We are doing some PEAP test using Microsoft IAS as Radius. We ran into some intermittent authentication issues. The error message on the AP is just "station x.x.x authentication failed," and there are two different types of error messages on the IAS server:
The first one--notice the EAP-type is undermined instead ms-chap2 as we configured on the client, and we are using the correct username and password:
User abc\def was denied access.
...
NAS-Port-Type = Wireless - IEEE 802.11
NAS-Port = 665
Proxy-Policy-Name = Use Windows authentication for all users
Authentication-Provider = Windows
Authentication-Server = <undetermined>
Policy-Name = Connections to other access servers
Authentication-Type = PEAP
EAP-Type = <undetermined>
Reason-Code = 16
Reason = Authentication was not successful because an unknown user name or incorrect password was used.
The second type of error message says authentication request was disgarded, because it contains a RADIUS message that is not appropriate for the secure transaction.
It happens intermittently. Has anyone seen this before? I would appreciate it if you can give me any lead on this?
Connie
