topic Re: ap 9115 fail log in Wireless

ap 9115 fail log

heyjunsun — Thu, 14 Mar 2024 07:54:16 GMT

hello

I'm trying to access the AP after setting up, but I can't. Is it possible to do log analysis?

ap->radius server Ping communication is possible.

ID/PW is also correct. When I try to connect to ssid on my device, I can't connect and the logs are piling up, what could be the problem?

The version is the latest recommended version, and I suspected compatibility problems and tried various devices.

sh tech wireless (result)

"Authentication: Profile(s) with AAA Policy pointing to non-existing value. Profile: default-policy-profile

Action: Check the configuration item, and change/replace it with an existing value"

If you check the settings I put in in the GUI through the CLI

"aaa new-model"

"aaa authentication dot1x default2 local group radius"

"aaa authorization network default local group radius"

"aaa accounting network default start-stop group radius"

"aaa server radius dynamic-author"

client xxx.xxx.xxx.xxx

"aaa session-id common"

"no fips authorization-key"

Is there a setting I've missed?

Re: ap 9115 fail log

Mark Elsen — Thu, 14 Mar 2024 07:55:18 GMT

- Check the radius server's logs for the particular authentications ,

Re: ap 9115 fail log

balaji.bandi — Thu, 14 Mar 2024 08:17:04 GMT

Can you provide more information -

1. is the AP register with WLC ?

2. AP acting as EWC ?

I try to connect to ssid on my device, I can't connect and the logs are piling up, what could be the problem?

what end device ? what logs you getting ?

check the configuration guide :

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213911-understand-catalyst-9800-wireless-contro.html#toc-hId-1945969904

Re: ap 9115 fail log

heyjunsun — Thu, 14 Mar 2024 08:27:17 GMT

AP wants to operate without a controller.

The device is a phone. When I try to connect the SSID on the phone, I cannot connect.

The log that occurs is

Mar 14 04:57:07.553: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: Cisco] [Source: 172.19.96.11] [localport: 23] at 04:57:07 UTC Thu Mar 14 2024
Mar 14 05:00:24.664: %SYS-5-CONFIG_I: Configured from console by Cisco on console
Mar 14 05:01:40.604: %DOT1X-5-FAIL: Chassis 1 R0/0: wncd: Authentication failed for client (c6cf.3c56.74b2) with reason (Cred Fail) on Interface capwap_90000004 AuditSessionID E76013AC0000001845F9FC4C Username: 191918
Mar 14 05:01:40.604: %SESSION_MGR-5-FAIL: Chassis 1 R0/0: wncd: Authorization failed or unapplied for client (c6cf.3c56.74b2) on Interface capwap_90000004 AuditSessionID E76013AC0000001845F9FC4C. Failure reason: Authc fail. Authc failure reason: Cred Fail.
Mar 14 05:01:44.242: %DOT1X-5-FAIL: Chassis 1 R0/0: wncd: Authentication failed for client (c6cf.3c56.74b2) with reason (Cred Fail) on Interface capwap_90000004 AuditSessionID E76013AC0000001945FA0AA6 Username: 191918
Mar 14 05:01:44.243: %SESSION_MGR-5-FAIL: Chassis 1 R0/0: wncd: Authorization failed or unapplied for client (c6cf.3c56.74b2) on Interface capwap_90000004 AuditSessionID E76013AC0000001945FA0AA6. Failure reason: Authc fail. Authc failure reason: Cred Fail.
Mar 14 05:02:02.405: %DOT1X-5-FAIL: Chassis 1 R0/0: wncd: Authentication failed for client (c6cf.3c56.74b2) with reason (Cred Fail) on Interface capwap_90000004 AuditSessionID E76013AC0000001A45FA5189 Username: 191918
Mar 14 05:02:02.405: %SESSION_MGR-5-FAIL: Chassis 1 R0/0: wncd: Authorization failed or unapplied for client (c6cf.3c56.74b2) on Interface capwap_90000004 AuditSessionID E76013AC0000001A45FA5189. Failure reason: Authc fail. Authc failure reason: Cred Fail.
Mar 14 05:02:02.406: %CLIENT_EXCLUSION_SERVER-5-ADD_TO_EXCLUSIONLIST_REASON_DYNAMIC: Chassis 1 R0/0: wncd: Client MAC: c6cf.3c56.74b2 was added to exclusion list associated with AP Name:APAC2A.A110.EEAC, BSSID:MAC: e438.7e79.744f, reason:802.1X authentication credential failure
Mar 14 05:04:42.545: %DOT1X-5-FAIL: Chassis 1 R0/0: wncd: Authentication failed for client (c6cf.3c56.74b2) with reason (Cred Fail) on Interface capwap_90000004 AuditSessionID E76013AC0000001B45FCBB82 Username: 191918
Mar 14 05:04:42.547: %SESSION_MGR-5-FAIL: Chassis 1 R0/0: wncd: Authorization failed or unapplied for client (c6cf.3c56.74b2) on Interface capwap_90000004 AuditSessionID E76013AC0000001B45FCBB82. Failure reason: Authc fail. Authc failure reason: Cred Fail.

I don't know what I'm missing. AAA server ping is possible, and there's a WLAN and SSID. However, the client won't stick when connecting. On the phone and on AP WEBUI

Re: ap 9115 fail log

heyjunsun — Thu, 14 Mar 2024 08:27:50 GMT

hello

Are you saying to check it on the Radius server?