Wireless Access

last person joined: 14 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

RAP5WN Tried to Authenticate Itself with the Radius Server

This thread has been viewed 2 times

  • 1.  RAP5WN Tried to Authenticate Itself with the Radius Server

    Posted Mar 01, 2013 05:55 PM

    Hi all,

     

    I have some RAP5WNs deployed at the remote sites and VPN tunnel to the master (no split).  They have been working fine.  We just replaced the old Windows 03 radius sever with Windows 2012 radius yesterday, and this morning one of my RAP5s tried to authenticate with the radius server using its mac-address as username, so it was fail and this RAP was down. 

    This RAP is the oldest one that I deployed, the other RAPs are ok.  I tried to put the old radius server back, but the RAP was still not coming up. 

     

    Master controller is 3600, Version 6.1.3.5

     

    Mar  1 16:39:44  authmgr[1616]: <522004> <DBUG> |authmgr|  authorize  user 00:0b:86:69:1d:86
Mar  1 16:39:44  authmgr[1616]: <522042> <NOTI> |authmgr|  User Authentication Failed: username=00:0b:86:69:1d:86 MAC=00:00:00:00:00:00 IP=108.244.151.186 auth method=VPN auth server=NEHCSD02

     Thanks,

    Trinh Nguyen


    #3600


  • 2.  RE: RAP5WN Tried to Authenticate Itself with the Radius Server
    Best Answer

    EMPLOYEE
    Posted Mar 02, 2013 02:05 AM

    You need to go to configuration> Security > Authentication > L3 Authentication> VPN Authentication> Default-RAP

    Make sure it has the default server group and in the default server group is the internal server:

     

    internal.pngj



  • 3.  RE: RAP5WN Tried to Authenticate Itself with the Radius Server

    Posted Mar 03, 2013 10:30 AM

     

    Thanks Colin, you are correct, it works! 

    But I am still scratching my head: why out of 4 RAP-5WNs only this one was having problem? 

     

    Regards!

     

    Trinh Nguyen

     



  • 4.  RE: RAP5WN Tried to Authenticate Itself with the Radius Server

    EMPLOYEE
    Posted Mar 03, 2013 10:33 AM

    Ngutri,

     

    The RAP usually only has to authenticate when it comes up.  If the one you are having problems with was the last one to be provisioned, the change might have been made after the other 4 came up, but before this last one.....