Quantcast
Channel: Network Access Protection forum
Viewing all articles
Browse latest Browse all 1875

NPS Certificate Authentication not Functioning

$
0
0

Hello,

I recently implemented an NPS deployment within an enterprise environment, with the ultimate goal of using certificates and an NPS server to authenticate an 802.11x wireless network. I added the NPS role to one of the domain controllers, and created a GPO with the wifi and certificate configuration. Unfortunately, client computers with the GPO deployed cannot access the wireless network. I don't see rejections on the NPS server, it's almost like they are dropped. I tested domain username/password authentication by added my user account to the AD group, and that bounced back as approved (I'm using Meraki APs). When a computer tries to connect to the wifi, it's almost like the attempt is dropped. I've run through Technet articles for the last few weeks reviewing my configuration, but I can't find a reason for why this would be happening. Could someone help provide some insight?

Below is an outline of what I did.

1.	Added APs as radius clients to the NPS server
2.	connection request policy
     a.	Processing order 1
     b.	Conditions: NAS Port Type – Wireless – Other OR Wireless – IEEE 802.11
     c.	Authentication Provider Local Computer
3.	Network Policies
     a.	Processing order 1, grant access
     b.	Condition: windows groups (the group contains Domain Computers and Domain Users)
     c.	EAP Configured
     d.	Ignore User Dial-In Properties: True
     e.	Access Permissions: Grant Access
     f.	EAP Method: Microsoft: Protected EAP
     g.	Authentication Method: EAP or MS-CHAP
     h.	NAP Enforcement: Allow full network access
     i.	Updated noncompliant clients: False
     j.	Framed Protocol: PPP
     k.	Service type: Framed

And added a GPO with an 802.11x wifi configuration, and a trusted root certificate authority GPO for a certificate issued by the domain CA to the NPS Server.


Thanks!



Viewing all articles
Browse latest Browse all 1875

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>