SSTP EAP

sstp environment windows server 2008 r2.
server02r rras , ca (standalone) services, , server02n nps services.
want secure more connection sstp vpn server client certificate eap. on ca create request client certificate , export , import on local machine. connection without eap types works fine user domain name , password. problem when check on security tab in vpn connection use extensible authentication protocol (eap) witj drop down menu microsoft: smart card or other certificate (encryption enabled)
on server02n nps services role in connection request policy crete new on settings override network policy authentication settings , check microsoft smart card or other certificate , on edit i`ve got certificate server02r (sstp.example.com). when user trying connecto sstp vpn server has 691 error problem. in logs on rras server i`ve got eroors 20255 , 20271 message:
coid={0e740f79-5576-44f2-8fe2-a12a4b2055be}: following error occurred in point point protocol module on port: vpn0-127, username: kris sstp mix. connection prevented because of policy configured on ras/vpn server. specifically, authentication method used server verify username , password may not match authentication method configured in connection profile. please contact administrator of ras server , notify them of error. what doing wrong? please me because don`t have idea wit that. in advance.

hi,

thanks post.

please note it’s not recommend deployment eap-tls authentication (smart card or other certificate) using standalone ca. because need manually request computer , user certificate, , export/import private key on right container. easy management issuing, such auto-enrollment, should use enterprise ca. then, use ca issue server certificate nps server. based on eap-tls authentication method choose, deploy certificate template user , client computer.

certificate requirements peap , eap

http://technet.microsoft.com/en-us/library/cc731363

best regards,

aiden

if have feedback on our support, please click here

---

aiden cao
technet community support

Windows Server  >  Network Access Protection