802.1X Virtual Smart Zone using NPS with Error Code:66

  • 1
  • Question
  • Updated 4 weeks ago
We have our 802.1x RADIUS Server configured to use an NPS Server.

When we test the RADIUS Server from the Smart Zone Controller or via an 802.11x enabled SSID it fails.

In the logs on the NPS Server we see

Error Code: 66 
Reason Code: The user attempted to use an authentication method that is not enabled on the matching network policy


Photo of Stephen Johannsson

Stephen Johannsson

  • 6 Posts
  • 1 Reply Like

Posted 1 month ago

  • 1
Photo of Syamantak Omer

Syamantak Omer, Official Rep

  • 551 Posts
  • 175 Reply Likes
Hi Stephen,

Could you also attach the screenshots from the NPS policy settings.

Seems auth methods are not correctly configured in the NPS policy.

Also refer below article which explains NPS configuration settings for 802.1X authentication.

https://support.ruckuswireless.com/articles/000002109

Note: Document talks about ZoneDirector but NPS side configurations are mostly same.

Regards,
Syamantak Omer
(Edited)
Photo of Stephen Johannsson

Stephen Johannsson

  • 6 Posts
  • 1 Reply Like
Unable to access that document you shared. 
Photo of Syamantak Omer

Syamantak Omer, Official Rep

  • 551 Posts
  • 175 Reply Likes
Hi Stephen,

I have checked and I am able to open above link.

It is a premium content, so you may not be able to see it, if you don't have premium support purchased.

Regards,
Syamantak Omer
Photo of Stephen Johannsson

Stephen Johannsson

  • 6 Posts
  • 1 Reply Like
Thanks for the reply. I have followed the setup gudie for NPS 802.1x for VLAN assignment.

NPS Settings are:










*Same error seen whichever way we ave the EAP Types





*here we wish to return the VLAN 40 tag to SmartZone



Photo of Syamantak Omer

Syamantak Omer, Official Rep

  • 500 Posts
  • 162 Reply Likes
Hi Stephen,

Could you select EAP Types and make sure correct certificate is mapped?



Also enable "Wireless Other" in NAS Port type.



Post making above changes if you are still facing issues, please open a support case and they will assist you.

Regards,
Syamantak Omer
Photo of Stephen Johannsson

Stephen Johannsson

  • 6 Posts
  • 1 Reply Like
PEAP Cert Details:




Changes applied:




Same Issue on NPS:


Photo of Syamantak Omer

Syamantak Omer, Official Rep

  • 500 Posts
  • 162 Reply Likes
Please open a support case from the below link and support team will help you to check the issue further.

https://support.ruckuswireless.com/cases/new

Regards,
Syamantak Omer
Photo of Stephen Johannsson

Stephen Johannsson

  • 6 Posts
  • 1 Reply Like
Error was fixed by changing the Condition on the Connection Request Policy to Day and Time Restrictions (allow all)
Photo of Syamantak Omer

Syamantak Omer, Official Rep

  • 500 Posts
  • 162 Reply Likes
Good to know that issue has been fixed!

Regards,
Syamantak Omer