hey dude, can you share the detailed configuration of your radius authentication part?

Maybe I can help look into it .

DeepDarkFantasy wrote

hey dude, can you share the detailed configuration of your radius authentication part?

Maybe I can help look into it .

sure thing:

 

configuration of radius server in ac500:

server adress = ip from NPS

auth-port: 1812

billing port: 1813

share key: ****

retry count: 3

timeout interval: 10sec

NAS ip: blank

authentication method: MSCHAPv2

 

NPS Radius Client:

Friendly Name: "AC500-WLC"

address: ip of ac500

shared secret: key from above

advanced: vendor "RADIUS Standard"

"Access-Request messages must contain the Message-Authenticator attribute" = disabled

 

Network Policy:

Grant access if connection matches policy

type of NAS: unspecified

condition: user group = domain user (also tried client friendly name = "AC500-WLC")

authentication method: MS-CHAPv2

RADIUS attributes: Framed Protocol = PPP and Service-Type = Framed

 

Connection Request Policy:

type of NAS: unspecified

conditions: NAS Port Type = Ethernet or Wireless - IEEE 802.11  and  NAS Identifier = TP-LINK (also tried client friendly name = "AC500-WLC" instead of NAS Identifier)

Settings left standard

 

 

got any ideas?

 

best regards

Hi  Manuel,

Thanks for your kind feedback.

For this case, since the log warns that the request packet is malformed, a better way to troubleshoot is to capture data packets from the incoming port and outcoming port of the topology, in this way, we can compare the packets to see the differences.

Here I want to know some detailed information in order to help you troubleshoot this issue:

1. What is the complete network topology like?

2. Can you share the detailed configuration part on the switch and the AC controller?(Snaps or configuration file is preferred)

3.For the NPS, can you please tell me the detailed version of it?

Thanks in advance and looking forward to your reply.