Re: Sporadic radius login problems

LakesideLion · ‎10-23-2023

Has anyone have this occur with them?

We're seeing sporadic radius login failures happening with different APs and clients.

Client failed 802.1X authentication to the RADIUS server.auth_mode='wpa3-802.1x' vlan_id='1103' radius_proto='ipv4' radius_ip='172.16.1.18' reason='radius_login_failure' radio='1' vap='6' channel='44' rssi='23'

How does this sometimes happen? This is preventing some from authenticating.

aleabrahao · ‎10-23-2023

What TLS version is your Raius server using? It appears to be a problem related to the TLS version.

I am not a Cisco employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.

LakesideLion · ‎10-23-2023

We're using NPS as the radius server. It looks like 1.0, 1.1 and 1.2 are all enabled.

Philip D'Ath · ‎10-23-2023

I notice you are using WPA3 (wpa3-802.1x). I have not found WPA3 mature enough to deploy into production environments. I would drop back to WPA2 and wait 12 more months.

Windows itself has WPA3 issues. Microsoft is scheduled to release the fix for that in April 2024.