Aironet 1130ag RAIDUS auth issues - what is no sg in radius-timers?

markmilenkovic — Sun, 04 Jul 2021 03:50:13 GMT

Hi All.

wonder if anyone can help

We have an aironet 1130ag in a remote office connected to the data centre over MPLS. The Radius server is based on server 2003

We have hundreds of these points set up exactly the same but this is the only one giving me issues, I even stripped the config and rebuilt it and then swapped with a new access point

The issue is that clients can't authenticate when connecting to the access point but provides nothing in event viewer. Checking the RADIUs server provides nothing either.

The access point error logs just state station: authentication failed

On looking deeper into the problem I enabled RADIUS debugging on the access point and got some interesting results, in particular is the line:

no sg in radius-timers: ctx 0x12EF0A4 sg 0x0000

I can't find out what no SG in Radius-timers actually means, but after that line appears I just see more retransmits and no sg fails.

I inspected the packets on the RADIUs server and found lots access requests coming from my access point and lots of access-challenges returning back from my RADIUS server - I'm not sure how often that's supposed to happen or if it's a one time occurance. I did however see directly after the first access-request that the RADIUS server returns with UDP and is fragmented, length is 1514...... could this be the problem? If so why cannot it hanlde fragmented packets? And what do I need to do to fix?

Many thanks for the help

Mark

Aironet 1130ag RAIDUS auth issues - what is no sg in radius-time

markmilenkovic — Wed, 28 Sep 2011 13:58:13 GMT

the fragmented packet might be a red herring as I've just done the same packet inspection on the same radius server but coming from a different access point which works, I get the same fragmented UDP packet but the connection works.

any ideas?

Aironet 1130ag RAIDUS auth issues - what is no sg in radius-time

markmilenkovic — Thu, 29 Sep 2011 15:18:56 GMT

Manaed to set IAS up on a box sat locally in the office to test with - authenticates fine to this box..... Looks like some part of the authentication process is getting lost across the WAN....

topic Aironet 1130ag RAIDUS auth issues - what is no sg in radius-time in Wireless

Aironet 1130ag RAIDUS auth issues - what is no sg in radius-timers?

Aironet 1130ag RAIDUS auth issues - what is no sg in radius-time

Aironet 1130ag RAIDUS auth issues - what is no sg in radius-time