GUEST WIFI ISSUE

[gauravpundir231]

Hi ALL,

Can someone pls suggest on below problem urgently.

We have 2 users who are sitting in our company but using laptop of their client and connecting to internet thru our GUEST WIFI. Their guest wifi is getting dropped off after every 20-30 mins. We havent applied any time out policy in our WLC and our other users who are using laptops provided by us are not facing any issues with guest wifi.

Pls suggest wht could be the issue and wht can be done.Also, if this is caused by certificate. Anyone can advise wht typ of certificates are required for this.

[sremk]

Hi Gaurav,

I don't think it is related to timeout. What type of authentication are we using here for guest users?

Are we pushing some policies or something from radius server which isolates these users based on the account? Or are we all using same credentials?

How does the users in your company different from the guest users authentication wise? 

Also, it would be great if you can enable debug for the user and update here as you mentioned this is happening every 20-30 min and reproducible.

debug client mac <user mac>

show client detail <mac address>

Thanks

Sreejith

[gauravpundir231]

Hi Sree,

We are using 802.1x auth.

No policies are being pushed for guest users.

Pls advise if you have some info on certificates for authentication. As this user is using client's laptop in our company.

[sremk]

If you are using dot1x, then yes we might be using certificates at the time of login but not after successfully authenticated. 

For eap-peap mschapv2, we use one side server side validation certificate. For this, we need server ceritificate on server(radius) and trusted ca on client side.

For eap-TLS, we use two side server side validation ceritifacate. For this we need 1. server certificate on server(radius) and trusted ca on client side 

2. Client certificate on Client and trusted ca of the same on radius server.

Thanks

Sreejith

[gauravpundir231]

Thanks Sree,

Still have one qustn. Even after authenticating user , why it is dropping him after 20-30 minutes

[sremk]

That's what. We need to look into the logs to see what is happening with these guest laptops. 

Thank

Sreejith

[gauravpundir231]

Hi Sree,

I just checked security policies for GUEST User : it is saying WEB AUTH.

For my CORP: WPA+WPA2.

Can u pls suggest what WEB AUTH mean here. wht typ of authentication is this.