We use Microsoft Network Policy Server (NPS) for dot1x radius.
Last week dot1x stopped to work.
On MikroTik side logs show only this:
2024-07-11 06:06:07.720 dot1x,packet sw9: s ether39 rx EAPOL-Start
2024-07-11 06:06:07.723 dot1x,packet sw9: s ether39 tx EAPOL-Packet EAP-Request id:0 method:IDENTITY
2024-07-11 06:06:07.723 dot1x,packet sw9: s ether39 rx EAPOL-Packet EAP-Response id:0 method:IDENTITY
2024-07-11 06:06:09.534 dot1x,debug sw9: s ether39 "legit-username-hidden" radius req timed out
Suspect KB5040437, however uninstalling it did not help. Either it modified something inadvertently or by design, it seems to be irreversible.
Currently we reverted to use an older NPS server, without this update.
Seems that there is no connection to RouterOS version, as 6.49.7, 6.49.8 and 7.15.2 behave the same.
Also tried to toggle “require-message-auth” on both windows and mikrotik sides.
Any ideas, suggestions?