topic Re: RADIUS MAC Authentication problem in Network Access Control https://community.cisco.com/t5/network-access-control/radius-mac-authentication-problem/m-p/777667#M421133 <HTML><HEAD></HEAD><BODY><P>Thanks for your quick reply!</P><P>Why is MAC authentication still working for our IOS AP's? Must be something about the way the wlc 4402 sends RADIUS packets to the ACS 4.1 that causes the error?</P><P></P><P>Kind regards,</P><P>Rutger</P></BODY></HTML> Tue, 03 Apr 2007 10:06:18 GMT Rutger Blom 2007-04-03T10:06:18Z RADIUS MAC Authentication problem https://community.cisco.com/t5/network-access-control/radius-mac-authentication-problem/m-p/777665#M421130 <P>Hello,</P><P></P><P>Since we are using a wlc 4402 we have problems with MAC authentication via RADIUS. Our MAC addresses are in an external LDAP database and this worked fine with IOS AP's. Now we receive an "Internal Error" in the "Failed Attempts" log. We use Cisco ACS 4.1 as our RADIUS server.</P><P></P><P>Any ideas?</P><P></P><P>Kind regards,</P><P>Rutger</P> Sun, 10 Mar 2019 22:04:29 GMT https://community.cisco.com/t5/network-access-control/radius-mac-authentication-problem/m-p/777665#M421130 Rutger Blom 2019-03-10T22:04:29Z Re: RADIUS MAC Authentication problem https://community.cisco.com/t5/network-access-control/radius-mac-authentication-problem/m-p/777666#M421132 <HTML><HEAD></HEAD><BODY><P>Is you're seing these errors it means something in ACS is broken.</P><P></P><P>This could be because of a protocol error or because its plain broke. You'll need to get the services logs (csradius, csauth etc) and look for errors.</P><P></P><P>Errors can be found easily by searching for the string " E ", ie <SPACE>E<SPACE></SPACE></SPACE></P><P></P><P>If youre lucky the error message might mean something, otherwise you'll have to contact the TAC.</P></BODY></HTML> Tue, 03 Apr 2007 09:16:36 GMT https://community.cisco.com/t5/network-access-control/radius-mac-authentication-problem/m-p/777666#M421132 darpotter 2007-04-03T09:16:36Z Re: RADIUS MAC Authentication problem https://community.cisco.com/t5/network-access-control/radius-mac-authentication-problem/m-p/777667#M421133 <HTML><HEAD></HEAD><BODY><P>Thanks for your quick reply!</P><P>Why is MAC authentication still working for our IOS AP's? Must be something about the way the wlc 4402 sends RADIUS packets to the ACS 4.1 that causes the error?</P><P></P><P>Kind regards,</P><P>Rutger</P></BODY></HTML> Tue, 03 Apr 2007 10:06:18 GMT https://community.cisco.com/t5/network-access-control/radius-mac-authentication-problem/m-p/777667#M421133 Rutger Blom 2007-04-03T10:06:18Z Re: RADIUS MAC Authentication problem https://community.cisco.com/t5/network-access-control/radius-mac-authentication-problem/m-p/777668#M421134 <HTML><HEAD></HEAD><BODY><P>I am experiencing the same problem.</P><P></P><P>Works great when the AP's request MAC verification, however when Cisco Wireless Controller (4402) requests verification i get the same error.</P><P></P><P>"14-11-2007 20:16:25 Auth.Info kestrel CisACS_02_FailedAuth 16joeo7dn 1 0 Message-Type=Authen failed,User-Name=xx4096xxxxxx,NAS-IP-Address=10.113.1.200,Authen-Failure-Code=Internal error,Caller-ID=xx-40-96-xx-xx-xx,NAS-Port=2"</P><P></P><P>I replaced some digits on MAC address with x.</P></BODY></HTML> Wed, 14 Nov 2007 20:18:35 GMT https://community.cisco.com/t5/network-access-control/radius-mac-authentication-problem/m-p/777668#M421134 itseriab 2007-11-14T20:18:35Z Re: RADIUS MAC Authentication problem https://community.cisco.com/t5/network-access-control/radius-mac-authentication-problem/m-p/777669#M421135 <HTML><HEAD></HEAD><BODY><P>UPDATE!</P><P></P><P>After posting I decided to look at the ACS patch notes to see if any of the bugs refered the "Internal Error"</P><P></P><P>Found patch Acs-4.1.1.23.3-SW and installed it and its working now.</P><P></P><P>Just FYI</P></BODY></HTML> Wed, 14 Nov 2007 21:02:39 GMT https://community.cisco.com/t5/network-access-control/radius-mac-authentication-problem/m-p/777669#M421135 itseriab 2007-11-14T21:02:39Z