Wireless Access

Reply
MVP
Posts: 707
Registered: ‎12-01-2010

Strangest RADIUS reject message I've ever seen

Just saw this go by in syslog:

 

13:33:40 10.30.32.9   <089modca-wc1 10.30.32.9>  Dropping the radius packet for Station 6c:b7:f4:ef:08:89 00:24:6c:44:a8:70 doing 802.1x

13:33:40 10.30.32.9   <089modca-wc1 10.30.32.9>  RADIUS reject for station mm xxx zbdbxxzzx d. xxx visual of the telephone and was Colin and I was like wow visual of the telephone and was callin and I was like wow 6c:b7:f4:ef:08:89 from server Clearpass

 Can anyone explain it to me?

--Matthew

if I've helped, please give kudos
if I've provided a solution, please mark the solution so others can find it
Guru Elite
Posts: 8,458
Registered: ‎09-08-2010

Re: Strangest RADIUS reject message I've ever seen

That field where the garble is the username. Looks like someone typed into the wrong window ;)

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
MVP
Posts: 707
Registered: ‎12-01-2010

Re: Strangest RADIUS reject message I've ever seen

You're probably right. After a little digging, I see that this is someone's Samsung mobile device - unauthenticated on our guest wireless. Probably has some app trying to send on wifi and got its output into the username and password boxes of the captive portal.

 

Still wierd though.

--Matthew

if I've helped, please give kudos
if I've provided a solution, please mark the solution so others can find it
Search Airheads
Showing results for 
Search instead for 
Did you mean: