We have a corporate Wireless network With 802.1x authentication. The AAA-server is an ACS1121 running 5-6-0-22-7 (latest patch for ver 5.6). I am trying to configure a HP Laserjet MFP M477 to get authenticated using AD username and password. I have done this before and it did work. However, I'm unable to get this printer authenticated. The error Message from the ACS is "12851 Received unexpected EAP NAK message. Client rejected the conversation". There's not many options to configure on the printer, I am enclosing the config-screen.
More info about the error Message; "ACS expects for regular conversation continuation but client sent outer EAP method NAK message. It means that client rejected conversation for some reason that is unknown to ACS. Known issue: CSSC 5.1.1.10 sends outer EAP method NAK during EAP-FAST/EAP-GTC conversation to reject the conversation according to input of the user".
If I enable only EAP-TLS instead of PEAP the ACS reports The supplicant of the client sent an EAP-Response/NAK packet rejecting the previously-proposed EAP-based protocol, and requesting to use EAP-TLS instead. However, EAP-TLS is not allowed in the Allowed Protocols section of the relevant Access Service.". However, I checked the access service, and TLS is enabled (see ACS.png).
