cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
776
Views
0
Helpful
1
Replies

WAP121 or WAP321 radius timeout 2FA

cg
Beginner
Beginner

Hello,

 

We have setup two factor authentication (2FA) for our wireless networks using these devices. We have tested with a DUO radius server that uses a phone as the second factor. While it works fine you have less than 7 seconds to approve the request on the phone otherwise the authentication fails. This seems to be a common issue for radius clients like the WAP121 because they do not allow you to configure a timeout. Is there any way to resolve this with either a WAP121 or WAP321?

 

1 Reply 1

cg
Beginner
Beginner

So it looks like all WAP models from the 100's to the 500's suffer from the same issue. So unless anyone can show otherwise all Cisco WAP models cannot be used for two factor authentication.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers