Hi again,
Using the client debug on the wlc, I got this:
Apr 20 12:06:39 wlc1 wlc1: *Dot1x_NW_MsgTask_0: Apr 20 12:06:39.746: %DOT1X-3-INVALID_REPLAY_CTR: 1x_eapkey.c:360 Invalid replay counter from client 00:1f:6c:77:78:ba - got 00 00 00 00 00 00 00 02, expected 00 00 00 00 00 00 00 05
Apr 20 12:06:40 wlc1 wlc1: *dot1xMsgTask: Apr 20 12:06:40.953: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 00:1f:6c:77:78:ba
Apr 20 12:08:07 wlc1 wlc1: *Dot1x_NW_MsgTask_0: Apr 20 12:08:07.048: %DOT1X-3-ABORT_AUTH: 1x_bauth_sm.c:447 Authentication aborted for client 00:1f:6c:77:78:ba
On the radius server I can see:
Apr 20 12:07:00 rad1 radiusd[10962]: Disconnect: [myusername] (did 00-23-eb-08-22-30 cli 00-1f-6c-77-78-ba port 1 ip 10.3.15.233) 69755 seconds
Apr 20 12:08:13 rad1 radiusd[10962]: Login OK: [001f6c7778ba] (from client wlc1 port 1 cli 00-1f-6c-77-78-ba)
Apr 20 12:08:13 rad1 radiusd[10962]: Login OK: [myusername] (from client wlc1 port 0 via TLS tunnel)
Apr 20 12:08:13 rad1 radiusd[10962]: Login OK: [myusername] (from client wlc1 port 1 cli 00-1f-6c-77-78-ba)
Apr 20 12:08:20 rad1 radiusd[10962]: Connect: [myusername] (did 00-23-eb-08-22-30 cli 00-1f-6c-77-78-ba port 1 ip 10.3.15.233)
I don't know if it helps...