WIRELESS CONTROLLER 9800-CL / AUTHENTICATION 802.1X JUST XIAOMI SMARTPHONES CONNECT

[fabiano.dantas]

HI EXPERTS,

In the last week, i worked in new project with WLC 9800 with autenthication 802.1X EAP-PEAP.

The Server Authentication is a WINDOWS NPS.

But when I started testing, I found that only Xiaomi Smartphones completed the authentication steps.

I tried with other devices, like Sansung Galaxy, Iphone 11 and most importantly the windows workstation, no device has completed authentication.

I tested with 2 XIAOMI smartphones and it works perfectly.

This very stranger

Anybody saw the behavior similar

Thanks Guys

[Sandeep Choudhary · Accepted solution]

paste the output of the command:

debug client <mac addres sof non working client>

Regards

Dont forget to rate helpful posts

[patoberli · Accepted solution]

This to consider:

- Virtual-Interface must use a private IP address

- Don't run a release with known issues in regards to connection (16.12.4a has a specific bugfix for such an issue in 16.12.3)

- Use a valid and trusted certificate on the NPS, the clients must trust the Root Certificate

- Don't have 802.1x-SHA2 enabled on the SSID (unless you are testing WPA3)

[fabiano.dantas · Accepted solution]

Hi Patoberli, thanks for your help.

I can fixed the issue.

There was a problem betwieen the link and WLC and Radius Server, the latency was very high, beacuse dont complete the authentication.

The Wireless Controller is in the Brazil, and The Servers Radius is in other countries.

Thanks Guys.