Buy or Renew
Buy or Renew
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
884
Views
0
Helpful
2
Replies

WLC4400 ACS 4.2 EAP-FAST together

mark.parker
Level 1
Level 1

‎08-15-2012 11:52 AM - edited ‎07-03-2021 10:32 PM

I have a 50AP wireless network witn Cisco 1242AG autonomous APs, WDS on a dedicated AP, and ACS 4.2.1 (build 15 Patch7). We use EAP-FAST and it works wonderfully. I need to move to controller based operations now (WDS and autonomous APs are coming to end of life so to speak)

We have (2)  4402 Controllers (running 7.0.220.0 software) and 1 1131AG LWAPP for testing. When I attempte to authenticate to the controller/radius server, the radius server enters this in the failed logins log:

Invalid message authenticator in EAP request. The Ip and name of the controller are correct on the oeeor entry.

Is there anything special I need to do for EAP-FAST on the controller for it to work. Since it is currently working fine on the ACS server and APs, I thought it would be pretty easy

Labels:
0 Helpful
2 Replies 2

mark.parker
Level 1
Level 1

‎08-15-2012 11:55 AM

Here is the exact error from the ACS logs:

07/17/2012,15:02:23,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:25,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:27,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:29,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:31,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:33,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:36,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:38,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:40,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:42,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:44,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:46,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:48,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:50,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:52,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:54,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:56,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:58,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:01,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:03,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:05,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:07,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:09,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:11,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:13,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:15,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:17,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:19,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:21,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:23,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:47,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:49,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:51,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:53,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:55,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:57,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:59,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:04:01,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:04:03,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:04:05,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:23,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:25,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:27,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:29,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:31,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:33,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:36,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:38,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:40,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:42,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:44,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:46,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:48,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:50,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:52,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:54,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:56,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:58,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:01,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:03,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:05,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:07,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:09,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:11,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:13,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:15,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:17,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:19,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:21,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:23,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:47,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:49,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:51,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:53,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:55,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:57,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:59,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:04:01,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:04:03,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:04:05,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

0 Helpful

Amjad Abdullah
VIP Alumni
VIP Alumni

‎08-16-2012 03:50 AM

Mark:

Make sure the shared secret is the same on both wlc and acs for the wlc entry. It seems the shared secret does not match.

Check your message in this link:

lwww.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_example09186a00801bd035.shtml

HTH

Amjad

Sent from Cisco Technical Support iPad App

Rating useful replies is more useful than saying "Thank you"
0 Helpful
Customers Also Viewed These Support Documents
Review Cisco Networking for a $25 gift card