cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
755
Views
0
Helpful
2
Replies

WLC4400 ACS 4.2 EAP-FAST together

mark.parker
Level 1
Level 1

I have a 50AP wireless network witn Cisco 1242AG autonomous APs, WDS on a dedicated AP, and ACS 4.2.1 (build 15 Patch7). We use EAP-FAST and it works wonderfully. I need to move to controller based operations now (WDS and autonomous APs are coming to end of life so to speak)

We have (2)  4402 Controllers (running 7.0.220.0 software) and 1 1131AG LWAPP for testing. When I attempte to authenticate to the controller/radius server, the radius server enters this in the failed logins log:

Invalid message authenticator in EAP request. The Ip and name of the controller are correct on the oeeor entry.

Is there anything special I need to do for EAP-FAST on the controller for it to work. Since it is currently working fine on the ACS server and APs, I thought it would be pretty easy

2 Replies 2

mark.parker
Level 1
Level 1

Here is the exact error from the ACS logs:

07/17/2012,15:02:23,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:25,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:27,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:29,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:31,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:33,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:36,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:38,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:40,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:42,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:44,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:46,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:48,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:50,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:52,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:54,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:56,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:58,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:01,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:03,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:05,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:07,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:09,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:11,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:13,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:15,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:17,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:19,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:21,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:23,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:47,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:49,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:51,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:53,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:55,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:57,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:59,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:04:01,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:04:03,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:04:05,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:23,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:25,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:27,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:29,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:31,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:33,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:36,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:38,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:40,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:42,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:44,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:46,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:48,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:50,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:52,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:54,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:56,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:02:58,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:01,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:03,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:05,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:07,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:09,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:11,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:13,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:15,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:17,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:19,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:21,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:23,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:47,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:49,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:51,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:53,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:55,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:57,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:03:59,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:04:01,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:04:03,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

07/17/2012,15:04:05,Bad request from NAS,,,,(Unknown),Invalid message authenticator in EAP request,,,,10.2.1.19,,,,,,Cisco4402-1,

Amjad Abdullah
VIP Alumni
VIP Alumni

Mark:

Make sure the shared secret is the same on both wlc and acs for the wlc entry. It seems the shared secret does not match.

Check your message in this link:

lwww.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_example09186a00801bd035.shtml

HTH

Amjad

Sent from Cisco Technical Support iPad App

Rating useful replies is more useful than saying "Thank you"
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: