cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Community Helping Community

1056
Views
0
Helpful
3
Replies
Beginner

Find a host that keeps failing authentication

I have a WLC 2504 that is using RADIUS authentication for two of our three SSIDs.  In my logs, I keep getting two hosts that are attemtpting to authenticate over and over, with obviously incorrect usernames for our environment.  I have the suspicion that these constant authentication requests are causing issues with our Windows servers that actually handle authentication, so I'm wondering is there a way to find the MAC addresses for the offending machines and ban them from the wireless network so they stop spamming my RADIUS server   I mean they're not getting access through our network anyway so I don't have a problem kicking them entirely.

All I have in the log is this:

0Fri Aug  9 13:38:12 2013AAA Authentication Failure for UserName:1310260130521226@wlan.mnc260.mcc310.3gppnetwork.org  User Type: WLAN USER
1Fri Aug  9 13:38:07 2013AAA Authentication Failure for UserName:1310260130521226@wlan.mnc260.mcc310.3gppnetwork.org  User Type: WLAN USER
2Fri Aug  9 13:37:42 2013AAA Authentication Failure for UserName:1310260130521226@wlan.mnc260.mcc310.3gppnetwork.org  User Type: WLAN USER
3Fri Aug  9 13:37:37 2013AAA Authentication Failure for UserName:1310260130521226@wlan.mnc260.mcc310.3gppnetwork.org  User Type: WLAN USER
4Fri Aug  9 13:37:31 2013AAA Authentication Failure for UserName:1310260130521226@wlan.mnc260.mcc310.3gppnetwork.org  User Type: WLAN USER
Everyone's tags (4)
3 REPLIES 3
Hall of Fame Master

Re: Find a host that keeps failing authentication

Enable client exclusion and that will block them after 3 failures.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
Hall of Fame Master

Re: Find a host that keeps failing authentication

Also make sure any WLAN that isn't using radius has the checkbox for radius server unchecked.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
Highlighted
Beginner

This may have something to do

CreatePlease to create content
Content for Community-Ad

August's Community Spotlight Awards