{"id":4260,"date":"2019-07-15T03:07:28","date_gmt":"2019-07-15T03:07:28","guid":{"rendered":"https:\/\/pariswells.com\/blog\/?p=4260"},"modified":"2022-08-30T01:03:51","modified_gmt":"2022-08-30T01:03:51","slug":"diagnose-radius-issue-meraki-and-nps-radius-server","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/research\/diagnose-radius-issue-meraki-and-nps-radius-server","title":{"rendered":"Diagnose Radius Issue – Meraki and NPS Radius Server"},"content":{"rendered":"

Download this tool to Emulate Radius Requests\u00a0<\/a><\/p>

 <\/p>

\"\"<\/p>

Event Viewer<\/strong><\/p>

Custom Views<\/strong>\u00a0->\u00a0Server Roles<\/strong>\u00a0->\u00a0Network Policy and Access Services<\/strong><\/p>

Windows Logs<\/strong>\u00a0->\u00a0Applications and Service Logs<\/strong>\u00a0->\u00a0Microsoft<\/strong>\u00a0->\u00a0AzureMfa<\/strong>\u00a0->\u00a0AuthZ<\/strong><\/p>

Windows Logs<\/strong>\u00a0->\u00a0Applications and Service Logs<\/strong>\u00a0->\u00a0Microsoft<\/strong>\u00a0->\u00a0AzureMfa<\/strong>\u00a0->\u00a0AuthN<\/strong><\/p>

 <\/p>

Some errors decoded<\/h2>

Error:\u00a0\u201cAn NPS extension dynamic link library (DLL) that is installed on the NPS server rejected the connection request.\u201d<\/strong><\/h4>

Resolution:-<\/strong>\u00a0Reinstall Azure MFA extension, potentially caused by incorrect TenantID entered during installation<\/p>

Error: \u201cAn Access-Request message was received from RADIUS client 10.0.1.4 with a Message-Authenticator attribute that is not valid.\u201d<\/strong><\/h4>

Resolution:-\u00a0<\/strong>Confirm Azure Virtual Network Gateway has the same RADIUS Password used as the NPS Radius Clients<\/p>

Error: \u201cNPS Extension for Azure MFA: NPS Extension for Azure MFA only performs Secondary Auth for Radius requests in AccessAccept State. Request received for User testuser@tamops.test with response state AccessReject, ignoring request.\u201d<\/strong><\/h4>

Resolution:-<\/strong>\u00a0Ensure user permissions on domain Active Directory are correct, review Dial-> Network Access Permission within the user properties of the required Active Directory<\/p>

\"\"<\/p>

 <\/p>

Log Viewer<\/strong><\/p>

 <\/p>

\"\"<\/p>

 <\/p>

Tools<\/strong><\/p>

http:\/\/azuredummies.com\/2018\/09\/11\/azure-mfa-nps-extension-health-check-script-v1\/<\/a><\/p>","protected":false},"excerpt":{"rendered":"

Download this tool to Emulate Radius Requests\u00a0 Event ViewerCustom Views\u00a0->\u00a0Server Roles\u00a0->\u00a0Network Policy and Access ServicesWindows Logs\u00a0->\u00a0Applications and Service Logs\u00a0->\u00a0Microsoft\u00a0->\u00a0AzureMfa\u00a0->\u00a0AuthZWindows Logs\u00a0->\u00a0Applications and Service Logs\u00a0->\u00a0Microsoft\u00a0->\u00a0AzureMfa\u00a0->\u00a0AuthN Some errors decodedError:\u00a0\u201cAn NPS extension dynamic […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-4260","post","type-post","status-publish","format-standard","hentry","category-research"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t