topic Re: Freeradius WLC wrong User-Password in Wireless

Freeradius WLC wrong User-Password

Support ACME — Fri, 07 Jul 2023 08:45:42 GMT

Dear ALL,

I'm implement the WLC + Freeradius for MAC auth, but i found the WLC always sending the "secret" as User-Password in "User-Password" attribute, the Freeradius will show "Access-Reject", if the freeradius attribute’s Cleartext-Password to “secret”, the AAA test result is show “Access-Accept” with any password, it very strange.

anyone can help?

(Cisco Controller) >test aaa radius username c21506d39b6e password c21506d39b6e wlan-id 22

Radius Test Request

Wlan-id........................................ 22

ApGroup Name................................... none

Attributes Values

---------- ------

User-Name c21506d39b6e

Called-Station-Id 10.2.254.196

Calling-Station-Id 00:11:22:33:44:55

Nas-Port 0x00000008 (8)

Nas-Ip-Address 10.2.254.196

Nas-Ipv6-Address 2002:dfff:8302:2::2

NAS-Identifier WLC

Airespace / WLAN-Identifier 0x00000016 (22)

User-Password secret

Service-Type 0x00000008 (8)

Framed-MTU 0x00000514 (1300)

Nas-Port-Type 0x00000013 (19)

Tunnel-Type 0x0000000d (13)

Tunnel-Medium-Type 0x00000006 (6)

Tunnel-Group-Id 0x00000065 (101)

--More-- or (q)uit

Cisco / Audit-Session-Id 0a02fec4001f1f5b64a7c743

Acct-Session-Id 64a7c743/00:11:22:33:44:55/2223857

test radius auth request successfully sent. Execute 'test aaa show radius' for response

(Cisco Controller) >

Re: Freeradius WLC wrong User-Password

Mark Elsen — Fri, 07 Jul 2023 08:56:57 GMT

- Have a checkup review of the controller configuration according to https://community.cisco.com/t5/networking-knowledge-base/show-the-complete-configuration-without-breaks-pauses-on-cisco/ta-p/3115114#toc-hId-1039672820 , have the output analyzed with https://cway.cisco.com/wireless-config-analyzer/
Also look into https://www.cisco.com/c/en/us/support/docs/wireless/wireless-lan-controller-software/200046-tac-recommended-aireos.html , especially if you are currently on an older release it would be strongly advised to upgrade and test again ,

Re: Freeradius WLC wrong User-Password

Mark Elsen — Fri, 07 Jul 2023 10:49:42 GMT

- Adding : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuc21803

Re: Freeradius WLC wrong User-Password

Flavio Miranda — Fri, 07 Jul 2023 11:26:18 GMT

Hi @Support ACME

There is this document available by cisco on how to setup freeradius and wlc, in case you did not see yet.

https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/211263-Configure-802-1x-PEAP-with-FreeRadius.html

Re: Freeradius WLC wrong User-Password

Rich R — Sun, 09 Jul 2023 11:42:31 GMT

What version of software are you using?