802.1X Authentication Wifi

[EmilJanowiak]

Hi Guys Here at our workplace we are experimenting with 802.1x WIFI I have set up a NPS and our Unifi point to allow it .

But when we testing it allows phones to be connected if credentials are correct but when a Windows Laptop tried on 7 and 10 are just saying that it cant connect to it .

Event Logs specify that password and username is mismatched but as I mentioned it before if is use same credentials on my phone it works fine.

Do you have any suggestions ?

[emdrum]

Hi Emil,

 

It sounds like you have got the laptop configured to use the local windows authentication for the 802.1x. It may then be trying to use the local user to authenticate to the domain.

 

Manage Wireless Networks - Properties

Security Tab

802.1x

Advanced Settings

Specify the authentication mode - depending on the way you are set up

 

Remember the laptop may need network access to authenticate, and may use different authentication for the laptop than the NPS. You may have to set up a machine authentication VLAN which then switches to the user VLAN when the user logs in.

 

Hope that helps.

[EmilJanowiak]

Emdrum thank you for your reply .

As much i understand what you mean event logs specify that im trying to connect to domain . But what really is confusing me is that if i try to connect my android phone to that wifi and put my domain login and password its works with out any problem it only happens on windows machines i really dont know how to bite the issue

[Abe]

I think Android and iOS devices are happy to connect without trusting the certificate supplied by your NPS - although iOS will ask you if you want to trust the supplied certificate. For Windows you will need to manually install your Trusted Root Authority, assuming you are using your own AD-CS, which could be done from a file exported to a memory stick.

[3s-gtech]

Worth looking at this issue: https://welsheduit.wordpress.com/2014/10/15/windows-server-nps-and-radius-windows-7-clients-couldnt-connect/