Hi;
I'm working all week to figure this out, but no success until now, help is appreciated.
Objective: set up a client VPN where the end-user can authenticate with it's Microsoft Entra ID creds.
Current Config:
- no vMX
- Azure Domain Services serving RADIUS queries for 802.1x - Meraki is able to reach it using public IP.
Attempts:
Authentication with Radius - Failure -
Client side Message:
"The remote connection was denied because the user name and password combination you provided is not recognized, or the selected authentication protocol is not permitted in the remote server"
NPS Side Log:
Reason Code: 16
Reason: Authentication failed due to a user credentials mismatch. Either the user name provided does not map to an existing user account or the password was incorrect.
Authentication Type: PAP
Calling Station Identifier: CLIENTVPN
Authentication with Active Directory - Failure -
Can't put a public IP - not sure if there's any other workaround that setup a vMX in Azure.
Authentication using AnyConnect - Using Radius with PAP or AD, Same situation that above.
Authentication using AnyConnect App for Microsoft Entra ID - No longer exists.
I'm currently lost on who to workaround this with no extra expense.
