locked
NPS Proxy forward request to IAS - 802.x Wired RRS feed

  • Question

  • I have a problem with th NPS proxy(Windows server 2008 Enterprise) and the IAS(Windows server 2003 Standard). The problem is that the proxy forward the request to the IAS and IAS reply grant access but the PROXY doesnt receive the reply, so the PROXY forward the request again. 
    Proxy Server
    Network Policy Server discarded the request for a user.
    Contact the Network Policy Server administrator for more information.
    User:
    Security ID: NULL SID
    Account Name: host/test.comodo.net
    Account Domain: -
    Fully Qualified Account Name: -
    Client Machine:
    Security ID: NULL SID
    Account Name: -
    Fully Qualified Account Name: -
    OS-Version: -
    Called Station Identifier: xx-xx-xx-xx-xx-xx
    Calling Station Identifier: xx-xx-xx-xx-xx-xx
    NAS:
    NAS IPv4 Address: x.x.x.170
    NAS IPv6 Address: -
    NAS Identifier: -
    NAS Port-Type: Ethernet 
    NAS Port: 50001
    RADIUS Client:
    Client Friendly Name: SWTYC170
    Client IP Address: x.x.x.170
    Authentication Details:
    Proxy Policy Name: Use Windows authentication for all users
    Network Policy Name: -
    Authentication Provider: RADIUS Proxy 
    Authentication Server: x.x.x.195
    Authentication Type: -
    EAP Type: -
    Account Session Identifier: -
    Reason Code: 118
    Reason: The remote RADIUS (Remote Authentication Dial-In User Service) server returned an unreadable response. 
    IAS server
    User host/test.comodo.net was granted access.
     Fully-Qualified-User-Name = domain/ou/equipos/test.comodo.net
     NAS-IP-Address = x.x.x.170
     NAS-Identifier = <not present> 
     Client-Friendly-Name = server
     Client-IP-Address = x.x.x.196
     Calling-Station-Identifier = xx-xx-xx-xx-xx-xx
     NAS-Port-Type = Ethernet
     NAS-Port = 50001
     Proxy-Policy-Name = Use Windows authentication for all users
     Authentication-Provider = Windows 
     Authentication-Server = <undetermined> 
     Policy-Name = Prueba 802.1X
     Authentication-Type = PEAP
     EAP-Type = Secured password (EAP-MSCHAP v2)
    For more information, see Help and Support Center at 
    I think maybe could be a problem with the syncronous timer or wait time between server's.
    Wednesday, September 21, 2011 3:49 PM