Monitoring and Troubleshooting
Wired Connections

Configured device with Wired 802.1X, not able to connect

5min

Nile supports both Wireless and Wired 802.1X connections. 

1.  Verify if there any DOT1X authentication attempts from client side.

 By checking Device List from Nile Portal we could see particular client logs event:



Devices: Devices list
Devices: Devices list


How to get MAC address of device:

a.  Navigate to: Control Panel\Network and Internet\Network Connections

b. Right click to Wired adapter and click to Status:



Windows: Ethernet properties
Windows: Ethernet properties




c.  On Ethernet Status window click on Details:



Windows: Ethernet properties
Windows: Ethernet properties




d. MAC address of device will be listed as Physical Address:



Windows: Ethernet properties
Windows: Ethernet properties


2.  If there are no Devices found for that particular MAC address, that means there is no Dot1x authentication attempts from client side and by default that particular device connected to Nile Switch port will fall to MAB approval page:



Devices: Devices info not found
Devices: Devices info not found


Navigate to Settings -> MAB . We could see that MAC address we testing is pending MAB approval that confirms that DOT1X was not initiated from Client side and we will need to verify DOT1X configuration:



Settings: Access management
Settings: Access management




3.  Verify 802.1X supplicant configuration from client side.

Client could be running different  variety of DOT1X supplicants like:

- Windows native supplicant.

- Cisco Anyconnect

- MAC OSX native supplicant 

(please check vendor documentation for particular supplicant configuration)

In our particular example, out PC client is Windows PC and should be running Windows native DOT1X supplicant.

a. From Wired adapter Properties we could check if there Authentication Tab is available:

As you could see Authentication tab is missing, that means our Wired DOT1X service is not running:



Windows: Ethernet properties
Windows: Ethernet properties


b. From PC Start-> Services, we need to enable Wired AutoConfig Service by clicking Start:



Document image


As result we could see Authentication Tab in our Wired Adapter properties to configure DOT1X authentication:



Windows: Ethernet properties
Windows: Ethernet properties




4.  Verify DOT1X supplicant configuration.

On this particular example, we will have EAP-PEAP(EAP-MSCHAP v2) password based authentication configured.



Windows: Supplicant config
Windows: Supplicant config


From Settings, selecting Secure password (EAP-MSCHAP v2):



Windows: Supplicant config
Windows: Supplicant config


From Advance Settings we have selected User Authentication only:

Windows: Supplicant config
Windows: Supplicant config


5.  Checking back Nile Portal to see DOT1X authentication:

From Nile Portal device list, we see User connection. By clicking to User Link we could check details and events:

Devices: Device info
Devices: Device info


Client connection details and events, where we could see Client information, Event Details and Timeframe.

As we could see, DOT1X authentication was success this time:

Devices: Device events
Devices: Device events