VS-z Radius proxy EAP not forwarding request to radius server if username contains @domain.domain

[kristoffer_olaf]

Hi,

I have been debugging a certificate issue on Windows7 against NPS Radius back end (using controller as proxy) 

I have noticed that when the user uses username@domain.domain the EAP negotiation is dropped with Explicit EAP error and no connection is detected on the Radius server

If i remove the @domain part the connection goes trough successfully.

Is there something i am missing or is this a bug?

[tony_heung]

On vSZ console (5.1), go to Diagnostics > RADIUS.  You will find the Proxy page.  Do you see the Reject counter increases when you use user id with full domain name?

[tony_heung]

It is also worth checking the 5.1 Administrator Guide Page 297, for the Authentication Support Matrix.

[kristoffer_olaf]

no i do not. stil at 875 rejects

[kristoffer_olaf]

yeah i am using 802.1x with NPS Radius trough auth proxy and that is supported.

It works fine from win7 when i change the username sent with the client certificate.
On Win10 that do not work at all.
No requests are hitting the Radius server at all.