Sporadic radius authentication failure for wired clients

[Hari8370]

We use EAP-based authentication for wired clients on MS225 switches. However, random clients fail to authenticate at unpredictable times.

Packet captures show no EAP traffic, but the switch logs indicate rejection events. Replugging the cable or cycling the port allows the device to authenticate successfully.

Any ideas on what might be causing this issue? Our NPS is deployed on Windows Server 2022.

[cmr]

What is the path from the MS225s to the NPS and the cloud?  Are the MS225s and the NPS on the same site and are all MS225s affected?

[Hari8370]

NPS and MS225s are on same site. 
Most of the switches are having this issue but please note that the issue is intermittent.

[alemabrahao]

Take a look at the troubleshooting guide.

802.1X authentication issues troubleshooting - Windows Client | Microsoft Learn

[Main10ence]

Hello @Hari8370,

Do you have any server-side errors that correlate to the "failed" event seen on the switch port? Also, have you checked the event log on the Dashboard? There may be good information there.