Hi,

I want to authenticate wireless users with the Windows server NPS. The problem is that there is no traffic coming from mikrotik to the NPS and eventviewer on the NPS does not show any incoming request from Mikrotik.

Router OS config:
router os 7.14.3
Mikrotik Can ping NPS server and port 1812 and 1813 is open on NPS.


In wireless security profile:

GENERAL tab
WPA2 EAP
unicast/group ciphers aes ccm

RADIUS tab
nothing checked

EAP tab
EAP Methods = passthrough
TLS Mdoe: dont verify cert
TLS Cert: none

In radius :
add service wireless
domain. test.local
ip= nps server
protocol: udp
secret: 123456789
timeout: 300

NPS (Network Policy Server)

mikrotik as radius client is added.
Added Network Policy:
Condition: added 802.11 NAS Port type
Condition: added Windows Groups (Domain Users)

Constraints Tab:
Auth method: nothing
Auth method: MS-Chap-V2 checked
Everything else default

Has anyone idea?

This comes up a lot because its hidden away

Goto PPP->Secrets tab click-on the PPP-Authentication&Accounting Button and tick the "use radius" box

Thanks for answer.

I have done but again don't work

Check the Windows firewall according to: https://learn.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-firewalls-configure

Thanks

All ports are open.
I am using this NPS to authenticate Mikrotik VPN users and work, but no authentication traffic is coming from the Mikrotik wireless client to the NPS!

I would set the radius source IP to your public IP you expect just to make sure the packets are leaving right interface and address

Next on the Radius server status tab what is happening to the requests are they just timing out?

Thanks,

https://ibb.co/p1nqvys

I put 192.168.10.111 as Radius client IP.
and radius timeout 300ms. I also test timeout 600ms.