topic Re: EAP Timers Best Practice in Wireless

EAP Timers Best Practice

MuhammadHasan — Mon, 24 Jun 2024 04:44:55 GMT

Hi Meraki Community,

I just want to ask about EAP timer settings and the best and most recommended Practice. Currently, we have below settings and Users are experiencing wireless issues as these timers are crossing values. Please suggest.

Re: EAP Timers Best Practice

Rasmus Hoffmann Birkelund — Mon, 24 Jun 2024 07:00:31 GMT

I don't have the answer, as this is something I've been researching myself. But I've found this, which I've been leaning myself towards.

https://community.cisco.com/t5/wireless-mobility-knowledge-base/eap-timers-on-wireless-lan-controllers/ta-p/3122477

Re: EAP Timers Best Practice

aleabrahao — Mon, 24 Jun 2024 09:52:45 GMT

In fact, there is no best practice, in some cases adjustments are necessary (very rarely), but in practice what is configured by default is always used.

Re: EAP Timers Best Practice

Philip D'Ath — Mon, 24 Jun 2024 10:16:28 GMT

I might have to adjust these once in every 1000 installs. Your deployment is not likely to need these changed.

Is the RTT for your RADIUS server under 2s? If so - you don't need to touch anything.

"Currently, we have below settings and Users are experiencing wireless issues as these timers are crossing values"

What is the specific issue you are facing?

Re: EAP Timers Best Practice

Raphael_L — Mon, 24 Jun 2024 13:56:39 GMT

Meraki defaults are just fine but the thing that I dislike is that the default doesn't match the timers from the "Aironet/Catalyst" world. I like to have things setup the same everywhere...

Re: EAP Timers Best Practice

Alejandro Flores — Mon, 24 Jun 2024 17:40:55 GMT

The default EAP timers works fine generally speaking. It depends on your topology, where is your RADIUS connected, on premise or in the Cloud? If the answer is Cloud or across a VPN tunnel, it would be good to check the round trip time and increase the timeouts a lit bit.
Nevertheless your wireless health connection is Excellent, the clients having the connection problems might be not RADIUS timers related. A single client attempting to connect located far from any AP might cause the dashboard health timers to increase.