Radius, EAP, Windows 10: Can't Connect To This Network

[berniebbow1]

Standalone AIR-AP1252AG-E-K9, 12.4(25d)JA1. FreeRadius server software is configured for EAP-TTLS.

Windows 10 client fails connecting to network (error message Can't Connect To This Network). No further errors in EventLog.

FreeRadius's log claims that the access was granted. So the AP is to blame.

dot11 ssid staff
   vlan 11
   authentication open eap eap_methods
   authentication network-eap eap_methods
   authentication key-management wpa optional
   accounting acct_methods
   guest-mode

I've been through many radius examples and all of them mention eap_methods but without any further explanation (what is the purpose?).

One example defined dot1x eap profile eap_profile. It's possible to define EAP profile (by adding methods like MD5, mschap). Is it required or recommended?

What are eap_methods and where are they defined? What is their purpose?

What are acct_methods and where are they defined? What is their purpose?

[Rasika Nayanajith · Accepted solution]

I suspect this is due to WPA (use TKIP as encryption method). See below post as well

https://answers.microsoft.com/en-us/windows/forum/windows_10-networking/there-is-clearly-a-problem-with-the-win10/a05200dd-09c2-42c3-88bf-f073db9cce15

see if you can get it working with a  WPA2/AES, a sample config should look like below

A1142-1(config)#dot11 ssid TEST
A1142-1(config-ssid)# authentication open eap EAP_MTD
A1142-1(config-ssid)# authentication network-eap EAP_MTD
A1142-1(config-ssid)# authentication key-management wpa version 2
!
A1142-1(config)#interface Dot11Radio1
A1142-1(config-if)# encryption vlan 143 mode ciphers aes-ccm

See this post for detail

https://mrncciew.com/2013/11/14/autonomous-ap-with-external-radius/

HTH

Rasika

*** Pls rate all useful responses ***

[berniebbow1]

see if you can get it working with a  WPA2/AES

That was it. Thank you.

[Rasika Nayanajith]

Good to hear.

Glad to see your issue get resolved.

Rasika