topic Re: After power outage, WLC not correctly transacting with RADIUS serv in Wireless

After power outage, WLC not correctly transacting with RADIUS server.

jonathan.maxwell — Mon, 23 May 2022 11:19:36 GMT

After power outage WLC AIR-CT5508-100-K9 is not correctly communicating with RADIUS server. IP communication between 2 devices is intact. Cisco APs are up but clients failing communication because of authentication. Aruba APs connected to same WLC are up and servicing wireless clients fine.

1. Why is WLC not correctly communicating with RADIUS server?

2. How can I make this connection healthy again?

Thank you.

Re: After power outage, WLC not correctly transacting with RADIUS serv

Flavio Miranda — Mon, 23 May 2022 11:34:44 GMT

"Aruba APs connected to same WLC are up and servicing wireless clients fine."

Tell me more about it please.

I can try to guess here what might be happening but will not help you. We need logs to help you. Connect to the WLC, choose one failing client and issue "debug client 'mac address' . Save the output while trying to connect. Then, share the result.

And share the output of "show radius auth statistics " from the WLC.

Re: After power outage, WLC not correctly transacting with RADIUS serv

MHM Cisco World — Mon, 23 May 2022 15:26:53 GMT

WLC loss client auth data but radius still have it?

check this point

Re: After power outage, WLC not correctly transacting with RADIUS serv

Rich R — Mon, 23 May 2022 14:13:48 GMT

Was the WLC config saved before the power failure? Maybe it's using the wrong radius secret for example?

Get a packet capture to see what is happening.

What do the radius server logs show?

Try to re-apply the correct secret.

Re: After power outage, WLC not correctly transacting with RADIUS serv

jonathan.maxwell — Mon, 23 May 2022 15:05:54 GMT

Thank you all for your input. I appreciate it indeed.

The problem is solved...

The WLC's were authenticating through an AD network policy server to a radius server. After the power outage it is unknown why the AD radius server authentication is failing.

The solution was to eliminate the authentication path through the AD network policy server, and instead connect the WLC’s directly to RADIUS servers.

Thank you all.