topic Re: at one of my site, users have challenge to connect Internet SSID on iPhone. Repeatedly getting popup of wrong password. sometimes able to connect after rebooting AP. We are using NPS server for authentication. in Aerohive Migrated Content

at one of my site, users have challenge to connect Internet SSID on iPhone. Repeatedly getting popup of wrong password. sometimes able to connect after rebooting AP. We are using NPS server for authentication.

AnonymousM — Thu, 11 Apr 2019 22:34:36 GMT

at one of my site, users have challenge to connect Internet SSID on iPhone. Repeatedly getting popup of wrong password. sometimes able to connect after rebooting AP. We are using NPS server for authentication.

Re: at one of my site, users have challenge to connect Internet SSID on iPhone. Repeatedly getting popup of wrong password. sometimes able to connect after rebooting AP. We are using NPS server for authentication.

samantha_lynn — Fri, 12 Apr 2019 17:09:35 GMT

Could you let me know which HiveManager platform you are using? Also, when the iPhone fails to connect, are you seeing any errors or logs about the connection on the NPS server? Finally, are any other device types affected or only the iPhones are having trouble?

This guide will walk you through how to determine which HiveManager you are using, for reference: https://thehivecommunity.aerohive.com/s/article/Which-HiveManager-Platform-am-I-using

Re: at one of my site, users have challenge to connect Internet SSID on iPhone. Repeatedly getting popup of wrong password. sometimes able to connect after rebooting AP. We are using NPS server for authentication.

AnonymousM — Fri, 12 Apr 2019 17:42:47 GMT

I am using Hivemanager VHM. AP121 at site. Hive OS on AP 8.5r8b

We don't have any another phone (Android ) at site. on Laptop its working fine.

On HM

Receive message from RADIUS Server: code=11 (Access-Challenge) identifier=132 length=1130

Send message to RADIUS Server(10.252.238.56):code=1 (Access-Request) identifier=133 length=1790

Sta(at if=wifi1.1) is de-authenticated because of notification of driver.

On NPS server

below are the logs on HM when users are not able to connect.

<Event><Timestamp data_type="4">04/11/2019 08:44:58.493</Timestamp><Computer-Name data_type="1">SGBD016352</Computer-Name><Event-Source data_type="1">IAS</Event-Source><NAS-Identifier data_type="1">IGBBSK3028</NAS-Identifier><Called-Station-Id data_type="1">C4-13-E2-23-C5-26:Atkins Internet Only</Called-Station-Id><Vendor-Specific data_type="2">00006930010600000000</Vendor-Specific><Vendor-Specific data_type="2">00006930060600000122</Vendor-Specific><Acct-Multi-Session-Id data_type="1">1F2CB3DF6A3E26E2</Acct-Multi-Session-Id><Service-Type data_type="0">2</Service-Type><NAS-Port data_type="0">0</NAS-Port><Calling-Station-Id data_type="1">08-C5-E1-95-A4-53</Calling-Station-Id><Connect-Info data_type="1">11ac</Connect-Info><Acct-Session-Id data_type="1">E414752C7AAE9076</Acct-Session-Id><NAS-IP-Address data_type="3">10.30.31.225</NAS-IP-Address><NAS-Port-Type data_type="0">19</NAS-Port-Type><Framed-MTU data_type="0">1500</Framed-MTU><Client-IP-Address data_type="3">10.202.11.254</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">All</Client-Friendly-Name><User-Name data_type="1">salt2720</User-Name><Proxy-Policy-Name data_type="1">Wireless Connection - Local Auth</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">WSATKINSsalt2720</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">WSATKINSsalt2720</Fully-Qualifed-User-Name><Authentication-Type data_type="0">5</Authentication-Type><NP-Policy-Name data_type="1">Secure Wireless Connections - PEAP</NP-Policy-Name><Class data_type="1">311 1 10.202.6.107 04/02/2019 01:33:35 8419858</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>

<Event><Timestamp data_type="4">04/11/2019 08:44:58.493</Timestamp><Computer-Name data_type="1">SGBD016352</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.202.6.107 04/02/2019 01:33:35 8419858</Class><Session-Timeout data_type="0">30</Session-Timeout><Acct-Session-Id data_type="1">E414752C7AAE9076</Acct-Session-Id><Client-IP-Address data_type="3">10.202.11.254</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">All</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Wireless Connection - Local Auth</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">WSATKINSsalt2720</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">WSATKINSsalt2720</Fully-Qualifed-User-Name><Authentication-Type data_type="0">5</Authentication-Type><NP-Policy-Name data_type="1">Secure Wireless Connections - PEAP</NP-Policy-Name><Packet-Type data_type="0">11</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>

<Event><Timestamp data_type="4">04/11/2019 08:44:58.509</Timestamp><Computer-Name data_type="1">SGBD016352</Computer-Name><Event-Source data_type="1">IAS</Event-Source><NAS-Identifier data_type="1">IGBBSK3028</NAS-Identifier><Called-Station-Id data_type="1">C4-13-E2-23-C5-26:Atkins Internet Only</Called-Station-Id><Vendor-Specific data_type="2">00006930010600000000</Vendor-Specific><Vendor-Specific data_type="2">00006930060600000122</Vendor-Specific><Acct-Multi-Session-Id data_type="1">1F2CB3DF6A3E26E2</Acct-Multi-Session-Id><Service-Type data_type="0">2</Service-Type><NAS-Port data_type="0">0</NAS-Port><Calling-Station-Id data_type="1">08-C5-E1-95-A4-53</Calling-Station-Id><Connect-Info data_type="1">11ac</Connect-Info><Acct-Session-Id data_type="1">E414752C7AAE9076</Acct-Session-Id><NAS-IP-Address data_type="3">10.30.31.225</NAS-IP-Address><NAS-Port-Type data_type="0">19</NAS-Port-Type><Framed-MTU data_type="0">1500</Framed-MTU><Client-IP-Address data_type="3">10.202.11.254</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">All</Client-Friendly-Name><User-Name data_type="1">salt2720</User-Name><Proxy-Policy-Name data_type="1">Wireless Connection - Local Auth</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">WSATKINSsalt2720</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">WSATKINSsalt2720</Fully-Qualifed-User-Name><Authentication-Type data_type="0">5</Authentication-Type><NP-Policy-Name data_type="1">Secure Wireless Connections - PEAP</NP-Policy-Name><Class data_type="1">311 1 10.202.6.107 04/02/2019 01:33:35 8419859</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>

<Event><Timestamp data_type="4">04/11/2019 08:44:58.509</Timestamp><Computer-Name data_type="1">SGBD016352</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.202.6.107 04/02/2019 01:33:35 8419859</Class><Session-Timeout data_type="0">30</Session-Timeout><Acct-Session-Id data_type="1">E414752C7AAE9076</Acct-Session-Id><Client-IP-Address data_type="3">10.202.11.254</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">All</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Wireless Connection - Local Auth</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">WSATKINSsalt2720</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">WSATKINSsalt2720</Fully-Qualifed-User-Name><Authentication-Type data_type="0">5</Authentication-Type><NP-Policy-Name data_type="1">Secure Wireless Connections - PEAP</NP-Policy-Name><Packet-Type data_type="0">11</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>

Re: at one of my site, users have challenge to connect Internet SSID on iPhone. Repeatedly getting popup of wrong password. sometimes able to connect after rebooting AP. We are using NPS server for authentication.

samantha_lynn — Fri, 12 Apr 2019 19:38:33 GMT

I'm sorry, I'm not sure what you mean by HiveManager VHM. Are you using Classic or HiveManager (formerly NG)?

Re: at one of my site, users have challenge to connect Internet SSID on iPhone. Repeatedly getting popup of wrong password. sometimes able to connect after rebooting AP. We are using NPS server for authentication.

AnonymousM — Fri, 12 Apr 2019 19:53:04 GMT

Hi Sam,

Ia m using classic not the NG (cloud based).

Re: at one of my site, users have challenge to connect Internet SSID on iPhone. Repeatedly getting popup of wrong password. sometimes able to connect after rebooting AP. We are using NPS server for authentication.

samantha_lynn — Fri, 12 Apr 2019 21:02:29 GMT

Thank you for clarifying. I took a look at that data but all I found was one mention of a session timeout. Can you tell me if the NPS server is 1) receiving the authentication request and 2) if it is authorizing the user or denying it at the NPS level?

Given that you are using an external Radius set up, the APs don't perform authentication, they pass the request to the NPS server and take the response of the NPS server (accept or deny) and then we go from there. If the password is failing, it's the NPS server rejecting the password rather than the Aerohive set up. If the authentication request isn't reaching the NPS server however, then we need to investigate where the traffic is dropping. If the logs you've posted are related only to the user in question, that would seem to indicate we are getting the traffic where it needs to go, and the NPS server is denying access.

Re: at one of my site, users have challenge to connect Internet SSID on iPhone. Repeatedly getting popup of wrong password. sometimes able to connect after rebooting AP. We are using NPS server for authentication.

adam_niblett — Mon, 20 Jan 2020 16:56:07 GMT

Hi Sam/Ramesh,

I am facing a similar problem...Did you manage to get any resolution tot he problem? If so what was it. Many thanks,

Adam