Devices Android not connecting SSID with WPA2 Enterprise

[clauscosta]

Hi All

I am having problems with android devices software version 7 and higher for example galaxy J7 prime to connect to our SSID configured with WPA2 Enterprise...

The request neither arrives to authenticator.

Network Infraestucture:

WLC 5520 -version 8.3.143.0

SSID with 802.1X

APS 1852I in flexconnect mode (data e authentication local)

Authenticator ISE 2.3 with 4 patchs applied.

Testing with another android version 5.1.1 (ASUS_X014D) the same SSID and same user/password works fine.

Apple devices also works fine.

Same device connects to SSID with PSK without problems

Thanks in advance for any help

[clauscosta]

Update...
Leaving the SSID enabled broadcast, if I configure the SSID manually as if him was hidden on the android device, I am able to connect.

[pieterh]

is the wlc configured to send the SSID in the authentication message?

SECURITY > RADIUS > Authentication > auth called station id type

if so is ISE checking on the SSID?

of so, do the case match?

[brian_chin1]

Guys, the instructions for using MSCHAPV2 are not available on the Samsung8 running Android version 9. On the Android version 8 the MSCHAPV2 option is available to select from the same config screen...

One screen options are:

EAP method = PEAP

CA certificate = no cert avilable

Identity =

password =

Auto reconnect

Advanced (takes me to additional page)

   >Phase 2 authentication = MSCHAPV2

   >Anonymous identity

   >IP Setting

   >Proxy = none

   >Metered network = detect automatically.

[patoberli]

Your screenshot is from Android 9 or 8? Because, as you write yourself, you can choose it under Advanced.

[brian_chin1]

That advanced tab is on another page which seems not to have an affect as I did choose the MSCHAPV2 option. Within the Android versions 8, 7 and 6 that 'Advanced" option is on the same screen to choose from.
My phone having the issue is a Android version 9. Latest security and upgrade patches.

[patoberli]

Ok, in that case please open a new thread. Also add a "debug client mac-address-of-phone" from the controller to your new thread, when the mobile tries to connect.