802.1X and Windows NPS Configuration Best Tips

[Andrew_Schmitt]

Does anyone have any suggestions on how to best configure the VNS and Windows NPS to handle 802.1X? I'm finding in our tests that users seem to drop off the VNS during the day and need to reconnect as well as just roaming throughout the building. Our NPS logs on the Windows server would appear to show the same. I did just turn on opportunistic keying and preauth but I'm curious if there are any other tweaks I should look for? Especially for iOS devices since we have quite a few of those. Thanks!

[Ronald_Dvorak]

How about 802.11r which is now supported in V9.21 ?
Some IOS devices support it - here the list....
https://support.apple.com/en-us/HT202628

-Ron

[Doug]

Andrew,

If you don't have a day/time restriction on your NPS policy, I would say it must be something else that would require a bit more investigation. I would suggest contacting the GTAC so further diagnostics can be captured from your system during an event. I would have the following ready when you reach out...

Controller Tech Support...
https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-Collect-a-Tech-Support-File-From-a-...

Access Point Data from where the user was attached...
https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-Collect-Access-Point-Logging-Inform...