topic Re: 802.1X RADIUS failed in Wireless

802.1X RADIUS failed

msilva — Tue, 14 Nov 2023 16:28:13 GMT

My users are getting intermittent 802.1X RADIUS failed errors every so often throughout the day.

disconnect last 1-2 secs enough to drop a call or lose internet connection..

anyone experience these types of issues?

Re: 802.1X RADIUS failed

Raphael_L — Tue, 14 Nov 2023 16:34:27 GMT

Hi ,

We are missing a lot of info here.

What version are you running ?

What firmware version are you running ?

What AP models ?

SSID Configurations ?

802.11r enabled ?

Any logs from Wireless health ?

Re: 802.1X RADIUS failed

Philip D'Ath — Tue, 14 Nov 2023 17:57:58 GMT

A RADIUS failure is usually related to ether the RADIUS server or the device.

What does the RADIUS server log say? Did it see the request? Did it decline the request, and if so, what reason did it give?

What does the client event log say?

Re: 802.1X RADIUS failed

msilva — Tue, 14 Nov 2023 18:13:16 GMT

What version are you running ? MR 29.4.1

What firmware version are you running ?

What AP models ? MR 44

SSID Configurations ? 802.1X with radius

802.11r enabled ?

Any logs from Wireless health ?

Client xxxxxxx had a failed connection to SSID XXXX during authentication because the auth server rejected the auth request.
802.11 REASON (CODE 23)
802.1X RADIUS failed

Re: 802.1X RADIUS failed

msilva — Tue, 14 Nov 2023 18:25:40 GMT

Event 5400 Authentication failed
Failure Reason 15039 Rejected per authorization profile
Resolution Authorization Profile with ACCESS_REJECT attribute was selected as a result of the matching authorization rule. Check the appropriate Authorization policy rule-results.
Root cause Selected Authorization Profile contains ACCESS_REJECT attribute

even tho we get the message above, user reconnects within seconds - issue is that the disconnect happens frequent throughout the day

we are looking at increasing timeout setting to 5 secs from 1 sec.

Re: 802.1X RADIUS failed

Philip D'Ath — Tue, 14 Nov 2023 19:22:06 GMT

I wouldn't worry about the timeouts while your RADIUS server is saying it is refusing the connection. What about your authorization profile is causing it to reject the connection?

What is your RADIUS server? Cisco ISE? Something else?

Re: 802.1X RADIUS failed

msilva — Tue, 14 Nov 2023 19:40:21 GMT

We use Cisco ISE, as for the auth profile we only have one for all our internal users.

The weird thing is that the user actually is able to connect but randomly gets disconnected a few times throughout the day. The disconnect is 2-3 secs

Re: 802.1X RADIUS failed

Iherrera — Tue, 29 Oct 2024 15:40:21 GMT

Hola,

Logró resolver este problema? De ser así, Como lo soluciono?