Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Dror
Dror
Just browsing
Member since Aug 2, 2023
Jan 31 2024
Community Record
16
Posts
0
Kudos
0
Solutions
Badges
Jan 29 2024
10:38 AM
Man, you made my day! thats exactly what ive needed. I could edit and deploy the Wired network policies from GPO for all computers. works after reboot, Thanks!!
... View more
Jan 29 2024
8:44 AM
Hi all, so after a long time I was finally able to authenticate devices via Access policy in Meraki MS225 +NPS server in order to authenticate computers with Domain Computers group and certificate. But the thing is,its working only with 'Smart Card or other certificate (EAP-TLS)' authentication method, and I also had to change some more inner additional settings. The default NIC configuration is EAP(PEAP), and it's not working with this method. Now, if I want to apply the policy for all computers, it doesn't make sense that I need to go each computer and set it manually.. How can I change the NIC configurations for all computer organizations? Couldnt see something like this in GPO. Thanks in advance, Dror
... View more
s there any configuration needed to do on the endpoint ? NIC configurations?
... View more
OK but non of the logs i get says something about certificate..
... View more
I tried many consultants before i posted here. 😉 Where can i see the certificate in the NPS ? Couldnt find it. Thanks
... View more
I dont have User Group under connection request policy like I have in Network Policy
... View more
sure but i already have one configured.
... View more
it was there before. it didnt help. port still get disable if you sure it has to be there i will add it back. Do I need to use any certificate in order to authenticate the users ?
... View more
And what are they ? these my current Authentication methods:
... View more
Any change on NPS configuration bring a different logs. I dont know what are the right configuration i need to set. this is the latest logs I've received: Network Policy Server denied access to a user. Contact the Network Policy Server administrator for more information. User: Security ID: NULL SID Account Name: host/TACCPC333.claimscon.org Account Domain: - Fully Qualified Account Name: - Client Machine: Security ID: NULL SID Account Name: - Fully Qualified Account Name: - Called Station Identifier: 08-F1-B3-34-3F-94: Calling Station Identifier: 70-B5-E8-3A-31-E7 NAS: NAS IPv4 Address: 192.168.250.51 NAS IPv6 Address: - NAS Identifier: - NAS Port-Type: Ethernet NAS Port: 5 RADIUS Client: Client Friendly Name: TA Switch LAN 1 Client IP Address: 192.168.250.51 Authentication Details: Connection Request Policy Name: - Network Policy Name: - Authentication Provider: - Authentication Server: TACCDC19.claimscon.org Authentication Type: - EAP Type: - Account Session Identifier: 31394546453945463246324638364531 Logging Results: Accounting information was written to the local log file. Reason Code: 49 Reason: The RADIUS request did not match any configured connection request policy (CRP).
... View more
I've removed the inside MSCHAPv2. Port still disabled.😕
... View more
You mean like this ? the port has disabled again after this change.
... View more
I could find logs only in Event viewer but not something i could point on. The thing is that I need to know which uthenticated method should i use for domain user authentication. Is there other place to see NPS logs?
... View more
Hi, Thanks for you reply. Yes, I tried all these docs from Meraki but unfortunatly its not helps me. I preaty sure I need to set the right configurations on the NPS side but so far nothing works for me.
... View more
Aug 2 2023
4:55 AM
Hello all, I hope you be able to assist me because I'm frustrated. I have 2 Meraki Switches MS-225 for Lan connection only. No vlans. all ports are configured on Vlan 1. my goal is to authenticate any computer in my organization by user domain group. I already installed RADIUS server and configured it. its located also on the same network on my Meraki switch. I tried all the authenticated methods I have in the NPS but non of them works for me. Test connectivity to the RADIUS server is working fine to all 4 Meraki switches. Currently my conditions are NAS Port Type Ethernet or cable along with Domain users User Groups. Authentication method is Microsoft: Protected EAP (PEAP). Not sure if i select domain user group , how is the RADIUS server authenticate it ? by user creds or do I need to validates the users with certificate as well? The problem is , once i assign the Access Policy to any port its getting red and lost connection to the client computer. Please help me, what is the exact configuration I need to set on the RADIUS/NPS server ?? Thanks in advanced. Dror
... View more
© 2024 Cisco Systems, Inc.
