Wireless Access

Reply
Occasional Contributor I

Android and IOS can still connect to SSIDs, but Windows can't anymore.

I have 3 wireless networks, 2 of them use Radius, and the 1 guest one that has a passphrase.

 

After the weekend, suddenly windows laptop users cannot connect to the radius authenticated networks. But Andorid and IOS users are fine.

 

Users are able to connect to the guest network on any device. 

 

Product description: Aruba Instant IAP-325 (US) 802.11n/ac Dual 4x4:4 MU-MIMO Radio Integrated Antenna AP
Product number: JW327A

 

Is there somehting I can change about the network config or is it Windows specific? 

 

Guru Elite

Re: Android and IOS can still connect to SSIDs, but Windows can't anymore.

If a whole class of devices cannot connect to your network, something was changed or a certificate expired, and you probably need to find out what it is.  To get a clue, you should probably start at the radius server logs to understand where to go next.

******************
Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.
******************
Occasional Contributor I

Re: Android and IOS can still connect to SSIDs, but Windows can't anymore.

Thanks, I looked in the Radius logs, and the successful android connection is identical to the unsucessful windows attempts. I tested with incorrect credentials too, just to be sure.

 

But I do see "authenticate fail because integrity check failure in encrypted message" on the APs Show Log System output.

Guru Elite

Re: Android and IOS can still connect to SSIDs, but Windows can't anymore.

The radius log shows successful for Windows devices that do not connect?

******************
Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.
******************
Occasional Contributor I

Re: Android and IOS can still connect to SSIDs, but Windows can't anymore.

Correction, it does not work, I get Reason code 16

Guru Elite

Re: Android and IOS can still connect to SSIDs, but Windows can't anymore.

What radius server is this?  I don't know what reason code 16 is.  Is the radius server certificate expired?

******************
Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.
******************
Occasional Contributor I

Re: Android and IOS can still connect to SSIDs, but Windows can't anymore.

This is a Radius client in the NPS section of a windows server 2012 machine. In the event viewer it says "Reason Code 16, Rason: User credentials mismatch, either the user name does not excist or the password is incorrect"

 

I know the credentials are ok, becuase I can use the same ones from my phone with no issue. 

 

On the Aruba Instant GUI, I can see in the Maintenance>Certificates pane that the Deafult Server Certificate expirerd in Auguest 2017, so did the Default CP Server Certificate.

 

And the Device Certificate doesn't expire until 2032.

 

 

Guru Elite

Re: Android and IOS can still connect to SSIDs, but Windows can't anymore.

Does your radius server have a server certificate?

******************
Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.
******************
Occasional Contributor I

Re: Android and IOS can still connect to SSIDs, but Windows can't anymore.

It was a radius certificate issue. 

Guru Elite

Re: Android and IOS can still connect to SSIDs, but Windows can't anymore.

Can you please detail what was wrong?  We have a number of users who have radius certificate issues.

******************
Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.
******************
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: