Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello community,I have a problem with 802.1x PEAP authentication.The environment is WLC 17.9.4 and ISE 2.4.APs are in local switching.When user tries to connect, I see request on ISE and then authentication times out.ISE says "5440 Endpoint abandon...
a client only needs to verify server cert. but this is not important because we never reach this step.I don't want to post picture of EAP process here, the process is failing on the "radius access request" from WLC, and then repose from ISE to WLC.
I got successful auth, but the time is high.The problem is related to ISE.WLC also does weird stuff, test aaa group ISE-GRP <USER> =password= new-code returns result after a several seconds, definitely below EAP timeo...
I found a problem, but don't know the reason or the cause.check the picture bellow. Routing is not a problem, WLC can reach ISE all the time.Problem is that WLC waits after receiving "eap identify response" to send RADIUS access request ti ISE.And it...
sorry but are you a bot?If something was blocking the traffic, wouldn't is see the traffic going out of the interface? and there would not be return traffic?I don't see traffic going out of WLC, how does the WLC knows that the network is unreachable?
I found out that WLC does not send radius to ISE due to the network error:what could be reason for this?Once client stops trying, WLC will send messages to ISE and get response, but by that time, the initial session will already expire2023/11/29 15:3...