| Event Information | According to Microsoft :
Cause :
This event is logged when the connection from user on port has been disconnected because the Session Timeout received from the RADIUS server has expired.
Resolution :
Check the NPS configuration
Possible resolution: - This connection has received only an IPv6 address from the RRAS server. You cannot configure the MS-Quarantine-Session-Timeout attribute on the server running Network Policy Server (NPS) for IPv6-only connections.
To check the NPS configuration: - Open NPS. Click Start , click Run , type nps.msc , and then press ENTER.
- In the console tree, under Policies , click Connection Request Policies .
- In the details pane, under Policy Name , double-click the NAP VPN policy for remote access server ( VPN - Dial up ).
- Click the Settings tab.
- Under RADIUS Attributes , click Vendor Specific . Under Attributes , check whether a Microsoft vendor RADIUS attribute, MS-Quarantine-Session-Timeout, appears. If yes, select the MS-Quarantine-Session-Timeout attribute, and then click Remove . If the policy is being created for the first time, do not add the MS-Quarantine-Session-Timeout attribute.
- Click OK .
Verify :
To verify that NAP remote access enforcement clients are installed and initialized: - On the NAP client computer, click Start , point to All Programs , click Accessories , and then click Command Prompt .
- In the command window, type netsh nap client show configuration , and then press ENTER.
- If the client computer's NAP configuration is determined by Group Policy, type netsh nap client show grouppolicy , and then press ENTER.
- In the command output, under Enforcement clients , verify that the enforcement clients listed for your deployment are correct, and that the enforcement clients in use on your network have an Admin value of Enabled .
- In the command window, type netsh nap client show state , and then press ENTER.
- In the command output, under Enforcement client state , verify that all enforcement clients listed for your deployment are correct, and that the enforcement clients that are enabled on the client computer have an Initialized value of Yes .
|