EAP-FAST problem on 1142 - Unknown usernames

Augustgood · ‎10-13-2016

Hi

i configure local radius server on ap 1142n, with my anyconnect can't connect with eap-fast.

this my config:

aaa new-model
!
aaa group server radius rad_group
server name AAP1

!
aaa authentication login AAP1 group rad_group

!
dot11 ssid WPAEAP
vlan 15
authentication open eap AAP1
authentication network-eap AAP1
authentication key-management wpa
mbssid guest-mode

radius-server local
no authentication leap
no authentication mac
nas 10.10.110.100 key 7 011A1601431B031D35
user auto1 nthash 7 02245D7E5F205D73151F5B3F5636415B2A217E08700E67667040544F2250707F0A
user auto2 nthash 7 0326022E5229731E17584B234433585C220F7F077C1561714154455A20077F7E01
user auto nthash 7 06555C751816504D5632415E5F277D7E017C116D7645264F5A500F0C0F00715F26
!
!
radius server AAP1
address ipv4 10.10.110.100 auth-port 1812 acct-port 1813
key 7 151B1B091C3A2E363C

The output of show radius local-server station show:

unknonw usernames 245 !!!!

help me please.

versione 15.3.3 JC

Rasika Nayanajith · ‎10-13-2016

I think it is an issue with the software versions of your AP & compatibility with AnyConnect.

I am sure this will work if you downgrade your AP to a code like this (c1140-k9w7-tar.124-25d.JA.tar). Below is my reference configs

https://mrncciew.com/2013/04/28/wgb-with-eap-fast/

HTH

Rasika

*** Pls rate all useful responses ***

Augustgood · ‎10-14-2016

hi,

what is your anyconnect version ??

please help me ..i'm crazy for this...work with external radius....

Rasika Nayanajith · ‎10-14-2016

I am using Anyconnect 4.2.04039

It is not the AnyConnect version, but AP IOS version. If you use 12.x you can see it is working even AP using as local radius.

HTH

Rasika

*** Pls rate all useful responses ***

Augustgood · ‎10-15-2016

In my opinion the proble is on anyconnect..not the release..

in the debug log seem that anonymous cliet try access... but ti use this is wrong...

i use the latest version of any connect 4.3.... uff

Augustgood · ‎10-15-2016

Excuse me rasika, where did you found this incompatibility issue..????

Rasika Nayanajith · ‎10-16-2016

I tested this myself with different version of AP IOS image. with 15.x I could not get it working with AnyConnect, but works well with 12.x code

HTH

Rasika

Augustgood · ‎10-25-2016

boo

i will try...