Microsoft NPS + Microsoft NPS for MAC-Based RADIUS

[rabusiak]

Hi Guys,

Have any of you successfully setup MAC authentication bypass policy with NPS?
I'm following this document: Configuring Microsoft NPS for MAC-Based RADIUS - MS Switches - Cisco Meraki

All is set according to documentation but port with this policy is not forwarding traffic.

NPS logs are catchings my device request but it says: access denied because no matching network policy was found

[rabusiak]

Funny thing - I have also other Network policy which has NAS Port Type set to Wireless and is used for WIFI AD auth. If I remove NAS Port Type from it I have a match but then authentication method is not supported (unencrypted) and have access denied also:

[alemabrahao]

Maybe it will help you.

https://www.youtube.com/watch?v=Iput9nLnldA

[PhilipDAth]

If the authentication request is coming in using PAP, then you need to add that as an allowed method in your NPS policy.

[alemabrahao]

Is your Connection Request Policy ok?

[rabusiak · Accepted solution]

Thank you all for suggestions. I went for the 10th time through entire configuration and all was set correctly... except that I put test user in a wrong AD group 😛

This is why it's requests didn't match any of configured network policies 😉