cancel
Showing results for 
Search instead for 
Did you mean: 

802.1X Virtual Smart Zone using NPS with Error Code:66

stephen_johanns
New Contributor II
We have our 802.1x RADIUS Server configured to use an NPS Server.

When we test the RADIUS Server from the Smart Zone Controller or via an 802.11x enabled SSID it fails.

In the logs on the NPS Server we see

Error Code: 66 
Reason Code: The user attempted to use an authentication method that is not enabled on the matching network policy


Image_ images_messages_5f91c403135b77e247919cac_5673b2e8c6b65077c302b0ff6327f88e_RackMultipart20200924571447ios-a5e447fd-a1a3-4e56-b568-271b1055fa6a-1589087405.png1600946923
9 REPLIES 9

syamantakomer
Moderator
Moderator
Hi Stephen,

Could you also attach the screenshots from the NPS policy settings.

Seems auth methods are not correctly configured in the NPS policy.

Also refer below article which explains NPS configuration settings for 802.1X authentication.

https://support.ruckuswireless.com/articles/000002109

Note: Document talks about ZoneDirector but NPS side configurations are mostly same.

Regards,
Syamantak Omer
Regards,
Syamantak Omer
Official Rep | Staff TSE | CWNA | CCNA | RASZA | RICXI

Unable to access that document you shared. 

Hi Stephen,

I have checked and I am able to open above link.

It is a premium content, so you may not be able to see it, if you don't have premium support purchased.

Regards,
Syamantak Omer
Regards,
Syamantak Omer
Official Rep | Staff TSE | CWNA | CCNA | RASZA | RICXI

stephen_johanns
New Contributor II
Thanks for the reply. I have followed the setup gudie for NPS 802.1x for VLAN assignment.

NPS Settings are:

Image_ images_messages_5f91c456135b77e247a2f718_122cdac7ebe037c78aca2a56f06c728f_RackMultipart20200924112396sno-c94bd916-70f8-4b71-a39a-a41586a20e36-688839834.png1600967390



Image_ images_messages_5f91c456135b77e247a2f718_f06841fba3798929fa1de61f9d407d7b_RackMultipart2020092447980a8fs-e87145d4-4197-4247-8ac4-a7de68defdf1-575126365.png1600967424


Image_ images_messages_5f91c456135b77e247a2f718_02bf654eb95519a51acc616b9822c8a9_RackMultipart2020092421229qxi3-6062a3fb-61d9-44fd-a5e2-a4172e8641af-68584411.png1600967463

*Same error seen whichever way we ave the EAP Types

Image_ images_messages_5f91c456135b77e247a2f718_d15cdef7aba77367a68c3fed5869e2b9_RackMultipart202009241304321vt-6fa50685-0341-467f-983f-74c66d59768a-171936.png1600967531

Image_ images_messages_5f91c456135b77e247a2f718_72c6241c2472124543ea434ede7a928e_RackMultipart20200924104772c8t-87173f7c-9cde-4d9c-b7af-f10aa2469cdb-550421254.png1600967566

*here we wish to return the VLAN 40 tag to SmartZone

Image_ images_messages_5f91c456135b77e247a2f718_69ae3e58ebf33d73ba46bcdc0e0e462f_RackMultipart202009243531318ji-1e9551f3-28ea-451d-bdba-cddcbbd5dfa4-137408185.png1600967611