Here are items to check when having problems with 802.1X clients, wired or wireless with WPA/WPA2-Enterprise encryption:
- Client Settings: First double-check all client settings in Windows. Verify the EAP-PEAP or EAP-TLS (Smart Card or Certificate) settings. Plus make sure the RADIUS server’s CA certificate is installed and selected. In Windows 7, click the Advanced settings button on the Security tab of the wireless network properties and verify the settings.
- RADIUS Server: Check the authentication server for any issues, including connections to the user and any other database. Check the server logs or debugging details for any clues.
- Access Point or Switch: If there are issues with all clients connecting through a particular AP, verify its settings. Verify the IP address is set to a static address and it corresponds with the correct Shared Secret setup on the RADIUS server.
- General Network Issues: The underlying problem can be a general networking issue, such as an 802.11b or g client that’s not compatible with an 802.11n AP even though the standards are supposed to be interoperable. Some wireless adapters might also not support WPA or WPA2. Try updating the driver for the wireless adapter and install Windows updates.
- User Settings and Attributes on RADIUS Server: Verify any settings or custom attributes for the user on the RADIUS isn’t causing problems.
Perform Tracing and Review Client Logs: You can use the netsh ras commands in Windows XP or netsh wlan commands in Windows Vista and later to help troubleshoot the issue.
