HI All,
Dot1.X Authentication Failed on Cisco 3504 WLC. User are authenticated by certificate base. There is firewall between Cisco WLC and Radius server. when we try to do packed capture on the firewall getting below error.
"Access-Request
Access-Challenge
Fragmented IP protocol".
please find the WLC logs in the below.
*radiusTransportThread: Jun 06 17:20:52.493: %AAA-3-INVALID_REQUEST: [PA]radius_db.c:3923 Invalid AAA request. unknown
*radiusTransportThread: Jun 06 17:20:52.493: %AAA-4-RADIUS_RESPONSE_FAILED: [PA]radius_db.c:658 RADIUS server XXXXXX:1812 failed to respond to request(ID 214) for STA XXXX / user 'XXXX'
*sisfSwitcherTask: Jun 06 17:20:50.917: %SISF-6-ENTRY_CREATED: [PA]sisf_shim_utils.c:485 Entry created A=fe80::c6b:2f5a:f576:d548 V=70 I=wired:1 P=0000 M=
*Dot1x_NW_MsgTask_4: Jun 06 17:20:39.118: %DOT1X-3-ABORT_AUTH: [PA]1x_bauth_sm.c:487 Authentication Aborted for client XXXX Abort Reason:DOT1X RESTARTED DUE TO EAPOL-START/CLIENT ROAM
*radiusTransportThread: Jun 06 17:20:28.517: %AAA-3-INVALID_REQUEST: [PA]radius_db.c:3923 Invalid AAA request. unknown
*radiusTransportThread: Jun 06 17:20:28.517: %AAA-4-RADIUS_RESPONSE_FAILED: [PA]radius_db.c:658 RADIUS server 10.245.64.196:1812 failed to respond to request(ID 208) for STA XXXX / user 'XXXXX'
*dot1xMsgTask: Jun 06 17:20:23.204: %DOT1X-3-WPA_SEND_STATE_ERR: [PA]1x_kxsm.c:1736 Unable to send EAPOL-key msg - invalid WPA state (0) - client [XXXXX]
