Failed connection Windows 7 clients with WLC2504+NPS 2012

[Stanislav Lukiyanchenko]

Hello

I have some interesting experience. I configured my wireless controller 2504 with a Windows 2012 Server as radius server for authenticating the active directory's users. So, I have one Windows 2012 R2 server configured as a Domain Controller and installed and configure NPS , and  CA server configured in another Windows 2008 R2 Server. Also I have  one clients PC's with Windows 8.1 and several Windows 7 connected to My Domain, also iPad and Android devices out  of Domain of course.

I used this sources when configuring it.

http://www.cisco.com/c/en/us/support/docs/wireless/5700-series-wireless-lan-controllers/117684-configure-WLAN-00.pdf

http://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/115988-nps-wlc-config-000.pdf

The problem is, that all Windows 7 clients do not connect to my SSID with Auth 802.1.x + PEAP , but other clients connect successfully and automatically without problems. 

I tried a lot of action, for example , from this source http://www.networkworld.com/article/2160056/security/tips-for-troubleshooting-802-1x-connections.html

But I have no success to resolve it. I ensured that W7 PC using the correct CertAutority. But,  anyway I reinstalled this Cert.

I have no idea anymore. Please help.

Some logs in attachments.  

[Sebastian Helmer]

Sorry, I didn't run through all your links and attachements, but just one question.

On the CLient profile, did you check the checkbox for the Certificate u want to use? try that.

also in the advance section did u check and choose User/Computer Authentication.

Br,
Sebastian

pls. rate if helpful

[Stanislav Lukiyanchenko]

Thank you for your reply, Sebastian

Yes, I checked my certificates, and I tried to install manually a certificate of NPS server. Also tried to uncheck the Validate server certificate option. The result was the same - no connect, only logs in controller slightly was changed.  

Also in advanced section I chosen and User Authentication and User/Computer Authentication. The same result.

I want to notice, that I configured one else radius server - the Cisco ACS 4.2. This server is not connected with Active Directory. And another ssid is fastened with this radius by EAP. The Windows 7 client connect to this ssid with the following options:

• Unchecked the Validate server certificate
• Unchecked Use Windows logon
• In Advanced Section, check and choose User Authentication, and save the local ACS username and password.

Now, I want to install a radius on Windows 2003 Server, this server connected to Domain. Let's see how this works out.

[nz.sysadmin]

Having the same issue. You ever find a solution to this?

[Kasun Bandara]

Hi guys,

Any luck on this matter??

Thanks