User not getting authenticated/connected to WLAN (radius authentication )

[pankaj.bandewar]

Hello Experts,

I have one SSID which having RADUIS authentication but when client try's to connect it ..it fails ...

here are the logs from thecontroller.

Dot1x_NW_MsgTask_0: Nov 07 13:05:08.371: %DOT1X-3-INVALID_WPA_KEY_MSG_STATE: [PA]1x_eapkey.c:1002 Received invalid EAPOL-key M2 msg in START  state - invalid secure bit; KeyLen 40, Key type 1

*Dot1x_NW_MsgTask_0: Nov 07 13:04:56.767: %DOT1X-3-AAA_AUTH_SEND_FAIL: [PA]1x_aaa.c:849 Unable to send AAA message for client 90:2e:1c:47:e7:80

*Dot1x_NW_MsgTask_0: Nov 07 13:04:56.765: %DOT1X-3-ABORT_AUTH: [PA]1x_bauth_sm.c:450  Authentication Aborted for  client 90:2e:1c:47:e7:80 Abort Reason:DOT1X RESTARTED DUE TO EAPOL-START/CLIENT ROAM

[Alfonso Lopez]

Hi Pankaj,

You implied that the solution was to ugrade the WLC. 

Could you please tell us what was the exact software version that fixed the issue at the WLC?

Thank you.

Alfonso

[JohnAJ]

Hi, could anyone tell me the command to change the default EPOL key interval time?

[pankaj.bandewar]

Well I did something Like this

1.Upgrade the NIC Card software version on Laptops.

2.Change the default epol key interval time to 24 hrs.

3.disable the session timeout.

4.enable the NAC state as : RADIUS NAC

5. Upgrade the IOS of Controller to Cisco Recommended ver.

resolved finally..

Try this and let us know the result .

[mstavale]

we are having the same issue with code 8.2.151.  did you find a solution? 

[yasir.shaikh1]

which vesrion you upgraded to?