topic Re: HP Printer failing 8021x in Network Access Control

HP Printer failing 8021x

Mike.Cifelli — Tue, 09 Apr 2019 18:11:21 GMT

Anyone have issues with getting an HP printer to authenticate via 8021x? Model/Series = HP Laserjet m452nw

ISE failure reason = 12851 Received unexpected EAP NAK message. Client rejected the conversation

ISE expects for regular conversation continuation but client sent outer EAP method NAK message. It means that client rejected conversation for some reason that is unknown to ISE. Known issue: CSSC 5.1.1.10

Verify that the client's supplicant does not have any known compatibility issues and that it is properly configured.

Thanks in advance.

Re: HP Printer failing 8021x

BigK — Tue, 09 Apr 2019 21:59:49 GMT

They are many things you can check.

1- is the mac address of your printer in mab list

2- does your printer have a native supplicant installed or no supplicant.

3 - what happen if you have authc open on the interface that the printer is connected to?

Thanks

Big K

Re: HP Printer failing 8021x

Mike.Cifelli — Tue, 09 Apr 2019 23:39:36 GMT

Sorry this issue is strictly an 8021x error. Mab is irrelevant as that is working as expected. I think the issue is client side.

1- is the mac address of your printer in mab list
Mab is working as expected. This issue is regarding 8021x failure due to the eap-nak error identified above.

2- does your printer have a native supplicant installed or no supplicant.
The printer has a built-in supplicant.

3 - what happen if you have authc open on the interface that the printer is connected to?
The printer can authenticate via Mab onto the SDA fabric with no problems whatsoever.

Re: HP Printer failing 8021x

itservicesinfrastructurenetwork — Wed, 10 Apr 2019 03:57:59 GMT

Re: HP Printer failing 8021x

raffyblindogan — Wed, 10 Apr 2019 04:06:36 GMT

It seems that EAP Request and Response, HP rejected the server.

It is possible that both HP and ISE are not using similar EAP type or protocols

Can you please send the whole logs on the ISE which has the EAP conversation.

Also can you send the configuration of your supplicant.

Thanks.

Re: HP Printer failing 8021x

Jason Kunst — Wed, 10 Apr 2019 15:21:17 GMT

please work with HP and Cisco support for debugging

Re: HP Printer failing 8021x

aportugal1 — Mon, 03 Jan 2022 14:09:12 GMT

Hi, were you able to solve this problem? In the thread does not have the solution. I'm facing the same issue with HP printers not authenticating through 802.1x, only mab.

Thanks for your attention.

Re: HP Printer failing 8021x

Marcelo Morais — Mon, 03 Jan 2022 19:02:02 GMT

Hi @aportugal1 ,

it looks like that the solution is to check the EAP Type: "... It is possible that both HP and ISE are not using similar EAP type or protocols ..."

Hope this helps !!!

Re: HP Printer failing 8021x

aportugal1 — Tue, 04 Jan 2022 09:16:51 GMT

Hi Marcelo, thank's for your attention. I managed to solve the problem! I needed to import the root and intermediate certificate into the HP printer, then it successfully authenticated by 802.1x. Here's a tip for anyone facing the same problem.

Re: HP Printer failing 8021x

Giorgos_Mama — Thu, 18 May 2023 20:17:12 GMT

Hi Aportugal1

But were you added the 2 certs?
Certificates->CA Certificate->Configure and repeat the process for both??

Re: HP Printer failing 8021x

Naive — Sun, 21 May 2023 10:41:31 GMT

Hello Mike, Are we discussing about HP printer not getting authenticated through 802.1Q (Sorry if I misunderstood), As far I know printers are always authenticated through MAB. Under which circumstances we are using printers to authenticate through 802.1Q

Re: HP Printer failing 8021x

ElXandel — Wed, 12 Jun 2024 12:52:32 GMT

thanks for the tipp with the pki certs -> after installing them it worked