cancel
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 
cancel
594
Views
0
Helpful
1
Replies

Cisco NAC Agent Authentication Problem

HK Loh
Level 1
Level 1

Here is my problem:

nac--switch (building A)--infinet wireless--switch (building B)--users (vlan5)
untrust vlan: 305
trust vlan: vlan 5

my workstation at building A with wire connection have  NO problem.
BUT
my workstation at Bulding B with wireless connection failed to authenticate with NAC.

NAC Event Logs can't see any related logs with the issue. I am doing packet tracing at Building A and Building B. The result are wierd because it looks like the workstation are sending IGMP traffic.

igmp.jpg

Can any profesional give some advice to overcome the problem....

1 Reply 1

Tarik Admani
VIP Alumni
VIP Alumni

What vlan are you wireless users on? If they are on vlan 5 then they are on the trusted subnet so their traffic never hits the untrusted interface. If you are using inband virtual gateway then the traffic needs to be on 305 for it to flow through the untrusted interface and through the trusted.