07-07-2023 01:45 AM
Dear ALL,
I'm implement the WLC + Freeradius for MAC auth, but i found the WLC always sending the "secret" as User-Password in "User-Password" attribute, the Freeradius will show "Access-Reject", if the freeradius attribute’s Cleartext-Password to “secret”, the AAA test result is show “Access-Accept” with any password, it very strange.
anyone can help?
(Cisco Controller) >test aaa radius username c21506d39b6e password c21506d39b6e wlan-id 22
Radius Test Request
Wlan-id........................................ 22
ApGroup Name................................... none
Attributes Values
---------- ------
User-Name c21506d39b6e
Called-Station-Id 10.2.254.196
Calling-Station-Id 00:11:22:33:44:55
Nas-Port 0x00000008 (8)
Nas-Ip-Address 10.2.254.196
Nas-Ipv6-Address 2002:dfff:8302:2::2
NAS-Identifier WLC
Airespace / WLAN-Identifier 0x00000016 (22)
User-Password secret
Service-Type 0x00000008 (8)
Framed-MTU 0x00000514 (1300)
Nas-Port-Type 0x00000013 (19)
Tunnel-Type 0x0000000d (13)
Tunnel-Medium-Type 0x00000006 (6)
Tunnel-Group-Id 0x00000065 (101)
--More-- or (q)uit
Cisco / Audit-Session-Id 0a02fec4001f1f5b64a7c743
Acct-Session-Id 64a7c743/00:11:22:33:44:55/2223857
test radius auth request successfully sent. Execute 'test aaa show radius' for response
(Cisco Controller) >
Solved! Go to Solution.
07-07-2023 03:49 AM
- Adding : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuc21803
M.
07-07-2023 01:56 AM
- Have a checkup review of the controller configuration according to https://community.cisco.com/t5/networking-knowledge-base/show-the-complete-configuration-without-breaks-pauses-on-cisco/ta-p/3115114#toc-hId-1039672820 , have the output analyzed with https://cway.cisco.com/wireless-config-analyzer/
Also look into https://www.cisco.com/c/en/us/support/docs/wireless/wireless-lan-controller-software/200046-tac-recommended-aireos.html , especially if you are currently on an older release it would be strongly advised to upgrade and test again ,
M.
07-07-2023 03:49 AM
- Adding : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuc21803
M.
07-07-2023 04:26 AM
There is this document available by cisco on how to setup freeradius and wlc, in case you did not see yet.
07-09-2023 04:42 AM
What version of software are you using?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide