Quantcast
Channel: Network Access Protection forum
Viewing all articles
Browse latest Browse all 1875

MAC Authentication + Windows Server 2008 R2 Radius server

$
0
0

Hello there,

I have been trying to configure the MAC Authentication on Windows Server Network Policy Server but no success. Details on my configuration can be find below.

I have firstly enabled the Mac Authentication on 3com switch 4400 model.

enabling  -> Mac-authentication

enabling authentication mode -> UsernameAsMacAddress

configuring a domain - mac-authentication domain abc.local.

I left the default Vlan (Vlan1)

While on my DC, I created a user

username: 00-00-00-00-00-00

password: 00-00-00-00-00-00

Lastly on the NPS Server, I configured the 802.1x Wired configuration, I configured the NAS (Radius Client) whici is the 3com Switch.

After completing the configurations, I turned on my computer with and logged on to the domain abc\00-00-00-00-00-00 with the password. But there was no success when the computer tried to connect to the network looking for DHCP services to obtain IP address.

On the NPS event service, I got:

User:
Security ID: NULL SID
Account Name: 00-00-00-00-00-00@abc.local
Account Domain:abc
Fully Qualified Account Name:abc\00-00-00-00-00-00

Client Machine:
Security ID: NULL SID
Account Name: -
Fully Qualified Account Name:-
OS-Version: -
Called Station Identifier:-
Calling Station Identifier:0000-0000-0000
NAS:
NAS IPv4 Address:xxx.xxx.xx.xx
NAS IPv6 Address:-
NAS Identifier:00aa00aa00aa
NAS Port-Type:Ethernet
NAS Port: 12345678

RADIUS Client:
Client Friendly Name:3com
Client IP Address:xxx.xxx.xx.xx

Authentication Details:
Connection Request Policy Name:NAP 802.1X (Wired) 2
Network Policy Name:-
Authentication Provider:Windows
Authentication Server: server.abc.local
Authentication Type:PAP
EAP Type: -
Account Session Identifier:-
Logging Results:Accounting information was written to the local log file.
Reason Code: 16
Reason: Authentication failed due to a user credentials mismatch. Either the user name provided does not map to an existing user account or the password was incorrect.

All I could find was " Authentication failed due to the reason appeared in the reason code but I am very sure that the name and the password are the same. I hope someone can help me out. 

Thanks.



Viewing all articles
Browse latest Browse all 1875

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>