We've just bought a new Cisco switch for our office: CBS220-48T-4G. Full disclaimer - aside from setting up a VLAN once in the past, I'm pretty new to switching in general, let alone Cisco switches specifically.
I know that this switch offers 802.1x which I'm interested in implementing at our office. But, before that, I wanted to make sure that I have the basics right and as such wanted to set up a administrative access to the switch's HTTP/S portal. Additional disclosure: our NPS already works fine for our WiFi (via Sophos UTM) and for VPN (SSTP) and is able to authenticate clients correctly.
After setting up the basic settings (new RADIUS client on the NPS, new RADIUS server on the switch) and enabling the usage of RADIUS authentication for HTTP/S I've found I was still not able to log in. Investigating the logs I've found that while the switch is able to communicate with the NPS service correctly, I'm getting a "Unknown user name or bad password" error:
Reason Code: 16
Reason: Authentication failed due to a user credentials mismatch. Either the user name provided does not map to an existing user account or the password was incorrect.
I 100% certain I've been entering the correct credentials. I've tried a few (both my regular user as well as some administrative users we have in our AD) - all failed with the same error. I'm also a bit concerned that the authentication type is PAP, but I'm not sure if there's anything I can do about that.
If I change the newly created connection request policy for the Cisco switch to "Accept users without validating credentials" I can log in to the switch administrative portal using random credentials (obviously not something valid for any kind of production use, but good for a quick test).
Any idea what's wrong and why the credentials fail?
