Security

Hello All, 

Running on a very weird issue with windows PC trying to authenticate with 802.1x EAP-PEAP. all necessary configs are in place (CP, Switch, enable wired autoconfig 802.1x for win PC).

 

once I connect the affected PC with switch, the "windows security" pop up doesn t appear, thus i cant submit username/password AD cridentials.

going to Windows Event Viewer to check wired autoconfig logs outputs I found: 

*************************************************

Wired 802.1X Authentication succeeded.

Network Adapter: Intel(R) Ethernet Connection I219-LM
Interface GUID : {24f94691-821d-4fd9-91dd-e17f8337a61e}
Peer Address : 000000000000
Local Address: E86A64854776
Connection : 0xd
Identity : -
User: -
Domain: -
Reason: 0x70003
Reason Text: The network does not support authentication
Error Code : 0x0

************************************************

 

it said authentication successful and at the same time, the network does not support auth ?? odd output 

 

Please note that when I use a PC out of my customer organization, authentication works OK. 

 

My question here is, Anyone faced this issue? what are your thoughts 

 

What user is it submitting?  You need to uncheck the box in the wired supplicant that automatically submits your credentials.

Hello Joseph,
Box unchecked,
with a working PC, once i connect PC to switch i m asked to type username/password,

non-working PC, once connected to the switch (same switch/same port like the working one)the pop up window doesn't appear.

Which username is being submitted by the supplicant?

AD username and password

What does clearpass say?

With non working PCs:
Nothing hit clearpass, Access tracker is clean

I don't have enough informaton from you to understand what is wrong.  Maybe someone else can help.

Hello Everyone, 

the problem was a PC related issue, and more exactly it was due to Symantec endpoint protection, 

it took so long for us to detect it, we have a TAC case with Symentec to invistigate on that, 

 

thanks joseph ! 

 

 

Hello,

Thank you very much @MandP for update​.
Could you please let us know what change has been done on SEP side?

Regards,

------------------------------
Vladimir Orlov
------------------------------

Original Message:
Sent: Sep 10, 2019 10:00 AM
From: ayoub chabrouk
Subject: windows PC 802.1x issue

Hello Everyone, 

the problem was a PC related issue, and more exactly it was due to Symantec endpoint protection, 

it took so long for us to detect it, we have a TAC case with Symentec to invistigate on that, 

 

thanks joseph !