NAC / XMC as Radius - not passing 802.1x authentication

[PGCourtois]

Hi Team,

I have Extreme Management Center (XMC), Extreme NAC and Extreme Wireless (V2110) configured in my environment.  XMC is acting as a Radius and it is successfully authenticating users.  My issue is with configuring 802.1x (PEAP) authentication on an SSID.  I configure 802.1x and set the Radius server options.  When I test the Authentication server within the wireless controller I get the following error:

Not sure where to go from here.  Thanks.  - Paul

[StephanH]

Oh, 

I see I am a little late. If you see the client in End Systems as I mentioned you can go futher with the steps Mig described.

[StephanH]

Hello,

for the test here "Access Rejected" is good.

The test button in the WLAN Service is only for a communication test to Radius and not authenticate a user. There are no credentials passed to radius only a test user name therefore the Radius can’t authenticate your user.

=> After your test you know the communication between Controller and Radius is working.

Normally you should see a authentication session in “End Systems” on XMC->Control if you try to connect an client to the SSID you are using with PEAP.

[LeoP1]

Hello,

AFAIK (or remember) the RADIUS test for 802.1x on V2110 always returns ACCESS DENIED…

I think you should test connecting a real device.

Best regards,

-Leo

[Miguel-Angel_RO]

Hi PG,

Go to the NAC/Access Control/Engine Groups/[Group Name]/End-Systems.

Locate the failing authentication and right click on it to execute the Configuration evaluation tool.

If it is not clear, please share the result for comments.

Mig