topic In fact, the issue was in CN, in Network Access Control

EAP-TLS Error

cciesec333 — Mon, 11 Mar 2019 05:01:54 GMT

Hello.

I cannot get EAP-TLS auth to work on windows 7 wired setup. I've tested EAP-PEAP on wireless and wired - works fine. Also EAP-TLS for wireless works great. Clients are on same domain as radius (wich is Cisco ISE), we've deployed CA-services on that same domain too and are distributing certificates to clients via GPOs. Authenticators (switchports) are configured correctly, certificates work on EAP-TLS wireless setup, everything seems to be ok, but wired connection still cannot auth and EAP timeouts.

Here is the error:

Logged At: May 14,2013 11:52:12.159 AM
RADIUS Status: No response received during 120 seconds on last EAP message sent to the client : 5411 No response received during 120 seconds on last EAP message sent to the client

certificate not being trusted

Venkatesh Attuluri — Wed, 17 Sep 2014 09:41:24 GMT

certificate not being trusted by device can result this error.. make sure you have the certificate trusted in the

certificate store

http://support.microsoft.com

mscottini — Thu, 18 Sep 2014 16:49:26 GMT

http://support.microsoft.com/kb/980295/en-us - works for me!

disable fast reconnect to the

Saurav Lodh — Fri, 19 Sep 2014 00:41:30 GMT

disable fast reconnect to the client

Have you confirmed that the

nspasov — Fri, 19 Sep 2014 07:39:29 GMT

Have you confirmed that the Supplicant is configured properly for EAP-TLS authentication? I have done this type of deployment many times and haven't had this issue.

Thank you for rating helpful posts!

In fact, the issue was in CN,

mscottini — Fri, 19 Sep 2014 12:06:23 GMT

In fact, the issue was in CN, after change for SAN, worked fine!

http://d2zmdbbm9feqrf.cloudfront.net/2014/anz/pdf/BRKSEC-3045.pdf