Hi Everyone, I'm hoping someone will be able to help me out here. The problem is that with any EAP method of authentication that utilizes authentication with a certificate or smart card the switch will somehow impede authentication with the radius server. The EAP Methods I have tried on a SG-300-28P and ESW-540-24p switch are: EAP-TLS EAP-FAST PEAP (Smart Card) Smart Card I know that the radius server works because when I switch to a different switch the client works just fine, or if I keep the client on this switch and use any password method (PEAP (MSCHAPv2), MSCHAPv2, EAP-MD5) it also works. The log file for EAP-FAST on a SG-300 switch is: 2147483643 2012-Jan-27 00:28:34 Informational %LINK-I-Up: gi10, aggregated (1) 2147483644 2012-Jan-27 00:28:31 Warning %LINK-W-Down: gi10, aggregated (1) 2147483645 2012-Jan-27 00:28:31 Informational %LINK-I-Up: gi10 2147483646 2012-Jan-27 00:28:16 Warning %LINK-W-Down: gi10 I noticed that on this method it doesnt even report a result from the radius server, however the radius server reports an EAP Timeout The log file for EAP-TLS on a SG-300 switch is: 2147483642 2012-Jan-27 00:37:00 Warning %SEC-W-SUPPLICANTUNAUTHORIZED: MAC xx:xx:xx:xx:xx:xx was rejected on port gi10 because Radius server does not respond 2147483643 2012-Jan-27 00:36:23 Informational %LINK-I-Up: gi10, aggregated (1) 2147483644 2012-Jan-27 00:36:20 Warning %LINK-W-Down: gi10, aggregated (1) 2147483645 2012-Jan-27 00:36:20 Informational %LINK-I-Up: gi10 2147483646 2012-Jan-27 00:36:02 Warning %LINK-W-Down: gi10 In both cases the radius server logged a EAP Timeout. Again this only happens when any EAP method or version of authentication used deals with certificate authentication. Only with the 3 Cisco small business switches we have, have I ran into this problem. The Cisco Aironet and Other Switches (by other manufacturers) work just fine. Please help me. Thanks! zidacjarrett
... View more
