topic Re: Setting up 802.1x for wireless clients in ExtremeWireless (Identifi)

Setting up 802.1x for wireless clients

dcsdne — Fri, 22 Feb 2019 02:35:48 GMT

We are following this great guide

https://community.extremenetworks.com/extremewireless-identifi-230294/how-to-guide-extreme-wireless-authenticates-domain-computers-using-certificates-nps-eap-tls-7563337

Unfortunately we are stuck at what looks like the very last leg of our journey. Our clients hit the NPS server but always kick back an error "Explicit Eap failure received" we are exclusively win10

Has anyone run into this?

Thanks

Re: Setting up 802.1x for wireless clients

Doug — Fri, 22 Feb 2019 02:40:20 GMT

That may be a cert issue, are you doing TLS or PEAP?

Re: Setting up 802.1x for wireless clients

dcsdne — Fri, 22 Feb 2019 02:53:07 GMT

It looks like the client is connecting via EAP. I can't seem to find anywhere in the controller to force it to PEAP. Playing with the NPS server I was able to add "Microsoft: Smart Card or other certificate" as an authentication option which now allows the clients to connect, but somehow I feel that's not the proper setup.

Re: Setting up 802.1x for wireless clients

Doug — Fri, 22 Feb 2019 03:23:05 GMT

Take a look at...

https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-Configure-RADIUS-PEAP-Authentication-on-an-ExtremeWireless-Controller-and-Microsoft-Server-2016/?q=PEAP+ExtremeWireless&l=en_US&fs=Search&pn=1

It may help.

Re: Setting up 802.1x for wireless clients

dcsdne — Fri, 22 Feb 2019 04:16:42 GMT

Thank you very much.