Wireless Access

 View Only
  • 1.  MSM AD authentication

    Posted Feb 04, 2016 04:14 AM
      |   view attached

    Hello,

    We're trying to let external PCs to be able to connect to our wireless network via AD authentication and have access to same workers networks .

    So we created new AD directory withen new users .

    An external PC arrive and trying to connect to the SSID of the workers but they can't connect .

    We also tried via workers user on the external PC but still didn't work .

    We also tried to type manually the domain name on that external PC instead of workgroup but still didn't work .

    Our question is: Does the PC needs to be rigestered in the domain / JPO in order to let it authenticate successfully ?

    And where to configure that ? Is is somewhere on the MSM ?

    Log:

    Request to RADIUS server from client (mac='A0:88:11:11:11:68') on interface (value='r1v3') was rejected while performing 802.1x Authentication

     

    Thanks .



  • 2.  RE: MSM AD authentication

    Posted Feb 05, 2016 05:33 AM

    which RADIUS server are you using? - MS NPS can have policy so that only domain joined PC can authenticate with its Radius service. You might want to check this uisng tools

    http://www.windowsnetworking.com/articles-tutorials/wireless-networking/Testing-Monitoring-Tools-RADIUS-Servers.html

    http://www.iea-software.com/products/radlogin4.cfm

    Some Pc have issues authentication with 802.1x - esp windows 7 - google for this.

     https://www.google.co.uk/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8#q=802.1+x+and+windows+7+failed+authentication

    https://supportforums.cisco.com/blog/12256681/getting-past-intermittentunexplained-8021x-problems-windows-7

    Hope this helps.

    Michael



  • 3.  RE: MSM AD authentication

    Posted Feb 05, 2016 01:07 PM

    Hi,

     

    First thank you for the reply

    So I understand that this not a MSM configuration , but a radius configuration/vendor . Am I right ?



  • 4.  RE: MSM AD authentication

    Posted Feb 05, 2016 02:23 PM

    I can not comment on MSM configuration and but if everyone else is able to connect but guest user/PC isn't then problem lie with guest PC.

    Can you join your WIFI using valid credential? if not them WIFI SSID is tied down to Domain.

    Its difficult TS without seeing it.