Network Management

Reply
New Contributor
Posts: 3
Registered: 3 weeks ago

Aruba Controller can not authenticate to AAA Server (Cisco ACS)

[ Edited ]

i have 2 aruba controller, 1 controller at remote site (as a master) dan the other at local site. 

to connect the SSID, user must authenticate with username dan password (AAA server with ACS). we have configure all the device and have working well. but after several year, sometimes user can not connect to the SSID. we checked with AAA test server, controller does not get the respon from the ACS but we can ping the ACS from controller.

 

after we restart the controller everything going fine, but after a few deys the problem come back again.

 

any advice ?

 

thanks

 

MVP
Posts: 4,271
Registered: ‎07-20-2011

Re: Aruba Controller can not authenticate to AAA Server (Cisco ACS)

Are you doing the EAP termination on the controller ?

Get Outlook for iOS
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
New Contributor
Posts: 3
Registered: 3 weeks ago

Re: Aruba Controller can not authenticate to AAA Server (Cisco ACS)

Hi Victor,

 

Do you mean EAP Termination in Configuration >Security >Authentication > L2 Authentication page ?

yes, we use it.

thanks

 

 

salam

Very

MVP
Posts: 4,271
Registered: ‎07-20-2011

Re: Aruba Controller can not authenticate to AAA Server (Cisco ACS)

It is best practice to use EAP termination on your RADIUS server .

In order to do this you have make sure that your RADIUS server has a certificate , making this change will cause that users be prompt to accept a new certificate .

If you guys are using windows domain laptops you can push a group policy .

This change requires planning and should be done off hours .

Get Outlook for iOS
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
New Contributor
Posts: 3
Registered: 3 weeks ago

Re: Aruba Controller can not authenticate to AAA Server (Cisco ACS)

Hi Victor,

 

I still dont understand about EAP termination that you mean.

can you explain more specisif.

thanks

 

 

salam

Very

Search Airheads
Showing results for 
Search instead for 
Did you mean: