CISCO IPPhone EAP-TLS roaming issue

[nibinrodrigues]

Hi,

I have configured Cisco IPPhone 7925G with EAP-TLS setting. (With manufacture installed and Userinstalled certificate). My issue is while roaming from 1 AccessPoint to another AccessPoint the call getting droped. I need to restart the IPPhone to reauthentiate again. In ACS am agging the authentication time-out error. (I had changed the time out value for EAP-TLS to 20 in WLC as per recommendation.)

If am using static web key there is no issue in roaming.

Can someone advice what is the reommended setting inorder for the EAP-TLS to work properly.

Thanks

Nibin Rodrigues

[Amjad Abdullah]

Hi,

what is the firmware on your phone? make sure to install the latest. I remember one year ago there were too many problems with the phone firmware.

Are you using CCKM for your WLAN?

You use local or HREAP access points?

APs connected to same WLC? or different WLCs?

Regards,

Amjad

Rating useful replies is more useful than saying "Thank you"

[maldehne]

so you need to restart the phone or do you reauthenticate ??

If you see any attempt on the RADIUS server upon romaing, this means that there

is something wrong with with reauth while roaming given that you don't have any issue

with static wep ( so no RF gabs ).

make sure to select auto(AKM) for the security mode.

If you have flexconnect APs , please make sure to have the APs between which you are

roaming in the same flexconnect group.

to verify exactly where is your issue, please have the following for the time being uploaded:

debug client  < mac address >

debug mobililty handoff enable

show wlan < wlan id  >

what is the firmware version of your wireless phone.

---------------------------------------------------------------------------------

Please make sure to rate correct answers