cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
569
Views
0
Helpful
2
Replies
mark.parker
Beginner

WLC4400 ACS 4.2 EAP-FAST together

I have a 50AP wireless network witn Cisco 1242AG autonomous APs, WDS on a dedicated AP, and ACS 4.2.1 (build 15 Patch7). We use EAP-FAST and it works wonderfully. I need to move to controller based operations now (WDS and autonomous APs are coming to end of life so to speak)

We have (2)  4402 Controllers (running 7.0.220.0 software) and 1 1131AG LWAPP for testing. When I attempte to authenticate to the controller/radius server, the radius server enters this in the failed logins log:

Invalid message authenticator in EAP request. The Ip and name of the controller are correct on the oeeor entry.

Is there anything special I need to do for EAP-FAST on the controller for it to work. Since it is currently working fine on the ACS server and APs, I thought it would be pretty easy

2 REPLIES 2
mark.parker
Beginner

Here is the exact error from the ACS logs:

07/17/2012,15:02:23,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:25,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:27,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:29,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:31,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:33,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:36,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:38,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:40,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:42,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:44,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:46,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:48,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:50,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:52,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:54,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:56,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:58,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:01,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:03,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:05,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:07,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:09,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:11,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:13,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:15,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:17,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:19,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:21,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:23,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:47,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:49,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:51,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:53,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:55,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:57,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:59,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:04:01,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:04:03,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:04:05,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:23,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:25,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:27,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:29,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:31,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:33,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:36,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:38,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:40,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:42,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:44,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:46,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:48,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:50,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:52,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:54,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:56,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:58,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:01,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:03,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:05,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:07,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:09,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:11,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:13,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:15,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:17,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:19,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:21,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:23,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:47,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:49,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:51,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:53,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:55,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:57,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:59,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:04:01,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:04:03,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:04:05,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

Amjad Abdullah
Engager

Mark:

Make sure the shared secret is the same on both wlc and acs for the wlc entry. It seems the shared secret does not match.

Check your message in this link:

lwww.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_example09186a00801bd035.shtml

HTH

Amjad

Sent from Cisco Technical Support iPad App

Rating useful replies is more useful than saying "Thank you"
Content for Community-Ad