Wireless Access

last person joined: 2 days ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

Win 7 cant authenticate

This thread has been viewed 0 times
  • 1.  Win 7 cant authenticate

    Posted Mar 29, 2017 06:37 AM

    Hi ,

     

    I have two AMC 7220 Version 6.5.0.3 Active/Standby

     

    I have SSID with 802.1x (termination is on the controller) the radius is NPS,

     

    My problem is that only win 7 can't access to this SSID, i checked the NPS log and i can see that all good,

     

    This the log from controller:

     

    Mar 29 12:10:40  station-up             *  c0:18:85:c4:bd:b1  a8:bd:27:0e:f9:61                  -     -  wpa2 aes
    Mar 29 12:10:40  station-term-start     *  c0:18:85:c4:bd:b1  a8:bd:27:0e:f9:61                  1003  -
    Mar 29 12:10:40  eap-term-start        ->  c0:18:85:c4:bd:b1  a8:bd:27:0e:f9:61/Technion-Secure  -     -
    Mar 29 12:10:40  station-term-start     *  c0:18:85:c4:bd:b1  a8:bd:27:0e:f9:61                  1003  -
    Mar 29 12:10:54  station-tls-alert   *     c0:18:85:c4:bd:b1  a8:bd:27:0e:f9:61/Technion-Secure  48    2  failure
    Mar 29 12:10:54  station-term-end       *  c0:18:85:c4:bd:b1  a8:bd:27:0e:f9:61/Technion-Secure  1     -  failure
    Mar 29 12:10:54  eap-failure           <-  c0:18:85:c4:bd:b1  a8:bd:27:0e:f9:61/Technion-Secure  -     4
    Mar 29 12:10:54  station-down           *  c0:18:85:c4:bd:b1  a8:bd:27:0e:f9:61                  -     -

     

    Can someone help ?

     

    Regards

    Rafi



  • 2.  RE: Win 7 cant authenticate

    Posted Apr 03, 2017 05:27 AM

    Looks like TLS is failing. Have you uploaded a server certificate and your CA certificate to your controller and selected them in your AAA 802.1X auth profile?

     

    Helpful links:

     

    http://community.arubanetworks.com/aruba/attachments/aruba/unified-wired-wireless-access/6140/1/EAP-TLS%20Termination-2.docx

     

    http://community.arubanetworks.com/t5/Controller-Based-WLANs/How-does-dot1x-termination-work/ta-p/178566

     



  • 3.  RE: Win 7 cant authenticate
    Best Answer

    Posted Apr 03, 2017 06:00 AM

    Hi,

     

    Thank you for your replay,

    I must mantion that authentication works fine with all devices except win7 !!!

     

    I talked with aruba support and we solved the problem, i craete certificate chain and under the 802.1x authentication profile i added the chain to server certificate ( ca-certificate stays empty)

     

    Regards

    Rafi