1240AG Access Point Received Crypto-Binding TLV is invalid

Unanswered Question
Nov 12th, 2008
User Badges:

I need help in trying to figuring why I can't get 1240G authentication to work with windows 2008 NPS Radius. It's working with Windows 2000 AIS. Below is error I've got with windows 2008:

Network Policy Server denied access to a user.

Contact the Network Policy Server administrator for more information.


Security ID: edited

Account Name: edited

Account Domain: edited

Fully Qualified Account Name: edited

Client Machine:

Security ID: NULL SID

Account Name: -

Fully Qualified Account Name: -

OS-Version: -

Called Station Identifier: 0017.0fd8.8b40

Calling Station Identifier: 001e.4c13.d804


NAS IPv4 Address:

NAS IPv6 Address: -

NAS Identifier: swap1

NAS Port-Type: Wireless - IEEE 802.11

NAS Port: 356

RADIUS Client:

Client Friendly Name: swap1

Client IP Address:

Authentication Details:

Proxy Policy Name: Use Windows authentication for all users

Network Policy Name: Production Wireless Users

Authentication Provider: Windows

Authentication Server: x.x.com

Authentication Type: PEAP

EAP Type: -

Account Session Identifier: -

Reason Code: 301

Reason: Received Crypto-Binding TLV is invalid.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
amritpatek Tue, 11/18/2008 - 15:07
User Badges:
  • Silver, 250 points or more

Make sure that The Crypto-Binding TLV is valid only if the following checks pass:

The Crypto-Binding TLV version is supported

The Compound MAC verifies correctly

The received version in the Crypto-Binding TLV matches the version


This Discussion