Wireless Access

Reply
Highlighted
New Contributor

Client authentication via NPS

Hello everybody,

We have NPS setup for Aruba authentication. We are using IAP 305's (running firmware version 6.5.4.8_65873) with the instant controller, managed by Airwave version 8.2.7.1.

 

It has been working pretty well until recently when some users have been having problems connecting. I checked Airwave, and I am seeing somewhat high rates of Radius Authentication errors. For example this morning one user had over 200 authentication errors. 

 

I have a ticket open with Aruba support, and they have been asking me to run some logs which as of this point have not been very helpful. 

 

I found in the Event Viewer of the NPS the following errors.

 

Source is NPS, event ID 16, text is as follows: “A RADIUS message with the Code field set to 12, which is not valid, was received on port 1812 from RADIUS client aruba_mastervc. Valid values of the RADIUS Code field are documented in RFC 2865.”.

 

Can you help with this error?

Highlighted
MVP Expert
MVP Expert

Re: Client authentication via NPS

Possible this wil help you

 

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc735325(v=ws.10)?redirectedfrom=MSDN

 

Kind Regards Marcel Koedijk
HPE ASE Flexnetwork | ACMP | ACCP | Ekahau ECSE Design - Was this post usefull, Kudos are welcome.
Highlighted
Frequent Contributor I

Re: Client authentication via NPS

Did you check the validity of the Certification on the NPS Server?

Highlighted
Guru Elite

Re: Client authentication via NPS


@Bantay wrote:

Hello everybody,

We have NPS setup for Aruba authentication. We are using IAP 305's (running firmware version 6.5.4.8_65873) with the instant controller, managed by Airwave version 8.2.7.1.

 

It has been working pretty well until recently when some users have been having problems connecting. I checked Airwave, and I am seeing somewhat high rates of Radius Authentication errors. For example this morning one user had over 200 authentication errors. 

 

I have a ticket open with Aruba support, and they have been asking me to run some logs which as of this point have not been very helpful. 

 

I found in the Event Viewer of the NPS the following errors.

 

Source is NPS, event ID 16, text is as follows: “A RADIUS message with the Code field set to 12, which is not valid, was received on port 1812 from RADIUS client aruba_mastervc. Valid values of the RADIUS Code field are documented in RFC 2865.”.

 

Can you help with this error?


We would need to know much more about your setup to even help.  There is very little to configure on Instant in terms of radius (ip address, radius key and radius port), so that means the variability is in the user's client, NPS and your infrastructure (network) setup.  Please find out if there have been any changes in your NPS configuration (make sure message authenticator is not enabled), or your network setup.  I would urge you to continue to work with TAC and use a utility like NTradiping:  https://www.novell.com/coolsolutions/tools/14377.html to ensure that basic radius functions work at the site with your issue.


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.5 User Guide
InstantOS 8.5 User Guide
Airheads Knowledgebase
Airheads Video Knowledge Base
Remote Access Point Solution Guide
ArubaOS Consolidated Release Notes
ArubaOS 8 ViA VPN Solution Guide
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: