We have a customer who wants to use NEAT 802.1x Authentication for meetin rooms. The prefered radius server of the customer would be Microsoft NPS. Since two days I'm trying to realize the solution with NEAT and Win2008 R2 without success.
My question to the community. Has anybody implemented NEAT with Microsoft radius server? If yes, what kind of authentication method have you used in the radius server of microsoft. EAP-MSCHAPv2 or MD5.
Thanks for any feedback / experience of if this scenario is possible or not.
For our problem we haven't found a solution. Have sold now ACS Server to the customer. It's more expensive but the reporting functioniality is very cool, about 10x better then the logs in Windows. Also if you use Cisco NW devices you have everything from the same supplier and if you need support you probably found quicker a solution than with a mix environment.
For the above problem we probably could open a case. But how big is the chance that Cisco says it's the error from Microsoft and vice versa.
But maybe you are lucky and somebody has found in the meantime a solution.
I am trying to configure the same. A NEAT supplicant is configured on a Catalyst 2960-CG switch, authenticator on Cat 2960 and Cat 3750G switches (tested both). RADIUS server is MS Windows 2008 R2 NPS.
The supplicant is configured for MSCHAPv2 authencation method. The NPS is configured for "Microsoft: Secured password (EAP-MSCHAP v2)" (please bear in mind that "Microsoft: Protected EAP (PEAP)" with inner "Secured password (EAP-MSCHAP v2)" is something else and causes the error message reported by jamesw811).
I am getting the following error message in the NPS log:
------ NPS log ------------
Network Policy Server discarded the request for a user.
Proxy Policy Name:Wired Connections
Network Policy Name:Wired 802.1x NEAT Switches TEST
Account Session Identifier:-
Reason:An internal error occurred. Check the system event log for additional information.
System event log contains no additional information. Anyone experiencing the same problem?