ESW520 - 802.1X - Switch don't send anything to Radius Server

[Boucherle]

I'd like to use 802.1x authentication for ports.

My Radius server is a 2012 r2 Server (NPS). The customer is a Windows Seven.

The switch is a ESW520.

I don't have any console cable to use serial port. I'have to use Web graphical solution.

I've made:

. switch reset.

. switch stay in dynamic IP.

. Setting 802.1x:

  - Security > 802.1X > Properties > Port Based Authentication State: "Enable" > Authentication Method: "Radius" > Apply.

 - Security > 802.1X > Port Authentication > Select Win 10 customer port > Edit > "Admin Port Control": "Auto" > Apply > Close.

 - Security > 802.1X > Authentication >  Select Win 10 customer port > Host Authentication: Multiple Host > Apply > Close.

. Link to Radius Server:

  - Security > Authentication > RADIUS > "RADIUS Accounting": both > "Default Key String": "secret" (as in NPS) > "Source IP Address": switch IP "172.16.0.1"

  - Security > Authentication > RADIUS > Add > "Host IP Address": Radius 2012 Server NPS IP "172.16.0.2" > Apply > Close.

I launch authentication for the Win Seven customer:

 - Security > 802.1X > Port Authentication > Select Win 10 customer port > Edit > Reautenticate Now > Apply > Close.

With Wireshirk, I don't see anything on my 2012 Server. The switch don't send anything to my Radius Server.

2012 Server ping without problems the switch.

If you have an idea.

Thanks for all.

Best regards.

[Boucherle]

Well. I've found I've to configure Win 7 customer: 802.1x wired authentication ("authentication" for the "network card").

I see now an "EAPOL Start"version 1 frame from Seven to switch. But switch don't launch an "EAPOL Request" to the Win 7.

2012 Server don't receive anything.

[Boucherle]

With Win 7 Pro: "EAPOL Start" without "EAPOL Request".

With Win 10 Pro, same problem.

The two customer (Win 7 and Win 10) are virtualized with Hyper-V. Is the problem coming from that ?

On switch ESW520, I've modified: Security > Traffic Control > Port Security > Port customer (Win 7 or Win 10) > Max entries: 10.

[Boucherle]

I make new tests with a real customer Windows Seven (not an Hyper-V machine): I get a reply from the switch, and I see the host in Security > 802.1X > Authenticated Hosts.

All my problems are due to customers are Hyper-V virtual machine...