RADIUS auth with WLC username unknown

[atsukane]

Hi all,

I've  noticed some some, not all, guest WLAN usernames are showing as Unknown.

Searched MAC addresses on the ISE RADIUS live logs for a handfull of users that have username displayed correctly and showing as Unknown.

It appears to me that 'Unknown' users have  '5200 Authentication succeeded' and Username field has device MAC, whereas ones usernames are displayed correctly have '5236 Authorize-Only succeeded' event ID logged.

Any idea what might be causing this behaviour? 

Not sure when this has started but I'm sure the usernames used to be displayed correctly. 

ISE 2.4.0.357 patch 11

WLC 8.5.161.0

Many thanks,

[hslai]

ISE 2.4+ by default masks usernames for most of the failures (e.g. User not found). Although there is an option to disclose invalid username, CSCvr08083 is a known limitation for guest auth.

[atsukane]

Thanks for this info and apologies for the late response, went on spontaneous holiday and forgot about the post!

In our case, it's not shown as 'INVALID'.