Wireless Access

Reply
Highlighted
Guru Elite

Re: Radius auth with Windows Server 2012 and Aruba OS 8.3.0.0

Are you trying to do EAP-PEAP (username and password) or EAP-TLS (Client-Side Certificates)?  If you are not doing client-side certificates, under "constraints" you should remove the "smartcard" entry.

 

Based on your configuration, the aaa test should work because you have PAP enabled.


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.5 User Guide
InstantOS 8.5 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Aruba Central Documentation
ArubaOS Consolidated Release Notes
Aruba Technical Webinars
Highlighted
Occasional Contributor II

Re: Radius auth with Windows Server 2012 and Aruba OS 8.3.0.0

I removed the smartcard constraint. 

What else can I try?

Guru Elite

Re: Radius auth with Windows Server 2012 and Aruba OS 8.3.0.0

You should try using a mobile client like an iphone or android phone to connect first, because they are more forgiving than Windows clients.


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.5 User Guide
InstantOS 8.5 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Aruba Central Documentation
ArubaOS Consolidated Release Notes
Aruba Technical Webinars
Highlighted
Occasional Contributor II

Re: Radius auth with Windows Server 2012 and Aruba OS 8.3.0.0

I tried it - but I can't connect and i get a authentication error.

In the logs on the NPS I can't see the connection attempt.

Highlighted
Guru Elite

Re: Radius auth with Windows Server 2012 and Aruba OS 8.3.0.0

Is this a single Instant AP or multiple?  Do you have DRP (Dynamic Radius Proxy) enabled? 


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.5 User Guide
InstantOS 8.5 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Aruba Central Documentation
ArubaOS Consolidated Release Notes
Aruba Technical Webinars
Highlighted
Occasional Contributor II

Re: Radius auth with Windows Server 2012 and Aruba OS 8.3.0.0

It's a single AP and DRP is now enabled.

Highlighted
Guru Elite

Re: Radius auth with Windows Server 2012 and Aruba OS 8.3.0.0

DRP is only valuable if you have more than one IAP.  Authentication should work without it.

 

Please check the logs on the radius server to see why the authentication would be dropped.  There must be something there maybe in the system logs.


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.5 User Guide
InstantOS 8.5 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Aruba Central Documentation
ArubaOS Consolidated Release Notes
Aruba Technical Webinars
Highlighted
Occasional Contributor II

Re: Radius auth with Windows Server 2012 and Aruba OS 8.3.0.0

OK. I disabled DRP.

When I try to connect with my android phone I have to enter some data. Can you please check if I use valid data:

EAP-method: PEAP

Phase2: MSCHAPV2

CA-Certificate: I downloaded the CA-Certificate from my certificateserver and chose this.

Domain: our AD-domainname

Identity: my samAccountname

Anonymous identity: samAccountname

Password: my password.

 

Are these inputs correct?

 

Next strange thing is, that the AP doesn't send MSCHAPV2 requests to the server:

 show ap debug radius-statistics

RADIUS Statistics
-----------------
Statistics                    InternalServer  DC02
----------                    --------------  ----
In Service: Management Auth   Not used        Not used
In Service: GerstnerZentrale  Not used        Not used
Accounting Requests           0               0
Raw Requests                  0               0
PAP Requests                  0               5
CHAP Requests                 0               0
MS-CHAP Requests              0               0
MS-CHAPv2 Requests            0               0

 

Btw thanks for your support! :)

Highlighted
Occasional Contributor II

Re: Radius auth with Windows Server 2012 and Aruba OS 8.3.0.0

Hello,

I tried a smaller key and now its working.

Very strange - but I'm happy. :) 

 

Thanks for your support!

 

Regards

Frantischek

View solution in original post

Highlighted
Guru Elite

Re: Radius auth with Windows Server 2012 and Aruba OS 8.3.0.0

Wow!  How big was the first key?


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.5 User Guide
InstantOS 8.5 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Aruba Central Documentation
ArubaOS Consolidated Release Notes
Aruba Technical Webinars
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: