Network Management

Reply
MVP
Posts: 1,418
Registered: ‎10-25-2011

RADIUS Auth issues in Airwave when not using RADIUS auth?

Good Morning,

 

I seem to have stumbled upong the following errors in Airwave but we are not using RADIUS authentication but only RADIUS Accounting.

 

I have attached the screenshot.

 

Any idea what may cause this ?

The controller is a 3200 running on 6.1.3.3

Pasquale Monardo | Senior Network Solutions Consultant
ACDX #420 | ACMP
[If you found my post helpful, please give kudos!]
Moderator
Posts: 1,252
Registered: ‎10-16-2008

Re: RADIUS Auth issues in Airwave when not using RADIUS auth?

It looks like your controller is passing on client auth failure messages.  This can be resolved by disabling the unneeded traps from the controller:

 

# ssh admin@controller.ip

# en

# conf t

# snmp-server trap disable wlsxNUserAuthenticationFailed

# snmp-server trap disable wlsxUserAuthenticationFailed

ctrl+z

# wr mem

 

I believe these are the two that need to be disabled, you can double-check from the list that's in the Aruba-AirWave Best Practices Guide (http://support.arubanetworks.com/DOCUMENTATION/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=8053).


Rob Gin
Senior QA Engineer - Network Services
Aruba Networks, a Hewlett Packard Enterprise Company
MVP
Posts: 1,418
Registered: ‎10-25-2011

Re: RADIUS Auth issues in Airwave when not using RADIUS auth?

I guess this would work as we use external captive portal authentication.

 

I just don't want to disable something that we can use for troubleshooting later on

Pasquale Monardo | Senior Network Solutions Consultant
ACDX #420 | ACMP
[If you found my post helpful, please give kudos!]
Moderator
Posts: 1,252
Registered: ‎10-16-2008

Re: RADIUS Auth issues in Airwave when not using RADIUS auth?

The traps won't help much for troubleshooting since the output is nonsense (controller is passing back several invalid NULL MAC addresses).  In any event, these traps can always be re-enabled later on, disabling for now will just help decrease the noise until you can resolve the issue that the controller sees failed authentications for the NULL MAC address several times over.  It could be that your external captive portal authentication is either blocking the MAC address or using another distinct field to define different clients. May be worth it to open an Aruba TAC case to troubleshoot.


Rob Gin
Senior QA Engineer - Network Services
Aruba Networks, a Hewlett Packard Enterprise Company
Search Airheads
Showing results for 
Search instead for 
Did you mean: