topic EAP-FAST with Local RADIUS in Wireless

Guest Network

vishal.rane — Mon, 05 Jul 2021 07:42:15 GMT

Hello

on a wlc 4400 series guest ssid configured, lately noticed Guest SSID is broadcasted but takes long to connect or at times dont connect.

Other SSID configured with WPA2 works ok. Checked the following

Issue occurs on Smartphones and Laptops
DHCP configured on WLC for Guest SSID
Authentication is Web Authentication
software version running on WLC - 7.0.235.

Any assistance to troubleshoot the issue

cheers

Vishal

What is the logs you are

sreejith_r — Tue, 22 Apr 2014 10:16:06 GMT

What is the logs you are getting on the controller

Hi,Does this problem occur

Christos Stefaneskou — Tue, 22 Apr 2014 17:11:28 GMT

Hi,

Does this problem occur when you try to move from one ssid to another?

Can you check if "fast ssid change" is enabled?

You can find it under Controller tab.

Regards,

Christos.

Hi,Make sure you have

abwahid — Tue, 24 Jun 2014 08:18:42 GMT

Hi,

Make sure you have selected all the data-rate of the Guest SSID frequency band and select low noise channel as per your environment and then try hopefully it will work.

EAP-FAST with Local RADIUS

mohanak — Thu, 26 Jun 2014 17:43:19 GMT

EAP-FAST with Local RADIUS fails in Session Timeout

CSCud86709

Description

Symptom:

WLC4404, ADU(4.2.0.269) with EAP-FAST authentication and WLC local radius server(local EAP) with
"auto provisioning" is used.

When the problem occurs, session timeout caused the client re-authentication.
During EAP-FAST authentication process, WLC repeats sending "Request, Identity" packet
and consequently the client fails authenticate.

Conditions:

WLC4404(7.0.235.0), ADU(4.2.0.269)

Known Affected Releases:

(1)

7.0(235.)

f any RADIUS servers are

Abhishek Abhishek — Fri, 22 Aug 2014 02:25:57 GMT

f any RADIUS servers are configured on the controller, the controller tries to authenticate the wireless clients using the RADIUS servers first. Local EAP is attempted only if no RADIUS servers are found, either because the RADIUS servers timed out or no RADIUS servers were configured. If four RADIUS servers are configured, the controller attempts to authenticate the client with the first RADIUS server, then the second RADIUS server, and then local EAP. If the client attempts to then reauthenticate manually, the controller tries the third RADIUS server, then the fourth RADIUS server, and then local EAP.

This example uses EAP-FAST as the Local EAP method on the WLC, which in turn is configured to query the LDAP backend database for user credentials of a wireless client.