RADIUS, IAS, and WiFi Authentication

[Jay]

Hi All,

Here is my setup and problem. I have a D-Link Access Point
setup to Authenticate via a RADIUS server on our local
Domain Controller on our local LAN. Very simple setup on
the AP. Asks for DNS server name and IP address, Radius
server, port (1812 default) and secret. I can get the WiFi
device to hit the Radius server, and IAS logs are the
following.

(DOMAIN NAMES & MAC ADDRESSES CONCEALED)

Event Type: Warning
Event Source: IAS
Event Category: None
Event ID: 2
Date: 6/16/2004
Time: 12:00:52 PM
User: N/A
Computer: *server NETBIOS name*
Description:
User DOMAIN\administrator was denied access.
Fully-Qualified-User-Name = domain.com/Users/Administrator
NAS-IP-Address = 10.100.50.1
NAS-Identifier = D-link Corp. Access Point
Called-Station-Identifier = 00-00-00-00-00-00
Calling-Station-Identifier = 00-00-00-00-00-00
Client-Friendly-Name = 10.100.50.1
Client-IP-Address = 10.100.50.1
NAS-Port-Type = 19
NAS-Port = 1
Policy-Name = Allow dial-in access if dial-in permission
is enabled
Authentication-Type = EAP
EAP-Type = <undetermined>
Reason-Code = 66
Reason = The user attempted to use an unauthorized
authentication method.


Have tried different Authentication setups but nothing
works, always the same message. I cannot get the AP to
authenticate on the RADIUS server. I have RADIUS
Authentication and Accounting turned on under Routing and
Remote Access, and have configured Access Policies under
IAS Server. Any help would be greatly appreciated. Thanks
in advance.

IT GUY

 

[Manjari Bonam [MSFT]]

Looks like the RAS Server does not have the authentication type set which
the client is requesting.

Goto the IAS snap-in
Goto Remote access policies
Open the policies- Edit Profile - Authentication

Here make sure you support all the authentication types which you want your
clients to come in with.

Other wise you cannot get in and authenticate.

 

[Jay]

Actually, that's exactly what I did and I still cannot get
it to work. Can I only have one authentication method
check or multiple? I have tried many ways to get this to
work by checking different authentication methods only
related to 802.1x and nothing works.

Jay