Security

 View Only
  • 1.  Client authentication via NPS

    Posted Mar 20, 2019 08:35 AM

    Hello,

    We have NPS setup for Aruba authentication. We are using IAP 305's (running firmware version 6.5.4.8_65873) with the instant controller, managed by Airwave version 8.2.7.1.

     

    It has been working pretty well until recently when some users have been having problems connecting. I checked Airwave, and I am seeing somewhat high rates of Radius Authentication errors. For example this morning one user had over 200 authentication errors. 

     

    I have a ticket open with Aruba support, and they have been asking me to run some logs which as of this point have not been very helpful. 

     

    I found in the Event Viewer of the NPS the following errors.

     

    Source is NPS, event ID 16, text is as follows: “A RADIUS message with the Code field set to 12, which is not valid, was received on port 1812 from RADIUS client aruba_mastervc. Valid values of the RADIUS Code field are documented in RFC 2865.”.

     

    Can you help with this error?



  • 2.  RE: Client authentication via NPS

    Posted Mar 20, 2019 11:04 AM

    A quick google search turned up this: 

     

    https://social.technet.microsoft.com/Forums/windowsserver/en-US/2c2b59ee-fc02-4fe4-bc5e-b3f0ab54ca72/when-will-the-ms-server-support-radius-code-field-12-statusserver?forum=winserverNIS

     

    A possible fix can be found here:

     

    https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc735325(v=ws.10)

     

    Are any users able to authenticate through your NPS server? Assuming only certain users/devices are having issues, narrowing down the client type would help identify what attribute/behavior is triggering this error on NPS.