AD authentication V2110 8021x failed

[JohanHendrikx]

I've create a rule in EAC so that AD laptops can authenticate to wireless and can connect to the infrastructure.

The conditins of the rule are:
Authentication method is 802.1x (PEAP)

The end system group is defined as:
objectCategory CN=Computer,CN=Schema,CN=Configuration,DC=comp,DC=local

And the location group is the SSID.

The authentication fauls and the error is a CLient Certificate Error.

What is wrong in the config ?

[JohanHendrikx]

Thanks, I will look into it

[Ryan_Yacobucci]

Hello,

The EAC appliance is deployed with a self signed RADIUS certificate that's not trusted by clients.

The supplicant on the Windows Client needs to not validate the certificate or a certificate signed by a trusted authority needs to be installed.

https://gtacknowledge.extremenetworks.com/articles/Solution/802-1x-User-PEAP-User-Rejected-in-NAC


Thanks
-Ryan