AD Authentication Failure

[Tesfaye41175]

We have embeded 9115 EWC and we have enabled AD authentication. If the AD server shuts down and doesn't power up before WLC AD, when the users tries to connect there will be an error "Authentication server unavailable" and our IOS software version is 17.3.1. IS there any way to fix this without having to restart the WLC? Or can it be because of another cause?

[balaji.bandi]

is this for device authentication ? may be worth configure Local authentication fall back.

[Tesfaye41175]

HI it is for Wireless users authentication. You mean local authentication by layer 2 802.1x authentication

[Flavio Miranda]

Hi

 If AD does not Power up before the WLC users get the message "authentication server unavailable? But, would not be it the expected behavior? If the AD still down, how can possibly the WLC authenticate any user?

[Tesfaye41175]

Even after AD power up it doesnt authenticate. The AD has to be up first before the WLC..is that normal?

[Flavio Miranda]

 On that case, surely not. Sounds to me like a bug. I´d recommend change the version.

[marce1000]

 - In any case  proper MS-AD environment , usually has multiple AD's (recommended 3 at minimum) use or configure them all , or denote a domain as where the AD's can be automatically found (possible in some environments too, (perhaps not always))

 M.

[MHM Cisco World]

the issue is not connect between EWC and AD, 
the issue is EWC mark the host as Un-auth and reject to auth again.
check the EWC user auth.
try increase dead-time.