Cisco WLC 9800 client mac Authorization not working

rajat00011 · ‎02-02-2024

Hi

Please help me for resolving this problem

Client not connect with WLAN when I open mac filter I am not using any radius server

Feb 2 07:39:19.361: %CLIENT_EXCLUSION_SERVER-5-ADD_TO_BLACKLIST_REASON_DYNAMIC: Chassis 1 R0/0: wncmgrd: Client MAC: 9078.b2c3.ae83 was added to exclusion list associated with AP Name:AP6C71.0DFC.4838, BSSID:MAC: 0000.0000.0000, reason:802.11 association failure

Feb 2 07:39:19.360: %SESSION_MGR-5-FAIL: Chassis 1 R0/0: wncd: Authorization failed or unapplied for client (9078.b2c3.ae83) on Interface capwap_90400006 AuditSessionID 000000000000009768C45743. Failure reason: Authc fail. Authc failure reason: AAA Server Down.

Feb 2 07:39:11.511: %SESSION_MGR-5-FAIL: Chassis 1 R0/0: wncd: Authorization failed or unapplied for client (9078.b2c3.ae83) on Interface capwap_90400006 AuditSessionID 000000000000009668C43899. Failure reason: Authc fail. Authc failure reason: AAA Server Down.

Feb 2 07:39:01.548: %SESSION_MGR-5-FAIL: Chassis 1 R0/0: wncd: Authorization failed or unapplied for client (9078.b2c3.ae83) on Interface capwap_90400006 AuditSessionID 000000000000009568C411AE. Failure reason: Authc fail. Authc failure reason: AAA Server Down.

MHM Cisco World · ‎02-02-2024

did you add MAC to authz list ?
MHM

rajat00011 · ‎02-02-2024

Yes add mac address

Rich R · ‎02-02-2024

Did you follow the guide step by step?
https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213922-configure-mac-authentication-ssid-on-cis.html#toc-hId-2036295870

Have you enabled AAA override on the WLAN?

Did you enter the MAC address usernames in lower case without any separators (no ./-/:) as per the guide?

------------------------------
Please click Helpful if this post helped you and Select as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's and TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's, Best Practices for 9800 WLC's and Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.196.0, latest 9800 releases, 8.5.182.12 (8.5.182.13 for 3504) and 8.5.182.109 (IRCM, 8.5.182.111 for 3504)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs
Default AP console baud rate from 17.12.x is 115200 - introduced by CSCwe88390

rajat00011 · ‎02-02-2024

No I don't use AAA override on WLAN . I am fallow this link which u shared it's not working

Rich R · ‎02-02-2024

> No I don't use AAA override on WLAN . I am fallow this link which u shared it's not working
It needs to be enabled.

I repeat: Did you enter the MAC address usernames in lower case without any separators (no ./-/:) as per the guide?

------------------------------
Please click Helpful if this post helped you and Select as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's and TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's, Best Practices for 9800 WLC's and Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.196.0, latest 9800 releases, 8.5.182.12 (8.5.182.13 for 3504) and 8.5.182.109 (IRCM, 8.5.182.111 for 3504)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs
Default AP console baud rate from 17.12.x is 115200 - introduced by CSCwe88390

marce1000 · ‎02-02-2024

- Have a checkup (sanity check) of the current controller configuration with the CLI command show tech wireless and feed the output into : Wireless Config Analyzer

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '