Wireless Access

Reply
Occasional Contributor I

Mac-auth with EAP authentication issues

Currently users are connected to one 205-AP in a small area with great coverage. My predecessor setup a ssid with mac-auth and we have issues with users not being able to authenticate. I noticed in clear pass that there are alot of times when the user fails to connect and within the next couple of minutes they are authenticated. The user explains that they have network access one minute and then the next they are kicked off the wireless. The user is also using a windows 10 tablet. It seems in clear pass that they are authenticating, but there are alot of failed attempts before connection is authenticated. I can provide more information. I just don't really know where to start.

 

Thank you

Guru Elite

Re: Mac-auth with EAP authentication issues

So are you using MAC auth or 802.1X on the SSID? It can't be both.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor I

Re: Mac-auth with EAP authentication issues

using mac-auth

Guru Elite

Re: Mac-auth with EAP authentication issues

What does ClearPass show on the alerts tab in Access Tracker for the failed requests?


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor I

Re: Mac-auth with EAP authentication issues

It is actually a timeout on the status.

 

This is the alert, there are a bunch of these one right after the other and then it accepts.

 

Alerts for this Request  

RADIUSClient did not complete EAP transaction
Guru Elite

Re: Mac-auth with EAP authentication issues

Make sure the drivers are up to date on the clients.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor I

Re: Mac-auth with EAP authentication issues

Checked that drivers are up to date.

 

I am also getting this alert.

 

Alerts for this Request  

RADIUSMSCHAP: AD status:Logon failure (0xc000006d)
MSCHAP: Authentication failed
EAP-MSCHAPv2: User authentication failure
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: