Dont worry I figured it out myself, it was due to Vendor Attributes. Please delete this post.
Dear Friends,
Once again, AAA on my switches are all working now..
I was trying to enable Radius Authentication for Airwave over windows policy NPS server. Seems everything is configured correctly, and I can see NPS is granting the the security group "NetAdmin" to access Airwave:
Authentication Details:
Connection Request Policy Name: Airwave
Network Policy Name: ArubaSwitch
Authentication Provider: Windows
Authentication Server: Radiusserver IP
Authentication Type: PEAP
EAP Type: Microsoft: Secured password (EAP-MSCHAP v2)
Account Session Identifier: -
Logging Results: Accounting information was written to the local log file.
However, it is saying on Airwave log: Radius server denied access to user myadmin...
Do I need to configure anything more on Airwave? except AMP setup Radius Authentication.
ML