cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Radius Connection Issue

SOLVED
Here to help

Radius Connection Issue

setting up Radius Authentication for our corp network.

followed the instruction in terms of NPS but when i test the radius server it fails to connect. it doesnt give out any other error.

i checked the radius server and i have added the AP and went through event logs but i cant find any failures under security logs.

NPS logs doesnt have any record.

i am able to ping the radius server from the subnet i am on.

 

any other pointers or location i need to check.

1 ACCEPTED SOLUTION

Accepted Solutions
Here to help

Re: Radius Connection Issue

its all sorted.

stupidest thing fixed the issue. not really sure how or why its fixed but its fixed.

 

IT 101 reboot the bloody NPS server.

24 REPLIES 24
Kind of a big deal

Re: Radius Connection Issue

That typically happens when the RADIUS key does not match.

 

In NPS (at least in Server 2012R2 or better) you can assign a subnet that all clients are in (such as 10.0.0.0/8) and a common key.  This makes it easy to leave Meraki devices configured to use DHCP (like access points).

Here to help

Re: Radius Connection Issue

i am running this on Server 2012.

but if its a bad key shouldnt i see it somewhere??

 

i am using radius only for corp network and the ip's will be forwarded via dhcp from our lan.

Kind of a big deal

Re: Radius Connection Issue

Nope. It logs nothing - nudda - if the key is wrong.

Here to help

Re: Radius Connection Issue

great.

 

any other possibilities of why this is not working?

Meraki Employee

Re: Radius Connection Issue

@PhilipDAth is likely correct, the most common issue is a mismatched shared secret between the AP and RADIUS server, but it could sometimes be fat-fingered IP address settings and a UDP port mismatch (make sure it's using 1812 and not some other port like 1645).  Any of those things would likely cause radio silence from the RADIUS server.

Here to help

Re: Radius Connection Issue

its definitely 1812 and i have confirmed the password with 2 different people its definetly right.

 

i am using my account with and without domain prefix and confirmed the password.

my admin account has access to NPS server so i am not sure what else can be wrong.

 

this is is annoying the living daylights out of me.

 

Meraki Employee

Re: Radius Connection Issue

Are you using an actual wireless client/supplicant or the "Test" button on the Access Control page in Dashboard?  You already ran packet captures and/or ran it by Support to assist with some pcaps?  Let's see what is or isn't traversing the AP.  

Here to help

Re: Radius Connection Issue

i am doing test via dashboard of meraki

Conversationalist

Re: Radius Connection Issue

Even the ports and shared secret is right, and still you face the issue with connectivity??, then it would be radius server is not allowing the AP which you are trying to connect, there is an option to alloow the MAC address of AP in RADIUS and allow subnet of the AP in the RADIUS.. please ensure both.
Kind of a big deal

Re: Radius Connection Issue

I have had issues with NPS many times where it doesn't log anything to the event viewer, like it should.  Enable the option to log to a TXT file.  By default it writes it out to:

c:\windows\system32\LogFiles

And the files begin with IN*.  As long as the RADIUS secret is correct it will log success and failed responses there.  They are a pain to read.

Here to help

Re: Radius Connection Issue

Hi Philip,

 

i did check that location but i dont see any files with IN. all i see are multiple subfolders but nothing says as radius server related.

Kind of a big deal

Re: Radius Connection Issue

Lets check some basics (I'm assuming you are using WPA2-Enterprise mode):

  • Are you running an Enterprise CA?
  • Have you requested a certificate from that CA for the NPS server?
  • In Policies/Network Profiles:
    • On the Overview tab tick "Ignore user account dial-in properties"
    • I normally set a "Condition" that Nas-Port-Type=Wireless
      • Under "Constraints/Authentication Methods" un-tick all methods.  Add PEAP.  Edit PEAP and make sure the certificate you requested above is selected.  Under EAP-Types make sure only EAP-MSCHAPv2 is selected.
Kind of a big deal

Re: Radius Connection Issue

In NPS right click the NPS server and select "properties".  Make sure you have ticked to logged accepted and rejected connections.

Here to help

Re: Radius Connection Issue

logs are ticked for authentication success n reject.

 iam verifying your other reply

Here to help

Re: Radius Connection Issue

will try this and let you know

Highlighted
Kind of a big deal

Re: Radius Connection Issue

Screenshot from 2017-11-03 18-50-59.pngScreenshot from 2017-11-03 18-51-27.pngScreenshot from 2017-11-03 18-51-49.pngScreenshot from 2017-11-03 18-52-14.png

Here to help

Re: Radius Connection Issue

yup i have all that.

removed the checks under constraints and testing now.

Kind of a big deal

Re: Radius Connection Issue

And this is how the access points are setup (using the "Everything else" name).

Screenshot from 2017-11-03 18-54-41.pngScreenshot from 2017-11-03 18-54-59.png

Here to help

Re: Radius Connection Issue

currently i have only added AP ip which is on different subnet compared to our corporate subnet.

so not sure if there is a point of adding the entire subnet

Kind of a big deal

Re: Radius Connection Issue

What connects these two subnets?  Layer 3 switch, router, firewall?

 

Does the NPS server run antivirus that also contains a firewall?

 

Is Windows Firewall enabled on the NPS server?  If so, has it got an exclusion for the 1812 and 1813 ports?

Here to help

Re: Radius Connection Issue

i might have to check the certificate its getting.

to my understanding all my settings are correct.

 

going through the certifcate requirement for this. let me see how i go.

 

 

Here to help

Re: Radius Connection Issue

its all sorted.

stupidest thing fixed the issue. not really sure how or why its fixed but its fixed.

 

IT 101 reboot the bloody NPS server.

Conversationalist

Re: Radius Connection Issue

For what it's worth, I was having this exact same issue with a Windows Server 2019 VM running NPS. Meraki could not connect to it, the key was right, the settings were right, everything was right. I rebooted the server and it suddenly started working.

New here

Re: Radius Connection Issue

Thank you! This helped as the AP was relocated from another location and assigned new IP. I had to remove the AP from NPS and re-add with new IP/manual generated password. WORKED!

Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.