We have a wireless network that authenticates to a Radius server on Windows server 2008 R2. I need to move NPS and Radius to a new server. I created a 2012 R2 server and added the roles. I copied exactly the Radius client, the Connection Request Policy and the Network Policies. However the new server is denying access. The security log is reporting event 6273
"NPS denied access to a user. The connection request did not match any configured network policy."
I have compared the polices of the old and new servers a hundred times and cannot see any difference. The new NPS server does successfully authenticate VPN and RDG.
Is there anything different about 2012 R2 that could cause this? What could I be missing? Thanks