I have set up the IAS following many topics, some vary slightly but most are the same. The issue I have is my SG200-08 will not allow me access using radius. Within the Windows Event Viewer I can see the following.
User deano was granted access.
Fully-Qualified-User-Name = HPMEDIASERVER\deano
NAS-IP-Address = <not present>
NAS-Identifier = A0-CF-5B-E4-72-5F
Client-Friendly-Name = Switch 1
Client-IP-Address = 192.168.0.36
Calling-Station-Identifier = <not present>
NAS-Port-Type = <not present>
NAS-Port = <not present>
Proxy-Policy-Name = Use Windows authentication for all users
Authentication-Provider = Windows
Authentication-Server = <undetermined>
Policy-Name = ciscoauth
Authentication-Type = PAP
EAP-Type = <undetermined>
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
The above tells me that I have been authorized and I see no failure or issue. Now on the log on page for the switch it tells me..
Invalid Username or Password.
Please try again.
I unplug my network to it and access the security screen as I have it set to allow radius/local. Everything is set up, I can't figure out what is going on with this! does anyone have anything they can share as to why this is happening?
On a footnote, I also use Radius for my wireless devices, of which works fine... well until I removed everything in the remote access policy.
please help, this is driving me nuts... lol
EAP is for client access, are you trying to setup 802.1x for restricting clients from accessing the switch?
The switch can be a EAP authenticator, but not an EAP peer.
Please look over the following document.
Cisco Small Business Support Center
CCNA, CCNA - Security
One thing to remember, MS-CHAP is not a very good security system to employ, I have not played with others as of yet, but it works.