topic Re: authentication failed at 9800 in Wireless

authentication failed at 9800

Leftz — Tue, 22 Mar 2022 16:12:37 GMT

Hi we got log info from wlc 9800 for a user who has intermittent connection to wifi. Please see the below log info. there are some Authentication failed. Can we say it is caused by typing wrong password? if not, what is most possible reason for this?

Thank you

2022/02/1 02:03:04.183292 {wncd_x_R0-0}{1}: [errmsg] [17774]: (note): %DOT1X-5-FAIL: Authentication failed for client (8567.eeee.111a) with reason (Timeout) on Interface capwap_9000001d AuditSessionID 1SDAFPOGIREJRKTA Username: abc@ciscohelp-group.com
2022/02/1 02:03:04.183419 {wncd_x_R0-0}{1}: [ewlc-infra-evq] [17774]: (ERR): SANET_AUTHC_FAILURE - Timeout username abc@ciscohelp-group.com, audit session id 1SDAFPOGIREJRKTA,

Re: authentication failed at 9800

balaji.bandi — Tue, 22 Mar 2022 15:25:21 GMT

Where do you see this error on Controller or Radius ? (what radius servers ?)

Re: authentication failed at 9800

Leftz — Tue, 22 Mar 2022 16:09:48 GMT

Thanks balaji for your reply. this log above is from wlc 9800. we use ise. it also shows some eap error

Re: authentication failed at 9800

Mark Elsen — Tue, 22 Mar 2022 16:39:08 GMT

- FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvy06641

Re: authentication failed at 9800

addy_johny — Sat, 19 Aug 2023 04:56:34 GMT

Hi,

I am in process of migration from Cisco 2500 to Cisco 9800-CL azure. We are using windows nps server with PEAP-EAP. All machines have certificate. There is GP policy pushed for wireless profile. Everything is working fine on Cisco 2500 but when users try to connect to Cisco 9800-CL broadcasted ssid. It throws same error as mentioned in this post.

Re: authentication failed at 9800

addy_johny — Sat, 19 Aug 2023 04:58:17 GMT

Just to add I have checked running config there is no line as such below.

Workaround: ****REMOVE "key-wrap enable" command on "aaa group server radius" section.