w2k3 IAS Radius error

I have problem on setting up W2k3 IAs radius for my wireless client to
authenticate.
I follow the link below
http://www.windowsnetworking.com/kba...1xclients.html

but no luck on it and error message from event viewer as below.
192.168.0.99 = A.D and IAS radius server
192.168.0.1 = Access point

User abc.COM\zzz was denied access.
Fully-Qualified-User-Name = <undetermined>
NAS-IP-Address = 192.168.0.1
NAS-Identifier = Network
Called-Station-Identifier = xx:xx:xx:xx:xx:xx
Calling-Station-Identifier = xx:xx:xx:xx:xx:xx
Client-Friendly-Name = AP
Client-IP-Address = 192.168.0.1
NAS-Port-Type = Wireless - IEEE 802.11
NAS-Port = 1
Proxy-Policy-Name = <none>
Authentication-Provider = <undetermined>
Authentication-Server = <undetermined>
Policy-Name = <undetermined>
Authentication-Type = <undetermined>
EAP-Type = <undetermined>
Reason-Code = 49
Reason = The connection attempt did not match any connection request policy.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

The address of remote RADIUS server 192.168.0.99 in remote RADIUS server
group wireless resolves to local address 192.168.0.99. The address will be
ignored.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

jenson,

What I see from the link you provided is that both client and access point
have different policy.
If I am not wrong your access policy set to allow EAP while at client side
it is MS-CHAPv2
Please check it both side has to be set same authentication policy.
Also check:
1. user account has dial-in permission set to "Allow"
2. Check the connection between Radiua server and Access Point
3. Make sure the shared secret on the server matches the key on the client

--
Rahisuddin Shah
MCSE - MCSA - ITIL
"jenson" <(E-Mail Removed)> wrote in message
news:7C1A88CF-3E17-46F3-BA0A-(E-Mail Removed)...
>I have problem on setting up W2k3 IAs radius for my wireless client to
> authenticate.
> I follow the link below
> http://www.windowsnetworking.com/kba...1xclients.html
>
> but no luck on it and error message from event viewer as below.
> 192.168.0.99 = A.D and IAS radius server
> 192.168.0.1 = Access point
>
> User abc.COM\zzz was denied access.
> Fully-Qualified-User-Name = <undetermined>
> NAS-IP-Address = 192.168.0.1
> NAS-Identifier = Network
> Called-Station-Identifier = xx:xx:xx:xx:xx:xx
> Calling-Station-Identifier = xx:xx:xx:xx:xx:xx
> Client-Friendly-Name = AP
> Client-IP-Address = 192.168.0.1
> NAS-Port-Type = Wireless - IEEE 802.11
> NAS-Port = 1
> Proxy-Policy-Name = <none>
> Authentication-Provider = <undetermined>
> Authentication-Server = <undetermined>
> Policy-Name = <undetermined>
> Authentication-Type = <undetermined>
> EAP-Type = <undetermined>
> Reason-Code = 49
> Reason = The connection attempt did not match any connection request
> policy.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
> The address of remote RADIUS server 192.168.0.99 in remote RADIUS server
> group wireless resolves to local address 192.168.0.99. The address will be
> ignored.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.