cloud-Wi-Fi/tutorial-802-1X-with-Server-Derived-user-role-Instant-Windows/td-p/146084

Hopefully that helps you

Cheers

Carlos

Awesome. Thanks a lot. 

Hi,

I have gone through your link. Iam having one small doubt.

While configuring it is asking for  IP/DNS address. Which IP address i have to give?

1) Is it an IP address given by the network service provider (122.166.214.27) ?

2) Is it an IP address of the server i.e., 192.168.50.11 ( where iam configuring Radius Server) ?

3)Is it an IP address of the firewall ( We are using fortinet for that the IP is 192.168.50.1) ?

All our client machines are getting IP from server (192.168.50.11) , The server is DHCP enabled.

The Server IP address is as follows:

IP: 192.168.50.11

Gateway: 192.168.50.1

DNS: 192.168.50.1

Regards.,

Srinivas.

Srinivas, is it the Radius Client IP-adress you're referring to (picture 4 in NightShades guide)? This is the IP the Controller use when sending Radius traffic to the Radius server. Usually this is the controller-ip, but is configurable.

Hi John,

Yes iam having a doubt about that IP( which is in fig-4) only. Controller IP in the sense the IP used for the configuration of the Aruba device( IAP-115) right?

Regards.,

Srinivas.

If you're doing this with IAP - under System you need to enable "Dynamic Radius proxy" and add a "Virtual Controller IP". Use this VC-IP as Radius Client IP on the Radius Server. Make sure there is routing and openings for udp 1812/1813 between the Radius Server and this VC-IP.

Hi,

Thanks for the reply.

This things i have already done. But when connecting to that wifi using windows credentials it is showing as unable to connect. I think there is a connectivity issue between IAP & Radius server.

Kindly find the below attachments.

Regards.,

Srinivas.

srinivas7y@gmail.com,

You should check to see if there is anything in the Event Viewer on the Windows Server under Custom Views> Server Roles> Network Policy and Access.  That would give you a clue what is happening.

On the Instant you can also check the "show ap debug radius-statistics" either in CLI or through the GUI "More -> Support".

Here you'll find useful counters like

• Invalid secret
• Timeout
• Mismatch

Based on this and the findings in NPS log you should be able to narrow the issue down enough to solve it.

Hi John,

I think this may be the cause.

I have already enabled windows authentication but event viewer is showing as below.

Kindly find the attachment.

Regards.,

Srinivas.

srinivas7y@gmail.com,

What is configured under the "Constraints" tab in NPS?  Your event viewer says that it is not being classified by any any policies, basically.  The "Connections to other Access Servers" policy is normally hit, when your conditions and/or are constraints are too restrictive.  Your constraints tab should like like the below:

Hi John,

The configuration and all the remaining things are same,but still iam unable to find the solution.

Kindly find the attachments.

Regards.,

Srinivas.

Please open a case with TAC so that they can go through your configuration in detail.

Hi,

Ok then, i will chech with them.

Regards.,

Srinivas.

Completely unhelpful, especially with screenshots in Spanish.  I am having the same issue where I can't get the IAP to communicate with the Radius server (Windows Server 2012).  The link provided is for configuration with server derived user roles.  I don't need to use that, just plaing old authentication for WiFi access.

Mikey71174,

What are you referring to?  This thread is almost two years old.  You should open your own thread so we can see what your problem is.  The radius server configuration is pretty vanilla across manufacturers and not even anything that is specific to Aruba.  Microsoft has its own guide that applies to every manufacturer with regards to setting up NPS 2012 here:  https://technet.microsoft.com/en-us/library/jj721726.aspx

If you have more specific questions, you should open your own thread.