topic Authentication Issues with Radius in Wireless

Authentication Issues with Radius

ccie_ma — Tue, 30 Nov 2021 17:52:38 GMT

Hi
I can see loads of authentication issues for the SSID which is configured for Radius authentication.

A lot of same clients that report failed aunthentication later report successful authentication. Anyone else experiencing this ?

Thanks,

Mariam

Re: Authentication Issues with Radius

Philip D'Ath — Tue, 30 Nov 2021 18:02:26 GMT

No. What does your RADIUS server log report for the failed authentication attempts?

Re: Authentication Issues with Radius

ccie_ma — Wed, 01 Dec 2021 12:07:07 GMT

Thanks for your response. I do not have access to Radius server log. But will propose this to the team who owns it. So in a typical environment we expect to see 0% authentication issues and 0% DHCP issues unlike association issues which can be present just because the client tried to connect two APs at the same time and then chose one ?

Re: Authentication Issues with Radius

Karsten Iwen — Wed, 01 Dec 2021 12:12:12 GMT

The authentication issues should have a quite small number but are not typically 0%. The authentication exchange could fail because of roaming away, packet loss, or other problems while authenticating.

Re: Authentication Issues with Radius

ccie_ma — Tue, 07 Dec 2021 11:15:08 GMT

Thanks @Karsten Iwen for your response. If the client roams away, I expect it to log the error in Association stage not in any of the subsequent stages. Is that not right ?

Re: Authentication Issues with Radius

Karsten Iwen — Tue, 07 Dec 2021 11:40:49 GMT

Typically yes, but with successfully association at the cell edge, the multi-packet EAP-exchange with larger payload has a quite high likelihood to also fail.