Configuring a RADIUS server getting this event error

[Kollektiv26]

Hi Everyone

 

We're running WinServer 2016 and I'm attempting to set up a radius server so users can use AD details to login to our Wireless (from phones/laptops etc)

 

Whenever I attempt to connect to the SSID and enter my AD details it fails the connection and event viewer drops this event

"A RADIUS message with the Code field set to 12, which is not valid, was received on port 1812 from RADIUS client Aruba. Valid values of the RADIUS Code field are documented in RFC 2865."

 

My NPS server and DC are on the same machine and we're using HP Aruba Central to manage our network

 

I've been given various registry tweaks to try but sadly none of them have resolved this issue.

 

Any help would be greatly appreciated

 

Thanks in Advance

[OLdMan99]

I think from past experience it down to the firewall on the nps server.

[Kollektiv26]

Interesting I'm getting "Destination unreachable (Host unreachable)" in Wireshark when watching radius packets

 

Do I need to forward port 1812?

[OLdMan99]

No . disable the firewall temporarly . if it works then the firewall the issue.

Configure Firewalls for RADIUS Traffic | Microsoft Learn

[Kollektiv26]

Done all my firewall biz seems to still be no luck. Googling seems to yield that it's a Windows issue with an update to win server last year

 

Lots of places keep saying to make a new key in HKLM\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL

 

Called "CertificateMappingMethods" and setting it to 0x01f which I assume just means 1

 

Sadly this hasn't fixed the issue

[OLdMan99]

that 31 in decimal Edited October 6, 2023 by OLdMan99

[OLdMan99]

We only had an issue with server2019 bug

RADIUS Authentication using NPS on Server 2019 not working Bug | TopQore Blog

[Davit2005]

Apologies if you have already seen this and ruled it out.

 

https://community.arubanetworks.com/discussion/radius-issues

 

Also I don't know about central but with some wireless each APs IP address will need to be added as clients, off my head Unifi is defo one that needs this. Any wireless that the APs traffic comes direct from the AP and not via a controller will too.