https://community.extremenetworks.com/t5/extremewireless-identifi/extreme-c5210-cannot-get-radius-controller-logon-to-work-to-save/m-p/42739#M3306 Also get rid of NAS Port Type VPN as a Condition. Thu, 11 Feb 2016 04:26:00 GMT Doug 2016-02-11T04:26:00Z https://community.extremenetworks.com/t5/extremewireless-identifi/extreme-c5210-cannot-get-radius-controller-logon-to-work-to-save/m-p/42735#M3302 I am attempting to do something really simple. That is, get RADIUS off the ground. I figured the easiest starting task would be to use it for controller management logons, but even this has proved impossible.<BR /> <BR /> Now I am in a situation where RADIUS on my Windows 2008 R2 server is logging a success "Network Policy Server granted full access to a user because the host met the defined health policy" and yet my Extreme controller is denying the logon.<BR /> <BR /> When I run a Wireshark, I can see the ACCESS-REQUEST and ACCESS-ACCEPT messages being exchanged. <BR /> <BR /> So why isn't my Extreme controller happy with this outcome?<BR /> <BR /> SOME PICTURES:<BR /> <BR /> <P class="fancybox-image"><span class="lia-inline-image-display-wrapper" image-alt="15de8628abfa41ad805caf0c017ee3fc_RackMultipart20160210-96321-9384n4-evtlog_inline.png"><img src="https://community.extremenetworks.com/t5/image/serverpage/image-id/2167iB8BFD83FD73A026F/image-size/large?v=v2&amp;px=999" role="button" title="15de8628abfa41ad805caf0c017ee3fc_RackMultipart20160210-96321-9384n4-evtlog_inline.png" alt="15de8628abfa41ad805caf0c017ee3fc_RackMultipart20160210-96321-9384n4-evtlog_inline.png" /></span></P><BR /> <BR /> <P class="fancybox-image"><span class="lia-inline-image-display-wrapper" image-alt="15de8628abfa41ad805caf0c017ee3fc_RackMultipart20160210-83998-1pxctgz-wireshark_inline.png"><img src="https://community.extremenetworks.com/t5/image/serverpage/image-id/1565iF47A7FD5F06B3ABD/image-size/large?v=v2&amp;px=999" role="button" title="15de8628abfa41ad805caf0c017ee3fc_RackMultipart20160210-83998-1pxctgz-wireshark_inline.png" alt="15de8628abfa41ad805caf0c017ee3fc_RackMultipart20160210-83998-1pxctgz-wireshark_inline.png" /></span></P><BR /> <BR /> <P class="fancybox-image"><span class="lia-inline-image-display-wrapper" image-alt="15de8628abfa41ad805caf0c017ee3fc_RackMultipart20160210-39372-1rzrbpx-radius1_inline.png"><img src="https://community.extremenetworks.com/t5/image/serverpage/image-id/1019i08F3B083CDF95243/image-size/large?v=v2&amp;px=999" role="button" title="15de8628abfa41ad805caf0c017ee3fc_RackMultipart20160210-39372-1rzrbpx-radius1_inline.png" alt="15de8628abfa41ad805caf0c017ee3fc_RackMultipart20160210-39372-1rzrbpx-radius1_inline.png" /></span></P><BR /> <BR /> <P class="fancybox-image"><span class="lia-inline-image-display-wrapper" image-alt="15de8628abfa41ad805caf0c017ee3fc_RackMultipart20160210-96096-gnn97v-radius2_inline.png"><img src="https://community.extremenetworks.com/t5/image/serverpage/image-id/892i274CD9BEEE2241AC/image-size/large?v=v2&amp;px=999" role="button" title="15de8628abfa41ad805caf0c017ee3fc_RackMultipart20160210-96096-gnn97v-radius2_inline.png" alt="15de8628abfa41ad805caf0c017ee3fc_RackMultipart20160210-96096-gnn97v-radius2_inline.png" /></span></P><BR /> <BR /> <P class="fancybox-image"><span class="lia-inline-image-display-wrapper" image-alt="15de8628abfa41ad805caf0c017ee3fc_RackMultipart20160210-15963-b1s71i-radius3_inline.png"><img src="https://community.extremenetworks.com/t5/image/serverpage/image-id/2722iC88886FCBAF98EEE/image-size/large?v=v2&amp;px=999" role="button" title="15de8628abfa41ad805caf0c017ee3fc_RackMultipart20160210-15963-b1s71i-radius3_inline.png" alt="15de8628abfa41ad805caf0c017ee3fc_RackMultipart20160210-15963-b1s71i-radius3_inline.png" /></span></P><BR /> <BR /> Thu, 11 Feb 2016 04:22:00 GMT https://community.extremenetworks.com/t5/extremewireless-identifi/extreme-c5210-cannot-get-radius-controller-logon-to-work-to-save/m-p/42735#M3302 Steve_Ballantyn 2016-02-11T04:22:00Z https://community.extremenetworks.com/t5/extremewireless-identifi/extreme-c5210-cannot-get-radius-controller-logon-to-work-to-save/m-p/42736#M3303 You need to return back Service-Type=Administrative Thu, 11 Feb 2016 04:26:00 GMT https://community.extremenetworks.com/t5/extremewireless-identifi/extreme-c5210-cannot-get-radius-controller-logon-to-work-to-save/m-p/42736#M3303 Doug 2016-02-11T04:26:00Z https://community.extremenetworks.com/t5/extremewireless-identifi/extreme-c5210-cannot-get-radius-controller-logon-to-work-to-save/m-p/42737#M3304 Try....<P class="fancybox-image"><span class="lia-inline-image-display-wrapper" image-alt="269b58b72e31455da00d08b1dec0a914_704-3xdi09_inline.png"><img src="https://community.extremenetworks.com/t5/image/serverpage/image-id/4006i9049224C2681CDF7/image-size/large?v=v2&amp;px=999" role="button" title="269b58b72e31455da00d08b1dec0a914_704-3xdi09_inline.png" alt="269b58b72e31455da00d08b1dec0a914_704-3xdi09_inline.png" /></span></P> Thu, 11 Feb 2016 04:26:00 GMT https://community.extremenetworks.com/t5/extremewireless-identifi/extreme-c5210-cannot-get-radius-controller-logon-to-work-to-save/m-p/42737#M3304 Doug 2016-02-11T04:26:00Z https://community.extremenetworks.com/t5/extremewireless-identifi/extreme-c5210-cannot-get-radius-controller-logon-to-work-to-save/m-p/42738#M3305 UGH. That did the trick. Thank you!!!<BR /> <BR /> Did I miss that in the documentation somewhere? It seems really vague in this area. Thu, 11 Feb 2016 04:26:00 GMT https://community.extremenetworks.com/t5/extremewireless-identifi/extreme-c5210-cannot-get-radius-controller-logon-to-work-to-save/m-p/42738#M3305 Steve_Ballantyn 2016-02-11T04:26:00Z https://community.extremenetworks.com/t5/extremewireless-identifi/extreme-c5210-cannot-get-radius-controller-logon-to-work-to-save/m-p/42739#M3306 Also get rid of NAS Port Type VPN as a Condition. Thu, 11 Feb 2016 04:26:00 GMT https://community.extremenetworks.com/t5/extremewireless-identifi/extreme-c5210-cannot-get-radius-controller-logon-to-work-to-save/m-p/42739#M3306 Doug 2016-02-11T04:26:00Z https://community.extremenetworks.com/t5/extremewireless-identifi/extreme-c5210-cannot-get-radius-controller-logon-to-work-to-save/m-p/42740#M3307 Let me check out the guides... I'm sure it's there somewhere. <BR /> Thu, 11 Feb 2016 04:26:00 GMT https://community.extremenetworks.com/t5/extremewireless-identifi/extreme-c5210-cannot-get-radius-controller-logon-to-work-to-save/m-p/42740#M3307 Doug 2016-02-11T04:26:00Z https://community.extremenetworks.com/t5/extremewireless-identifi/extreme-c5210-cannot-get-radius-controller-logon-to-work-to-save/m-p/42741#M3308 <A href="https://gtacknowledge.extremenetworks.com/articles/How_To/How-do-I-configure-RADIUS-Management-login-with-Microsoft-Server-2008/" target="_blank" rel="nofollow noreferrer noopener">https://gtacknowledge.extremenetworks.com/articles/How_To/How-do-I-configure-RADIUS-Management-login...</A><BR /> <BR /> not sure whether that one could save lifes  Thu, 11 Feb 2016 04:26:00 GMT https://community.extremenetworks.com/t5/extremewireless-identifi/extreme-c5210-cannot-get-radius-controller-logon-to-work-to-save/m-p/42741#M3308 Ronald_Dvorak 2016-02-11T04:26:00Z https://community.extremenetworks.com/t5/extremewireless-identifi/extreme-c5210-cannot-get-radius-controller-logon-to-work-to-save/m-p/42742#M3309 I'm going to add the Adminstrative option to the article. The Enterasys policy string might be confusing if you... A. Don't know what Enterasys is or means B. Don't use Policy Manager Thu, 11 Feb 2016 04:26:00 GMT https://community.extremenetworks.com/t5/extremewireless-identifi/extreme-c5210-cannot-get-radius-controller-logon-to-work-to-save/m-p/42742#M3309 Doug 2016-02-11T04:26:00Z https://community.extremenetworks.com/t5/extremewireless-identifi/extreme-c5210-cannot-get-radius-controller-logon-to-work-to-save/m-p/42743#M3310 Doug, you beat me to it! Thu, 11 Feb 2016 04:26:00 GMT https://community.extremenetworks.com/t5/extremewireless-identifi/extreme-c5210-cannot-get-radius-controller-logon-to-work-to-save/m-p/42743#M3310 Jeremy_Gibbs 2016-02-11T04:26:00Z