topic Re: Extreme Wireless C35 and MAC Authentication using Server 2016 Network Policy Server in ExtremeWireless (General)

Extreme Wireless C35 and MAC Authentication using Server 2016 Network Policy Server

robertmare — Sat, 25 Jan 2020 04:54:49 GMT

I have exhausted all documentation and suggestions for configuring Microsoft RADIUS to MAC Authenticate to our Private SSID. We are using C35 controllers and Server 2016, has anyone been able to get this to work? If so, what instructions/guides were followed?

I appreciate any suggestions or recommendations!

Thank you.

Re: Extreme Wireless C35 and MAC Authentication using Server 2016 Network Policy Server

StephanH — Mon, 27 Jan 2020 15:51:47 GMT

Hello robertmare,

did you read this article?

https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-configure-mac-authentication-on-Extreme-Wireless-and-Windows-Server-2008-2012-2016-NPS-Server

Best regards

Stephan

Re: Extreme Wireless C35 and MAC Authentication using Server 2016 Network Policy Server

robertmare — Mon, 27 Jan 2020 21:48:06 GMT

Thank you for the reply Stephan. Yes, that is the first article I used for configuration.

Re: Extreme Wireless C35 and MAC Authentication using Server 2016 Network Policy Server

Brian_Anderson1 — Mon, 27 Jan 2020 23:06:45 GMT

What error messages do you see in your NPS or AD server?

Re: Extreme Wireless C35 and MAC Authentication using Server 2016 Network Policy Server

robertmare — Mon, 27 Jan 2020 23:28:55 GMT

Hi Brian,

The error I am currently receiving is:

On the Server

Event ID: 6273 Reason Code 16, Authentication failed due to a user credentials mismatch. Either the user name provided does not map to an existing account or the password was incorrect.

On the client:

Event ID: 5632 Network Authentication failed\n The user certificate required for the network can’t be found on this computer.

Please note I believe that I have successfully created and distributed the certificate required, however not so sure?

My last configuration attempt followed this document:

https://community.extremenetworks.com/extremewireless-identifi-230294/how-to-guide-extreme-wireless-authenticates-domain-computers-using-certificates-nps-eap-tls-7563337

Thank you in advance for your time!

Re: Extreme Wireless C35 and MAC Authentication using Server 2016 Network Policy Server

Brian_Anderson1 — Tue, 28 Jan 2020 00:23:48 GMT

What kind of device are you trying to authenticate? If a domain computer, why not use .1x?

Re: Extreme Wireless C35 and MAC Authentication using Server 2016 Network Policy Server

robertmare — Tue, 28 Jan 2020 00:39:36 GMT

It is in fact a domain computer. I apologize, however haven’t used NPS/RADIUS in quite sometime so unsure as to what you mean by using .1x? The port for the connection policy is Wireless 802.11x….but doubt thats what is meant here?

Re: Extreme Wireless C35 and MAC Authentication using Server 2016 Network Policy Server

Brian_Anderson1 — Tue, 28 Jan 2020 00:50:17 GMT

If your ssid is set to bridge at ap and you aren’t using AP-Aware, then the port being set to .1x may affect your authentication.

However, if your ssid is set to 802.1x and your domain computer has 802.1x turned on, then this protocol will take precedence and will try to authenticate with the username and password of either the computer or user, depending on how the computer is configured and where in the login process the computer is in.

I’d start with unchecking the requirement on the client to check for certificate and go from troubleshooting from there.

Re: Extreme Wireless C35 and MAC Authentication using Server 2016 Network Policy Server

robertmare — Wed, 29 Jan 2020 00:51:34 GMT

I will try. Thank you for the reply!