Connect to 802.1X authenticated network

Hi,
I am trying to connect to an 802.1x ethernet network.
When under OS X 10.8, everything worked. I was provided a .mobileconfig file, which I edited (name and password) and ran, like described here http://support.apple.com/kb/PH13933 .
After upgrade to 10.9, I cannot connect, with an "Identity authentication failed - the identity of the authentication server could not be estabilished" error message. I tried a lot and I made sure the config file is correct. It's just that what worked under 10.8, now does not. What changed?
https://discussions.apple.com/thread/5474989
Thanx!

Similar Messages

Can't connect to 802.1x wireless network after upgrading

I have a year-old iPod Touch that I recently upgraded to iOS 6. I have no problems connecting to my home network, but since upgrading, I haven't been able to connect to the 802.1x wireless network at my job. When I try to connect, I get a spinning circle, but no actual connection. If I do nothing, it never times out, just keeps spinning.
I've tried resetting the network settings. I am able to login and accept the certificate, but I never get an IP address. I have access to the logs, so I checked and I'm authenticating successfully. I had no problems whatsoever prior to upgrading to 6.01, and I have no trouble accessing the network with other devices, including my MacBook Pro and MacBook Air.

If you restored to factory settings/new iPod and still have the problem that indicates a hardware problem.
Make an appointment at the Genius Bar of an Apple store..
Apple Retail Store - Genius Bar

Clients cannot connect: "Reason:802.1x Authentication failed 3 times. Reas"

As of 1:30 yesterday, no clients can authenticate to my LWAPP Access points. I'm getting this message in the trap logs on my 4404:
Client Excluded: MACAddress:00:90:4b:86:23:94 Base Radio MAC :00:17:df:7f:c8:60 Slot: 0 Reason:802.1x Authentication failed 3 times. ReasonCode: 3
And my (MS IAS) RADIUS server has an entry:
Authentication-Type = EAP
EAP-Type = <undetermined>
Reason-Code = 66
Reason = The user attempted to use an authentication method that is not enabled on the matching remote access policy.
The previous successful entries all refer to PEAP. We restored our WCS server from tape yesterday, but why would that affect the authentication on the 4404? Does anyone have any idea what's going wrong?

There is a command line syntax which will also allow you to export and import an IAS config to other IAS servers. Then you will be sure they are identical...
http://support.microsoft.com/kb/883619

Can't connect to 802.1x wifi

Did anybody succeed in connecting to a 802.1x authenticated wi-fi network?
I've got a 2G iphone with 2.1 firmware.
My iphone asks me whether i want to join an "enterprise wi-fi network", I tap OK, then it asks me for the username and password (which I'm pretty sure I enter correctly), then it shows me a certificate.
The certificate says "not verified", so I tap "accept".
From then on the iphone just sits there trying to join the network, nothing happens any more.
Any ideas?
Thanks a lot in advance.
Best regards,
Gabriel.
Message was edited by: GabrielZ

Not sure what the problem is for you, but I have can connect to 802.1X-authenticated networks on my iPhone 3G and on my iPod Touch (have been able to since 2.0, still fine in 2.1).

802.1x authentication fails

Setup: two 5500 (v6.0.188.0, mix of 1131 and 1141 AP`s
Laptops running fine for random number of weeks suddenly can´t connect to the wireless network. The output from Client troubleshoot shows:
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Controller association request message received.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Association request received from a client has an invalid RSN IE.(One reason could be mismatch in WPA2 algorithm).
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received reassociation request from client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
The wlan to which client is connecting requires 802 1x authentication.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Client moved to associated state successfully.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received EAP Response from the client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received EAPOL start message from client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received EAP Response from the client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
EAP response from client to AP received.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
EAP response from client to AP received.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Radius packet received. Access-Challenge received from RADIUS server 10.1.1.81, receiveId = 10
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received Access-Challenge from the RADIUS server for the client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Sending EAP request to client from radius server.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
EAP response from client to AP received.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Radius packet received. Access-Challenge received from RADIUS server 10.1.1.81, receiveId = 10
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received Access-Challenge from the RADIUS server for the client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Sending EAP request to client from radius server.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
EAP response from client to AP received.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Radius packet received. Access-Challenge received from RADIUS server 10.1.1.81, receiveId = 10
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received Access-Challenge from the RADIUS server for the client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Sending EAP request to client from radius server.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
EAP response from client to AP received.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Radius packet received. Access-Challenge received from RADIUS server 10.1.1.81, receiveId = 10
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received Access-Challenge from the RADIUS server for the client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Sending EAP request to client from radius server.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
EAP response from client to AP received.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Radius packet received. Access-Challenge received from RADIUS server 10.1.1.81, receiveId = 10
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received Access-Challenge from the RADIUS server for the client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Sending EAP request to client from radius server.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
EAP response from client to AP received.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Radius packet received. Access-Challenge received from RADIUS server 10.1.1.81, receiveId = 10
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received Access-Challenge from the RADIUS server for the client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Sending EAP request to client from radius server.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
EAP response from client to AP received.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Radius packet received. Access-Challenge received from RADIUS server 10.1.1.81, receiveId = 10
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received Access-Challenge from the RADIUS server for the client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Sending EAP request to client from radius server.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
EAP response from client to AP received.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Radius packet received. Access-Challenge received from RADIUS server 10.1.1.81, receiveId = 10
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received Access-Challenge from the RADIUS server for the client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Sending EAP request to client from radius server.
05/07/2010 07:03:44 CEST
ERROR
10.1.1.101
Retransmitting EAP-ID request to client,retransmission timer expired.
05/07/2010 07:04:14 CEST
ERROR
10.1.1.101
Retransmitting EAP-ID request to client,retransmission timer expired.
05/07/2010 07:04:44 CEST
ERROR
10.1.1.101
Authentication failed for client as EAP ID request from AP reached maxmium retransmissions.
05/07/2010 07:04:44 CEST
ERROR
10.1.1.101
De-authentication sent to client. slot 0 (claller 1x_ptsm.c:467)
05/07/2010 07:04:44 CEST
ERROR
10.1.1.101
05/07/2010 07:04:44 CEST
ERROR
10.1.1.101
EAPOL-key is invalid, scheduling client for deletion.

We are using PEAP-MS-CHAP v2 . The IAS certificate is valid to 2014. We have about 300 laptops, but now and then some of them fails to authenticate. Yesterday I noticed that if I had one of the failing computers connected with wire, after some minutes it suddenly authenticated wireless!

Can't connect to school's wireless network

I'm living in residence at Laurier University, and I can't get my touch to connect to the internet. With our computers, we had to connect to our laurierdownload network first, download a program and then change some settings in order to connect to the laurierwireless network.
I can connect to laurierdownload, but I don't know how to download the program and change the settings. Sometimes, laurierwireless will show up, but when I try to connect to that, and type in my username and password- the same that I always use for the network on my laptop- it says it's wrong.
Does anyone have any idea how I can connect to the network?
PS: Here's the info on how to connect to the network. This is all the stuff I can't manage to figure out on my ipod:
http://www.wlu.ca/page.php?grp_id=47&p=9474
Thanks!
~Jessica

Laurierwireless is an 802.1X authenticated network and there have been problems reported here with accessing 802.1X networks.
IPhone and iPod touches with software 2.0 and later are supposed to support 802.1X. However getting it to work may require help from your schools IT department. See http://www.apple.com/iphone/enterprise/integration.html
Good luck.

802.1x Authentication for University Network Fails After 10.5.5 Update

Hi everyone, I hope that someone might be able to help me with my problem. I used to connect to the internet through my university's network at my dorm using the ethernet connection. Even before when I was using 10.5.4 I had to do the 802.1x authentication manually after every boot.
Now that I updated to 10.5.5 everytime I try to connect it tells me "802.1x Authentication has failed", does anyone have similar problems, solutions??? This is everything the IT department's homepage has to offer: http://www.unibz.it/ict/8021x_mac1/index.html?LanguageID=EN&
Thanks a lot!
Btw, it seems the update somehow messed up Timemachine as well, but that doesn't bother me as much as the internet connection.

Hi,
You probably need to install a root certificate into your Mac's system keychain so that your Mac knows it can trust the University's Certificate Authority (CA).
They should be able to provide you with a file for the CA and instructions.
cheers

802.1X Authentication fails when connecting to WPA Enterprise using Leopard

I'm trying to connect to an office WiFi network with my MacBook Pro which has 10.5.1 installed.
There are instructions on how to connect using Tiger which are very simple:
1. Enter network name
2. Wireless Security: WPA Enterprise
3. Enter domain credentials for username and password fields
4. 802.1X Configuration: Automatic
There are at least two people here using Tiger that can connect using these instructions.
I've tried the same thing with Leopard and keep getting an error dialog stating "802.1X Authentication has failed."
I've also tried fiddling with the 802.1X tab under "Advanced" (I know the protocol is PEAP), but no matter what I get the same error.

Turns out I was not authorized to use the WiFi. IT got me setup and everything works now.

After setting up my brand new Airport Express 802.11n and accidentally using it to connect my iMac to the network...my iMac no longer connects through Ethernet? Any ideas...I have tried everything without success!!

I have been using Apple technology for about 10 years starting with 1st generation iPods and our house now includes a 5 year old iMac, all versions of iPods and touches, Apple TVs (both generations) and most recently an iPad 2. I have always told family and friends that Apple technology just works. Unfortunately that stopped today. I bought a new Airport Express 802.11n to use for AirTunes around my new pool. I set it up from my iMac and accidentally used it to connect my iMac to the network for a short time. Now I can no longer connect the iMac to the network using a hard wired Ethernet cable. I have tried resetting everything possible, from hubs to routers to the Mac itself and it just will not connect to the network through Ethernet any longer. I am now a very frustrated Apple user especially when the support site says I can't use the fast path support because my product was manufactured 5 years ago...I just bought it at BestBuy yesterday. All other computers and itechnology in the house are connecting via wifi and Ethernet without any issue except from my new iMac boat anchor. Anybody who can help me??? Thanks

John, thanks for the email so quickly.
I too hope I haven't tried "everything" either but I am reasonably technical. I had done what you suggested to do before but I did both again.
Ethernet is yellow in the left side bar. In the right pane it's status says Connected but then below it says "Ethernet has a self-assigned IP address and will not be able to connect to the Internet."
I have tried the assist me menu and Network Status has Ethernet Green, Network settings Yellow, ISP Green, and Internet and Server Red and Failed for both. I have turned things off and on, checked cables, deleted all locations and tried restting them up but to no avail. I even disconnected everything and connected the mac directly into the cable modem itself and the thing still will not connect.
Thoughts???

Connecting to an 802.1X wired network

Does the AirPort support connecting to a 802.1X wired network?

Try turning odd autofill since that sometimes results in entering incorrect information.

I have an eMac which I want to connect to my home wireless network. My router is D-Link-601 tech 802.11n. My emac is wireless ready but does not contain an airport card. Do I need a card and an airport station? What else?

I have an eMac which I want to connect to my home wireless network. My router is D-Link - 601 tech. 802.11n. My eMac is wireless ready but does not contain an airport card. Do I need a card and an airport station? What else?

You need the Airport card OR Airport Express but not both. Considering the age of your machine, I recommend Airport Express as you will find other uses for it whenever you replace the eMac.
To set up the AE, you do need OSX 10.4 or higher.

Connecting 802.11b/g devices to an 802.11n AirPort network

I have a Time Capsule with an iMac and a MacBook connected to it. I want to add a Windows laptop to the setup, but it only has 802.11 b/g networking built in. As I understand it, adding an 802.11b or g device to an 802.11n network will slow the network down to the speed of the slower b or g device. What kind of 802.11n device, that is compatible with the AirPort (Broadcom?) chipset, should I get to connect this computer to the network? (The PC does not have a card slot.)
Would an AirPort Express work in WDS mode, with its Ethernet port connected to the laptop's Ethernet port?

As I understand it, adding an 802.11b or g device to an 802.11n network will slow the network down to the speed of the slower b or g device.
Not quite all the way down to 802.11b or g, but there will be a bandwidth degradation for 802.11n clients.
What kind of 802.11n device, that is compatible with the AirPort (Broadcom?) chipset, should I get to connect this computer to the network?
A number of vendors, specializing in networking equipment, offer 802.11n USB wireless adapters. I have used a number of Cisco/Linksys products that work just fine with AirPort networking.
Would an AirPort Express work in WDS mode, with its Ethernet port connected to the laptop's Ethernet port?
If this AirPort Express Base Station (AX) is a 802.11b/g version, then it would have the same affect as any other 802.11b/g client. In fact, in a WDS, the network will only operate in the 802.11g mode, so you really don't to go that route either. Another option, would be to use a newer 802.11n AX; reconfigure it as a ProxySTA, and use its Ethernet port for the connection to the PC.

Can't connect 802.1x wireless network

I upgraded my MacBook to Leopard, and I can't connect to the 802.1x wireless network in our campus any more (It requires PEAP). I used to log on quickly and the speed was amazing compared to my Windows Laptop. But now, every time I try to connect to the network, the Leopard does not pop any window for user name and pwd any more. I tried all kinds of configuration in the "802.1x" bar in "Network Preference/AirPort/Advanced" option, and it did not work. And even worse, when I added the network into my "Preferred" and made configuration in "802.1x" option, and tried to select the preferred "Network Name", every time I did this, Leopard would freeze and crash.... What a nightmare!!
I wonder if anybody else has the same problem with mine. I am driven crazy after two days trial.

If you restored to factory settings/new iPod and still have the problem that indicates a hardware problem.
Make an appointment at the Genius Bar of an Apple store..
Apple Retail Store - Genius Bar

Unable to connect to a secure wireless network - Event ID: 8002 Task Category: AcmConnection..., Event ID: 11006, Event ID: 11006

Hi,
I have a Dell Latitude E6440 running Win 7
Enterprise 64 on a domain. It will connect to any unsecured network, and it can see the secured network in the list when I click the wireless connection icon on the system tray. When I go to manage wireless networks, the secured network does not show
up (and thus, I cannot delete the network to try to re-add it). Normally, we would add the secure network here. I click Add, give the name in the correct syntax, add the needed information (WPA/2-Enterprise, EAS or TKIP), and hit Next, it immediately returns
with "An unexpected error occurred". A similar thing happens when I hit Connect from the list of available networks that pops up when I open the system tray icon: it says it was unable to connect, when I hit troubleshoot, it says that it could not
identify the problem. The event log shows the error below. I haven't been able to find any resolutions here or elsewhere that address the fact that I can connect to unsecured wireless networks, but not secured wireless networks.
Other notable troubleshooting steps:
Uninstalled/Reinstalled wireless adapter with the latest driver
Other laptops are able to access the same secure wireless network
The first WLAN-AutoConfig error in the event log was Event ID: 12013, attempting a 802.1x authentication. Then Event ID: 11006; stating "Explicit Eap failure received". After a few days of alternating all 3 errors, they started to only error on
Event ID 8002.
Log Name: Microsoft-Windows-WLAN-AutoConfig/Operational
Source: Microsoft-Windows-WLAN-AutoConfig
Date: 6/4/2014 11:53:55 AM
Event ID: 8002
Task Category: AcmConnection
Level: Error
Keywords: (512)
User: SYSTEM
Computer: [COMPUTERNAME.DOMAIN]
Description:
WLAN AutoConfig service failed to connect to a wireless network.
Network Adapter: Intel(R) Centrino(R) Advanced-N 6235 Interface GUID: {f27af762-dff8-4927-84e0-7f4ade30dcc9}
Connection Mode: Connection to a secure network without a profile Profile Name: [SECURE NETWORK NAME]
SSID: [SECURE NETWORK SSID]
BSS Type: Infrastructure
Failure Reason:The specific network is not available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WLAN-AutoConfig" Guid="{9580D7DD-0379-4658-9870-D5BE7D52D6DE}" />
<EventID>8002</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>24010</Task>
<Opcode>191</Opcode>
<Keywords>0x8000000000000200</Keywords>
<TimeCreated SystemTime="2014-06-04T16:53:55.956762800Z" />
<EventRecordID>1475</EventRecordID>
<Correlation />
<Execution ProcessID="432" ThreadID="5348" />
<Channel>Microsoft-Windows-WLAN-AutoConfig/Operational</Channel>
<Computer>[COMPUTERNAME.DOMAIN]</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="InterfaceGuid">{F27AF762-DFF8-4927-84E0-7F4ADE30DCC9}</Data>
<Data Name="InterfaceDescription">Intel(R) Centrino(R) Advanced-N 6235</Data>
<Data Name="ConnectionMode">Connection to a secure network without a profile</Data>
<Data Name="ProfileName">[SECURE NETWORK NAME]</Data>
<Data Name="SSID">[SECURE NETWORK NAME]</Data>
<Data Name="BSSType">Infrastructure</Data>
<Data Name="FailureReason">The specific network is not available.</Data>
<Data Name="ReasonCode">163851</Data>
<Data Name="ConnectionId">0x6</Data>
</EventData>
</Event>

check this article:http://technet.microsoft.com/en-us/library/cc735927(v=ws.10).aspx
also could contact your domain administrator to ask for help.

Why Unable to identify a user for 802.1X authentication (0x50001)?

Hello,
We are trying to set up wifi single-sign-on. When logging to a laptop get a message
"Connecting to Pivot_Users" and after some time "Unable to connect to Pivot_Users" and after that we are logged in to a laptop and successfully connected to Pivot_Users wifi network.
Server: windows server 2003 (with all updates)
laptop: windows 7 professional SP1 (with all updates)
When looking to event log i found this error:
Log Name:      Security
Source:        Microsoft-Windows-Security-Auditing
Date:          2012-10-10 10:38:01
Event ID:      5632
Task Category: Other Logon/Logoff Events
Level:         Information
Keywords:      Audit Failure
User:          N/A
Computer:      sba01-nb
Description:
A request was made to authenticate to a wireless network.
Subject:
Security ID:
Account Name:                -
Account Domain:                -
Logon ID:                0x0
Network Information:
Name (SSID):                Pivot_Users
Interface GUID:                {64773f24-bf8b-4e91-bbd7-eb199e3c2c5e}
Local MAC Address:        C4:85:08:12:77:44
Peer MAC Address:        00:24:97:83:8E:61
Additional Information:
Reason Code:                Unable to identify a user for 802.1X authentication (0x50001)
Error Code:                0x525
EAP Reason Code:        0x0
EAP Root Cause String:
EAP Error Code:                0x0
Event Xml:
<System>
    <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" />
    <EventID>5632</EventID>
    <Version>1</Version>
    <Level>0</Level>
    <Task>12551</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8010000000000000</Keywords>
    <TimeCreated SystemTime="2012-10-10T07:38:01.093305500Z" />
    <EventRecordID>37791</EventRecordID>
    <Correlation />
    <Execution ProcessID="760" ThreadID="2224" />
    <Channel>Security</Channel>
    <Computer>sba01-nb</Computer>
    <Security />
</System>
<EventData>
    <Data Name="SSID">Pivot_Users</Data>
    <Data Name="Identity">
    </Data>
    <Data Name="SubjectUserName">-</Data>
    <Data Name="SubjectDomainName">-</Data>
    <Data Name="SubjectLogonId">0x0</Data>
    <Data Name="PeerMac">00:24:97:83:8E:61</Data>
    <Data Name="LocalMac">C4:85:08:12:77:44</Data>
    <Data Name="IntfGuid">{64773F24-BF8B-4E91-BBD7-EB199E3C2C5E}</Data>
    <Data Name="ReasonCode">0x50001</Data>
    <Data Name="ReasonText">Unable to identify a user for 802.1X authentication</Data>
    <Data Name="ErrorCode">0x525</Data>
    <Data Name="EAPReasonCode">0x0</Data>
   <Data Name="EapRootCauseString">
    </Data>
    <Data Name="EAPErrorCode">0x0</Data>
</EventData>
</Event>
Thank you for answer and help.
Regards,
Tadas

Hi,
Thanks for your post.
Have you configured the client to only use user authentication for 802.1X? If so, I would like to inform you that this is expected when you configure the 802.1X to user only authentication.
Here is the process that is followed.
1. As soon as client is connected to the network the Authenticator (switch) periodically sends EAP request packet/frame to the client/supplicant.
2. The client has to respond back with an identify and if its configured only for User authentication then it will send blank identity.
3. The Authenticator cannot validate and the authentication would fail.
4. Windows client is configured for a block time of 20 min. So, once the authentication fails the NIC card will go in block time for 20 min until there is a change in credentials. So, even if the authenticatior(swithch) is periodically sending EAP request
it will just ignore them
5. You will see event 15506 after the event 15514.
Here’s the technet that you we can refer for the reason code : Reason: 0x50001 that we see in the event 15514
http://technet.microsoft.com/en-us/library/cc727747(WS.10).aspx
0x50001 = Dec 327681
Reason code: 327681   Event log message: The 802.1X module was unable to identify a set of credentials to be used. [An example is when the authentication mode is set to “User” but no user is logged on.]   # def name:
ONEX_UNABLE_TO_IDENTIFY_USER
Best Regards,
Aiden
Aiden Cao
TechNet Community Support

Connect to 802.1X authenticated network

Similar Messages

Maybe you are looking for