AAA NPS RADIUS 3650

[alfredit]

Hi,

I have a little problem configuring my 3650 stack to work with my Server 2012 NPS radius.

It works actually with my wifi wlc config (eap tls with certificate!) but switches are giving me hard work !!

The problem is that I can put any PC on any port without any check fron the wsitch. I also don't see anything in the NPS logs.

Do I lack somethine in there? ?

Thanks a lot for your help!

---------------------------------------------------------------------

Here is my conf :

 vesion 16.3

aaa new-model

aaa authentication dot1x default group radius
aaa authentication dot1x method_list group radius
aaa authorization network default group radius

interface GigabitEthernet1/0/1
 description ### PC User ###
 switchport access vlan 22
 switchport mode access
 switchport voice vlan 7
 access-session port-control auto
 dot1x pae authenticator
 spanning-tree portfast
 spanning-tree bpduguard enable
!

radius server pri
 address ipv4 192.168.22.110 auth-port 1812 acct-port 1813
 key 7 033fdskjfqdskjhfdqkj
!
!

[Seb Rupik]

Hi there,

Have you actually defined the the server group 'radius' ? If not try the following, (as a personal best practice, always make text variables uppercase):

!
aaa group server radius RADIUS-SERVERS
  server 192.168.22.110
!
aaa authentication dot1x default group RADIUS-SERVERS
aaa authentication dot1x method_list group RADIUS-SERVERS
aaa authorization network default group RADIUS-SERVERS
!

If the group is already defined. Have you tried the test aaa command?

cheers,

Seb.

[alfredit]

The radius group is the default one, I tested with a user but I do not know how to test my computer certificate.

Thanks a lot

-------------------------------------------------------------

SW-CD-17EME#test aaa group radius user1 password1 new-code
User successfully authenticated

USER ATTRIBUTES

Framed-Protocol      0   1 [PPP]
service-type         0   2 [Framed]
noescape             0   True
autocmd              0   " ppp negotiate"