topic Re: AD authentication V2110 8021x failed in ExtremeWireless (General)

AD authentication V2110 8021x failed

JohanHendrikx — Fri, 24 May 2019 19:27:37 GMT

I've create a rule in EAC so that AD laptops can authenticate to wireless and can connect to the infrastructure.

The conditins of the rule are:
Authentication method is 802.1x (PEAP)

The end system group is defined as:
objectCategory CN=Computer,CN=Schema,CN=Configuration,DC=comp,DC=local

And the location group is the SSID.

The authentication fauls and the error is a CLient Certificate Error.

What is wrong in the config ?

Re: AD authentication V2110 8021x failed

Ryan_Yacobucci — Sun, 26 May 2019 04:39:32 GMT

Hello,

The EAC appliance is deployed with a self signed RADIUS certificate that's not trusted by clients.

The supplicant on the Windows Client needs to not validate the certificate or a certificate signed by a trusted authority needs to be installed.

https://gtacknowledge.extremenetworks.com/articles/Solution/802-1x-User-PEAP-User-Rejected-in-NAC

Thanks
-Ryan

Re: AD authentication V2110 8021x failed

JohanHendrikx — Tue, 28 May 2019 14:47:25 GMT

Thanks, I will look into it