30.7 Update Breaks RADIUS

[jpeter]

We just recently upgraded our eligible APs to 30.7 from 30.5. Immediately afterward all 802.11 auth attempts to our RADIUS servers failed. Thus, we rolled back to 30.5. Has anyone else encountered this issue? I see in the 30.7 release notes a reference to a fix for RADIUS requests when if they had exited the primary management interface if an AMI was defined. In our environment we don't have a AMI defined.

[Brash]

What are you using for your RADIUS server?

We have upgraded our fleet to 30.7 and are using RADIUS authentication without issue.

[jpeter]

Windows NPS

[Ambuj M]

I have 30.7 in production and a test lab on 31.1.2 no issues with radius, I am using Cisco ISE as radius.

can you share more information like, if you are seeing logs on radius and share the logs to understand why radius authentication is failing.

[Raphael_L]

Exact same setup as @ammahend , running without any issues.

WPA2-Enterprise , Cisco ISE reachable via AutoVPN.

[jpeter]

We're using Windows NPS. The requests never hit the NPS servers therefore there's nothing to see in the logs.

[Ambuj M]

out of curiosity re-enter shared secret again on both side and see if it changes anything.

[msissons]

Hi jpeterprarch,

There is an issue in the 30.7 firmware, under very specific configurations, whereby client balancing rejects clients. This may be what you were seeing when you upgraded.

If you have not already, I would recommend raising a case with Meraki support so they can assist with troubleshooting this issue to help determine whether you were indeed affected by this.
Details on how to raise a case through dashboard or to call the support line can be found within the 'Get help & cases' page which is accessible in the ? icon menu in dashboard.

[jpeter]

Ah, thanks. I have opened a case and waiting to hear back.

[ChristianHenn]

Meraki support said there is no known bug. Difficult to troubleshoot this topic when the manufacture can't confirme the bug.

[jpeter]

Well. @Meraki. Look again. I received a single response from support asking the obvious questions. Haven't heard back.

[redsector]

I did open a case but they didn´t really understand the problem.

[skunkytoots]

30.7 broke Radius for my org as well

[Brad39]

Hi ,

Adding to this as well, we have upgraded to 30.7 and have seen two networks with the same issue, generic Association errors with SSIDs with Radius Auth. Running Windows NPS. Will Raise a support ticket to investigate.

[jpeter]

I'd be curious to hear what you hear from support. So far I have yet to hear back.