How my environment is setup:
I am currently trying to implement certificate based authentication for wifi. I have a domain controller (rfhc-DC1) I have a radius server (rfhc-radius) the radius server also has active directory certificate services installed to hand out certs. The wireless controller is a cisco 5700 wireless controller. Oh and the certificate is a self-made one.
I have setup another ssid with radius, except its mschap v2 username and password auth. (it works fine)
So I setup active directory certificate services and went through the process on the radius server. The pics uploaded is how I set it up. SO the radius server hands out the certificates fine. The wifi does not connect. Then I get this error message in event viewer on the radius server. Now I have played with every kind of setting possible. The only way it works is if I do ad authentication. Please help.
Network Policy Server denied access to a user. Contact the Network Policy Server administrator for more information. User: Security ID: RFHC\1796-IT01$ Account Name: host/1796-IT01.rfhc.local Account Domain: RFHC Fully Qualified Account Name: RFHC\1796-IT01$ Client Machine: Security ID: NULL SID Account Name: - Fully Qualified Account Name: - OS-Version: - Called Station Identifier: a0-ec-f9-11-52-d0:RFHC_INTERNAL Calling Station Identifier: 00-C2-C6-38-0C-F2 NAS: NAS IPv4 Address: 10.0.0.30 NAS IPv6 Address: - NAS Identifier: - NAS Port-Type: Wireless - IEEE 802.11 NAS Port: 60000 RADIUS Client: Client Friendly Name: Cisco Wireless Controller Client IP Address: 10.0.0.30 Authentication Details: Connection Request Policy Name: Secure Wireless Connections Network Policy Name: - Authentication Provider: Windows Authentication Server: RFHC-RADIUS.rfhc.local Authentication Type: EAP EAP Type: - Account Session Identifier: - Logging Results: Accounting information was written to the local log file. Reason Code: 48 Reason: The connection request did not match any configured network policy.
Here is how the radius server is setup.
Here is how the wifi profile is setup
Edited by raiden453, 10 August 2016 - 03:29 PM.