cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to the Cisco Small Business Community

Have a question? Click on a topic board below to get started in the community.

660
Views
0
Helpful
1
Replies
cg
Beginner
Beginner

WAP121 or WAP321 radius timeout 2FA

Hello,

 

We have setup two factor authentication (2FA) for our wireless networks using these devices. We have tested with a DUO radius server that uses a phone as the second factor. While it works fine you have less than 7 seconds to approve the request on the phone otherwise the authentication fails. This seems to be a common issue for radius clients like the WAP121 because they do not allow you to configure a timeout. Is there any way to resolve this with either a WAP121 or WAP321?

 

1 REPLY 1
cg
Beginner
Beginner

So it looks like all WAP models from the 100's to the 500's suffer from the same issue. So unless anyone can show otherwise all Cisco WAP models cannot be used for two factor authentication.