OEAP 600 cannot join WLC with auth-list enable

[Alex Pham]

I've got a strange problem here. In the office, my OEAP 600 can join WLC if there is no MAC authentication. When i enable MAC authentication at WLC, AP will fail to register. However, I try it at home and it works with both MAC authentication enable or disable. I suspect it is because of firewall in my office, but there shouldn't have any different in discovery and joining procedure for AP with MAC authentication enable or disable. I'm confused here. Please help.

[Justin Kurynny]

Alex,

Can you debug dtls on the wlc and ap to capture the negotiation details?

Justin

... typd on tny kybrd.

[blakekrone]

I thought about that after I sent it and I think with the newer code they changed that a little bit so it responds with both IPs.

It seems more like it is failing on the DTLS tunnel setup from inside than MAC auth by looking at the limited debugs.

[Alex Pham]

The issue has been resolved. The miracle happened when we used ISE server as the second radiuse server. Actually, i don't know why it suddenly works. But this probably will help if someone encounter the same issue.

[Vinay Sharma]

Hello,

For More information on OEAP-600, please watch the "Community Tech-Talk Series" Cisco Office Extend Access Point OEAP-600

https://supportforums.cisco.com/community/netpro/wireless-mobility/begin-wireless/blog/2012/02/24/cisco-office-extend-access-point-oeap-600

Thanks,

Vinay Sharma

Community Manager - Wireless