Windows 10: Windows NPS and Eduroam Radius Profile For Aruba/Unifi Troubleshoot

We are setting up a new WiFi network at work a school that uses an ancient aruba controller with aruba 105 APs following the principles of eduroam listed here and the radius server is windows NPS again following the docs here.

Initially I copied the existing config we have got for our current wifi to no avail. The current network still works fine but no one can remember the details and it is not in keeping with the BYOD route we are going down.

I have consistently been getting an error message of "authentication failed due to user credentials mismatch" error 16 Event 6273 which most people have suggested through various forums means that the APs shared secret does not match - I have checked this more than once it does! Additionally I have checked the obvious account user/pass out and again it is correct.

In order to try and diagnose the problem further I brought in some of my unifi gear from home and spun up a completely fresh DC/CA/NPS server in a test environment. Same error but this time I have also installed wireshark.

If I "accept users without validating credentials" in the CRP then NPS returns a access-accept response, but the client still is unable to connect to the network client reports dot1X timeout followed by operation was cancelled/server reports success - this leads me to think it is something wrong client side?

Then if I switch the CRP to authenticate on this server client reports explicit eap failure recieved followed by network is not available/Server sends an string of access-request/challenge immediately before access-reject presumably this means that it is waiting for correct verification from the client?

CRP settings are:

• 
  Conditions
  

1. 
   NAS port Type - Wireless Other or 802.11
   
   
2. 
   Username - .+@schooldomain\.org\.uk$
   

• 
  Settings
  

1. 
   Authentication Provider - Local Computer
   
   
2. 
   Manipulation attribute rules - Replace "@schooldomain\.org\.uk$" with "@schooldomain.local"
   
   
3. 
   Target - User Name
   
   
4. 
   Override Auth - Disabled
   

Network Policy settings are:

• 
  Conditions
  

1. 
   NAS Port Type - Wireless
   
   
2. 
   User Groups - SchoolDomain\Eduroam
   

• 
  Settings
  

1. 
   EAP Config - Configured PEAP with secured password EAP-MS-CHAPv2
   
   
2. 
   Ignore Dial-In Properties
   
   
3. 
   Grant Access
   
   
4. 
   Client is supplied an IP
   
   
5. 
   Tunnel Medium 802/Type VLAN/Tunnel-ID 66
   
   
6. 
   Encryption Enabled
   

So I have been battling with this for several weeks now and banging my head against a wall would be more productive...

Anyone got any pointers?

:)

 

Windows 10 can't connect to Eduroam

Hi,



Thank you for posting in Microsoft Community.

The Eduroam service uses
IEEE 802.1X as the
authentication method and a hierarchal system of

RADIUS

servers. The hierarchy consists of RADIUS servers at the participating institutions, national RADIUS servers run by the National Roaming Operators and regional top-level RADIUS servers for individual world regions.



For the best assistance with the issue, I suggest you to contact the
Eduroam support team.
Below is the link of contact.

eduroam



Let us know if this helps.

Keep us posted for further assistance, we are here to assist you.

 

Belle & Anna Radius Negotiation (NPS>PEAP)

It seems its becoming a habit for me to solve my own posts..



The actual result came from a Nokia engineer, which solved the problem completely.



http://msdn.microsoft.com/en-us/library/ee942815(v=VS.85)

• On the NPS server start regedit.exe
• goto HKLM>System>CurrentControlSet>Services>Rasman>PPP>EAP>25
• Add DREG value BypassNegotiation
• Set the value 0 to 1.
• Restart the NPS Server Service

SOLVED.

 

Windows 10 infinite restart black screen


The tutorials provided are just a list of troubleshooting steps. Use only the steps which apply to you.

Since none of the troubleshooting steps here worked, I'd suggest you do a Clean install.

John