cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

2024
Views
0
Helpful
2
Replies
Beginner

12851 Received unexptected EAP NAK, HP Laserjet

We have a corporate Wireless network With 802.1x authentication. The AAA-server is an ACS1121 running 5-6-0-22-7 (latest patch for ver 5.6). I am trying to configure a HP Laserjet MFP M477 to get authenticated using AD username and password. I have done this before and it did work. However, I'm unable to get this printer authenticated. The error Message from the ACS is "12851 Received unexpected EAP NAK message. Client rejected the conversation". There's not many options to configure on the printer, I am enclosing the config-screen.

More info about the error Message; "ACS expects for regular conversation continuation but client sent outer EAP method NAK message. It means that client rejected conversation for some reason that is unknown to ACS. Known issue: CSSC 5.1.1.10 sends outer EAP method NAK during EAP-FAST/EAP-GTC conversation to reject the conversation according to input of the user".

 

If I enable only EAP-TLS instead of PEAP the ACS reports The supplicant of the client sent an EAP-Response/NAK packet rejecting the previously-proposed EAP-based protocol, and requesting to use EAP-TLS instead.  However, EAP-TLS is not allowed in the Allowed Protocols section of the relevant Access Service.". However, I checked the access service, and TLS is enabled (see ACS.png).

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
dal Participant
Participant

Re: 12851 Received unexptected EAP NAK, HP Laserjet

Hi.

I don't know if you found a solution for this, but I think you need to install a root ca when using PEAP. Same as with EAP-TLS

Username and password only is not enough.

If you want to use username / password only, you need to choose MD5 as authentication protocol.

View solution in original post

2 REPLIES 2
Beginner

Re: 12851 Received unexptected EAP NAK, HP Laserjet

Does anyone have a solution?

Highlighted
dal Participant
Participant

Re: 12851 Received unexptected EAP NAK, HP Laserjet

Hi.

I don't know if you found a solution for this, but I think you need to install a root ca when using PEAP. Same as with EAP-TLS

Username and password only is not enough.

If you want to use username / password only, you need to choose MD5 as authentication protocol.

View solution in original post