cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5248
Views
0
Helpful
8
Replies

Authentication client failed 802.1x authentication to the RADIUS Server issue

keithli
Level 3
Level 3

Dear All,

I'm currently facing an issue with one AP in our customer's site, one AP has the following warning with specific ssid, whereas the rest of the AP do not have such issue, i have ran the radius test in the portal, but all of them has passed the radius authentication test, also i have tried to look for the NPS radius server logs, i couldn't find any authentication failure related, any help would be appreicated

image.jpeg

Keith

8 Replies 8

Rasmus Hoffmann Birkelund
Meraki Community All-Star
Meraki Community All-Star

What model AP is it? Tried rebooting the AP?

#########
LinkedIn ::: https://blog.rhbirkelund.dk/
Like what you see? - Mark as helpful ## Did it answer your question? - Mark it as a Solution 🙂
All code examples are provided as is. Responsibility for Code execution is solely your own.

keithli
Level 3
Level 3

i havent tired rebooting the AP yet, but the model is MR44 Current version: MR 29.5.1, Thanks

aleabrahao
Meraki Community All-Star
Meraki Community All-Star

Have you checked if the AP is registered as a Radius Client on the Radius server? Have you tried performing a packet capture?

I am not a Cisco employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.

keithli
Level 3
Level 3

i checked in Radius side the AP has permitted in the server, and other endpoint could successfully connected to the internal SSID, the radius authentication has passed, its only sometime i see such unauthentcation log appear for this AP, i could perform a packet capture to the radius to see any abnomral issue

keithli
Level 3
Level 3

shall i try increase the timeout ?

image.jpeg

Try and increase EAPOL Key Timeout to 1000ms

#########
LinkedIn ::: https://blog.rhbirkelund.dk/
Like what you see? - Mark as helpful ## Did it answer your question? - Mark it as a Solution 🙂
All code examples are provided as is. Responsibility for Code execution is solely your own.

at the same time i'm checking the NPS radius logs see any finding, may be i can increate the EAPOL Key value as well

keithli
Level 3
Level 3

i have increased the Eapol timeout to 1000ms, thanks

Review Cisco Networking for a $25 gift card