- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
Wireless users are not able to authenticate through a RADIUS server
03/26/2020 
38 People found this article helpful
44,211 Views
Description
Trouble shooting a scenario where wireless users were not able get authenticated through RADIUS server
Resolution
SCENARIO / SYMPTOM
• Internal wireless(W0) is being used
• Authentication WPA2-EAP
• The authentication goes through fine from SNWL
User ->Settings-> Test Radius users
• SNWL LAN IP was added as radius client on the server and a Network Policy was added for the same 
Conditions were configured as follows:
• Users groups were added (Wireless group on the AD )
• Configured SNWL LAN IP as NAS IPv4 & Client IPv4
• Was using both PEAP & EAP methods
• MSCHAP V2, MSCHAP authentication types are already configured
• But still the wireless users are unable to get authenticated from Radius
• Tried by bridging the interface X0 and W0 but to no avail
• Tried to upgrade the firmware of the SNWL to 5.8.1.15(General Release) and tested. Still no resolution
• The packet capture on SNWL shows Access request sent from the SNWL, but server was sending Access reject back
• It gives the error ‘user credentials are incorrect’, although the same user, was able to authenticate from the SNWL radius test page
• Created a new test user on the Customer’s LDAP server, still to no avail. Same error was thrown
RESOLUTION/WORKAROUND
Turned off ‘Guest services’ under Zones and then the Wireless users were able to get authenticated 
Note:
Related KB article:
Configuring RADIUS authentication for Global VPN Clients with Network Policy and Access Server from Microsoft Windows 2008 (With video tutorial of Radius Authentication)
URL: https://www.fuzeqna.com/SonicWallkb/ext/kbdetail.aspx?kbid=6591
Related Articles
- Supported Public Cloud Servers/Instance Sizes on SonicWall NSv Series Models
- Why do I need a Support Services Reinstatement?
- How can I configure a VPN between a SonicWall firewall and Microsoft Azure?
Categories
- Firewalls > TZ Series
- Firewalls > SonicWall SuperMassive E10000 Series
- Firewalls > SonicWall SuperMassive 9000 Series
- Firewalls > SonicWall NSA Series
YES
NO