topic AD Authentication Failure in Wireless

AD Authentication Failure

Tesfaye41175 — Mon, 16 May 2022 08:54:27 GMT

We have embeded 9115 EWC and we have enabled AD authentication. If the AD server shuts down and doesn't power up before WLC AD, when the users tries to connect there will be an error "Authentication server unavailable" and our IOS software version is 17.3.1. IS there any way to fix this without having to restart the WLC? Or can it be because of another cause?

Re: AD Authentication Failure

balaji.bandi — Mon, 16 May 2022 09:06:57 GMT

is this for device authentication ? may be worth configure Local authentication fall back.

Re: AD Authentication Failure

Flavio Miranda — Mon, 16 May 2022 09:14:59 GMT

If AD does not Power up before the WLC users get the message "authentication server unavailable? But, would not be it the expected behavior? If the AD still down, how can possibly the WLC authenticate any user?

Re: AD Authentication Failure

Tesfaye41175 — Mon, 16 May 2022 09:23:18 GMT

HI it is for Wireless users authentication. You mean local authentication by layer 2 802.1x authentication

Re: AD Authentication Failure

Tesfaye41175 — Mon, 16 May 2022 10:07:25 GMT

Even after AD power up it doesnt authenticate. The AD has to be up first before the WLC..is that normal?

Re: AD Authentication Failure

Flavio Miranda — Mon, 16 May 2022 11:14:00 GMT

On that case, surely not. Sounds to me like a bug. I´d recommend change the version.

Re: AD Authentication Failure

Mark Elsen — Mon, 16 May 2022 11:32:48 GMT

- In any case proper MS-AD environment , usually has multiple AD's (recommended 3 at minimum) use or configure them all , or denote a domain as where the AD's can be automatically found (possible in some environments too, (perhaps not always))

Re: AD Authentication Failure

MHM Cisco World — Mon, 16 May 2022 13:57:14 GMT

the issue is not connect between EWC and AD,
the issue is EWC mark the host as Un-auth and reject to auth again.
check the EWC user auth.
try increase dead-time.