WLC-4404. WPA2 - AES (L2) - Microsoft IAS- unable to authenticate

[scatman]

Hi am upgrading from EAP - TLS with WEP to WPA2 - AES with smartcard / machine certificates. AAA server is Microsoft IAS. New SSID and config for WPA2 looks straightforward.

Created new policy for this SSID on IAS, again looks straightforward. Unable to authenticate, debug on WLC looks as though not all server to client transactions are taking place , no EAPOL messages etc.

Any ideas?

[ldardon]

This mostly occurs due to incompatibility on the client side. Try these steps in order to fix this issue:

Check if the client is Wi-Fi certified for WPA2 and check the configuration of the client for WPA2.

Check the data sheet in order to see if the client Utility supports WPA2. Install any patch released by the vendor to support WPA2. If you use Windows Utility, make sure that you have installed the WPA2 patch from Microsoft in order to support WPA2.

Upgrade the client's Driver and Firmware.

Turn off Aironet extensions on the WLAN.