cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Who Me Too'd this topic

Find a host that keeps failing authentication

Greg Dickinson
Level 1
Level 1

I have a WLC 2504 that is using RADIUS authentication for two of our three SSIDs.  In my logs, I keep getting two hosts that are attemtpting to authenticate over and over, with obviously incorrect usernames for our environment.  I have the suspicion that these constant authentication requests are causing issues with our Windows servers that actually handle authentication, so I'm wondering is there a way to find the MAC addresses for the offending machines and ban them from the wireless network so they stop spamming my RADIUS server   I mean they're not getting access through our network anyway so I don't have a problem kicking them entirely.

All I have in the log is this:

0Fri Aug  9 13:38:12 2013AAA Authentication Failure for UserName:1310260130521226@wlan.mnc260.mcc310.3gppnetwork.org  User Type: WLAN USER
1Fri Aug  9 13:38:07 2013AAA Authentication Failure for UserName:1310260130521226@wlan.mnc260.mcc310.3gppnetwork.org  User Type: WLAN USER
2Fri Aug  9 13:37:42 2013AAA Authentication Failure for UserName:1310260130521226@wlan.mnc260.mcc310.3gppnetwork.org  User Type: WLAN USER
3Fri Aug  9 13:37:37 2013AAA Authentication Failure for UserName:1310260130521226@wlan.mnc260.mcc310.3gppnetwork.org  User Type: WLAN USER
4Fri Aug  9 13:37:31 2013AAA Authentication Failure for UserName:1310260130521226@wlan.mnc260.mcc310.3gppnetwork.org  User Type: WLAN USER
Who Me Too'd this topic