topic Re: 30.7 Update Breaks RADIUS in Wireless

30.7 Update Breaks RADIUS

jpeter — Tue, 16 Jul 2024 01:16:42 GMT

We just recently upgraded our eligible APs to 30.7 from 30.5. Immediately afterward all 802.11 auth attempts to our RADIUS servers failed. Thus, we rolled back to 30.5. Has anyone else encountered this issue? I see in the 30.7 release notes a reference to a fix for RADIUS requests when if they had exited the primary management interface if an AMI was defined. In our environment we don't have a AMI defined.

Re: 30.7 Update Breaks RADIUS

Brash — Tue, 16 Jul 2024 01:33:56 GMT

What are you using for your RADIUS server?

We have upgraded our fleet to 30.7 and are using RADIUS authentication without issue.

Re: 30.7 Update Breaks RADIUS

Ambuj M — Tue, 16 Jul 2024 02:43:51 GMT

I have 30.7 in production and a test lab on 31.1.2 no issues with radius, I am using Cisco ISE as radius.

can you share more information like, if you are seeing logs on radius and share the logs to understand why radius authentication is failing.

Re: 30.7 Update Breaks RADIUS

msissons — Tue, 16 Jul 2024 09:41:48 GMT

Hi jpeterprarch,

There is an issue in the 30.7 firmware, under very specific configurations, whereby client balancing rejects clients. This may be what you were seeing when you upgraded.

If you have not already, I would recommend raising a case with Meraki support so they can assist with troubleshooting this issue to help determine whether you were indeed affected by this.
Details on how to raise a case through dashboard or to call the support line can be found within the 'Get help & cases' page which is accessible in the ? icon menu in dashboard.

Re: 30.7 Update Breaks RADIUS

Raphael_L — Tue, 16 Jul 2024 15:16:01 GMT

Exact same setup as @ammahend , running without any issues.

WPA2-Enterprise , Cisco ISE reachable via AutoVPN.

Re: 30.7 Update Breaks RADIUS

skunkytoots — Tue, 16 Jul 2024 15:57:57 GMT

30.7 broke Radius for my org as well

Re: 30.7 Update Breaks RADIUS

Brad39 — Thu, 18 Jul 2024 06:13:57 GMT

Hi ,

Adding to this as well, we have upgraded to 30.7 and have seen two networks with the same issue, generic Association errors with SSIDs with Radius Auth. Running Windows NPS. Will Raise a support ticket to investigate.

Re: 30.7 Update Breaks RADIUS

pjc — Thu, 18 Jul 2024 09:31:03 GMT

@skunkytoots and @Brad39 do you both have client balancing enabled on the affected networks ? I've scheduled 30.7 upgrades for next week and we run NPS Radius but we don't use client balancing

Thanks

Re: 30.7 Update Breaks RADIUS

jpeter — Thu, 18 Jul 2024 12:37:30 GMT

We're using Windows NPS. The requests never hit the NPS servers therefore there's nothing to see in the logs.

Re: 30.7 Update Breaks RADIUS

jpeter — Thu, 18 Jul 2024 12:38:07 GMT

Ah, thanks. I have opened a case and waiting to hear back.

Re: 30.7 Update Breaks RADIUS

jpeter — Thu, 18 Jul 2024 13:29:21 GMT

Yes we have Client Balancing enabled. Perhaps we fall under "very specific configurations".

Re: 30.7 Update Breaks RADIUS

jpeter — Thu, 18 Jul 2024 13:30:15 GMT

I'd be curious to hear what you hear from support. So far I have yet to hear back.

Re: 30.7 Update Breaks RADIUS

Brad39 — Thu, 18 Jul 2024 23:01:13 GMT

We have it on, however we tested turning this off to try and fix the issue but didn’t help

Re: 30.7 Update Breaks RADIUS

ChristianHenn — Fri, 19 Jul 2024 09:09:30 GMT

We had the exact same issue. The only solution was to rollback.

Re: 30.7 Update Breaks RADIUS

pjc — Fri, 19 Jul 2024 10:24:41 GMT

I've decided to postpone my planned rollout of 30.7. Although we don't use client balancing, @Brad39 stating that turning off client balancing didn't solve the issue is enough for me to be nervous about this, despite me running 30.7 in a small live environment (2 x MR44's) for the past week without issues with radius auth (my normal live test firmware update environment)

Re: 30.7 Update Breaks RADIUS

ChristianHenn — Mon, 22 Jul 2024 08:03:18 GMT

Meraki support said there is no known bug. Difficult to troubleshoot this topic when the manufacture can't confirme the bug.

Re: 30.7 Update Breaks RADIUS

jpeter — Mon, 22 Jul 2024 13:01:22 GMT

Well. @Meraki. Look again. I received a single response from support asking the obvious questions. Haven't heard back.

Re: 30.7 Update Breaks RADIUS

Brad39 — Tue, 23 Jul 2024 01:54:26 GMT

It’s a strange one, in the end this looks to have only affected 2 out of around 30 networks in our org, all very similarly configured. We are just going to hold off on 30.7 for those two and possibly jump to the next release.

Re: 30.7 Update Breaks RADIUS

redsector — Wed, 24 Jul 2024 10:05:49 GMT

I have got the same issue

Re: 30.7 Update Breaks RADIUS

redsector — Wed, 24 Jul 2024 10:07:38 GMT

I have got also issues with Cisco ISE 3.2 Errors occured since ugrading ISE from 2.7 to 3.2 and Meraki MR30.6 to MR30.7