topic dot1x authentication in Wireless

dot1x authentication

bluesea2010 — Wed, 20 Mar 2024 11:13:11 GMT

Hi,

users are complaining when they connect dot1x , it s disconnecting they need to reconnect but where as wpa2 it does not disconnect .What are the troubleshooting steps

Thanks

Re: dot1x authentication

Mark Elsen — Wed, 20 Mar 2024 11:31:22 GMT

- Please elaborate on your wireless environment ; is there a controller ? What is the model ? What kind of APs ; which software versions are in place ?

Re: dot1x authentication

Jerome BERTHIER — Wed, 20 Mar 2024 12:51:13 GMT

Can you share detailled security settings of the WLANs working / not working ? and client types ?

Re: dot1x authentication

MHM Cisco World — Wed, 20 Mar 2024 14:16:17 GMT

You use ISE?

MHM

Re: dot1x authentication

bluesea2010 — Wed, 20 Mar 2024 14:20:36 GMT

Hi,

Controller 9800-80-K9 ,Ap 9120 AX

17.06.06

Re: dot1x authentication

bluesea2010 — Wed, 20 Mar 2024 14:54:27 GMT

Yes

Re: dot1x authentication

MHM Cisco World — Wed, 20 Mar 2024 15:05:22 GMT

check if ISE return shut or port bunce with CoA

MHM

Re: dot1x authentication

Mark Elsen — Wed, 20 Mar 2024 16:39:40 GMT

- To start with have a checkup of the 9800 WLC configuration with the CLI command show tech wireless and feed the output to : Wireless Config Analyzer

- For disconnecting clients engage in full client debugging according to https://logadvisor.cisco.com/logadvisor/wireless/9800/9800ClientConnectivity , these debugs can be analyzed with Wireless Debug Analyzer

- Outputs from the commands mentioned in https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/217738-monitor-catalyst-9800-kpis-key-performa.html#anc5 can also be useful

- If possible go to version 17.9.5 (to become a next advisory release)

Re: dot1x authentication

bluesea2010 — Thu, 21 Mar 2024 03:12:19 GMT

Hi ,

Do you think this is due to the client reauthentication ,I mean due to client or server session timeout configured in cisco ise or wlc ?

Thanks