Wireless user authentication Fail over Meraki Radius

anukul-tiwari23 · ‎06-20-2023

Hi,

I have as SSID-X, which I have configured for using Meraki Radius and VLAN 21, I am getting error

auth_mode='wpa2-802.1x' vlan_id='21' radius_proto='ipv4' radius_ip='6.0.0.2' reason='eapol_timeout' reassoc='1' radio='1' vap='4' channel='36' rssi='42')

AP-MR33. Firmware version 29.5.1

Any suggestions?

Regards

Anukul

aleabrahao · ‎06-20-2023

Are 802.11r and 802.w enabled?

I am not a Cisco employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.

anukul-tiwari23 · ‎06-20-2023

Both are disabled.

aleabrahao · ‎06-20-2023

Take a look at this.

https://documentation.meraki.com/MR/Monitoring_and_Reporting/Common_Wireless_Event_Log_Messages#Fields_Seen_in_802.1X_Failure_Reason

Did you test the SSID without authentication? I suggest creating an open SSID authentication to validate with it will work. You will receive IP, be able to browse, etc.

I am not a Cisco employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.

anukul-tiwari23 · ‎06-20-2023

Did you test the SSID without authentication,

Are you talking about Local Auth?

aleabrahao · ‎06-20-2023

Nope.

I am not a Cisco employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.

ww^ · ‎06-20-2023

Did it work before? Or Is this a new ssid/config?

anukul-tiwari23 · ‎06-20-2023

This is the New SSID but I remember testing it successfully in starting week of April 2023, we do not made any changes, only one I could remember upgrading MX firmware to 18.107.1.

Madhan kumar G · ‎06-20-2023

Hi,

Try increasing the Radius server timeout to 10 seconds.

aleabrahao · ‎06-20-2023

It probably will not work, because he's using Meraki cloud authentication, not a custom Radius server.

I am not a Cisco employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.

Philip D'Ath · ‎06-20-2023

Are you referring to using this option:

If so - have you configured Systems Manager on the devices using WiFi?

anukul-tiwari23 · ‎06-20-2023

I don't see the system manager option on page,

Philip D'Ath · ‎06-20-2023

Do you have a firewall? If so, could you ensure it allows all the traffic specified in the Help/Firewall info page.