iPhone无法连接到企业WPA2 /企业网络

从今天开始，我们公司网络上的所有iPhone都无法连接到4个WiFi接入点中的任何一个。我昨天没有问题。

Android设备和笔记本电脑没有问题。测试的IOS版本是8.2和8.4。

我重新启动了身份验证/ NPS服务器。在电话上“忘记了网络”，并转到常规，重置，重置网络设置。

忘记网络，然后重新连接也不会提示再接受证书。

我已将用户的Active Directory帐户上的“拨入”设置更改为“允许访问”，并且仍在下面生成错误。我已经将它们切换回“通过NPS网络策略控制访问”，并且网络策略上的设置具有“忽略用户帐户拨入属性”的复选标记

以下是设置：

这是服务器的错误。

Network Policy Server denied access to a user.



Contact the Network Policy Server administrator for more information.



User:

    Security ID:            MYDOMAIN\user1

    Account Name:            user1

    Account Domain:            MYDOMAIN

    Fully Qualified Account Name:    MYDOMAIN\user1



Client Machine:

    Security ID:            NULL SID

    Account Name:            -

    Fully Qualified Account Name:    -

    OS-Version:            -

    Called Station Identifier:        48f8b3a10979

    Calling Station Identifier:        285aeb54d31e



NAS:

    NAS IPv4 Address:        192.168.x.23

    NAS IPv6 Address:        -

    NAS Identifier:            48f8b3a10979

    NAS Port-Type:            Wireless - IEEE 802.11

    NAS Port:            25



RADIUS Client:

    Client Friendly Name:        Cisco EA6300 Wireless AP2 (Back Plant)

    Client IP Address:            192.168.x.23



Authentication Details:

    Connection Request Policy Name:    Secure Wireless Connections

    Network Policy Name:        Connections to other access servers

    Authentication Provider:        Windows

    Authentication Server:        AUTHSERVER.MYDOMAIN.com

    Authentication Type:        EAP

    EAP Type:            -

    Account Session Identifier:        -

    Logging Results:            Accounting information was written to the local log file.

    Reason Code:            65

    Reason:                The Network Access Permission setting in the dial-in properties of the user account in Active Directory is set to Deny access to the user. To change the Network Access Permission setting to either Allow access or Control access through NPS Network Policy, obtain the properties of the user account in Active Directory Users and Computers, click the Dial-in tab, and change Network Access Permission.

Solution:

为有线连接标准配置的802.1X无线创建新的RADIUS服务器。

使用与先前连接请求策略和网络策略完全相同的设置。删除旧的。