Wireless Access

Hi all,

I have configured VIA for a customer today and when they try to connect they are authenticated sucessfully but then this disconnects then straight away with an error saying "Failed to establish a secure connection".

I have attached the logs from the controller, this is for some reason is matching this to a different user-role to the one that is configured for VIA.  This user role isn't referenced anywhere in the configuration and it only has "allowall" in it.

Can anyone advise where in the configuration I would find out to resolve this?

Cheers,

Mike

By default, the role should be "default-via-role".  You would find that under configuration> security> Authentication> L3 Authentication>

The VIA design document is here:  http://www.arubanetworks.com/vrd/VIAAppNote/wwhelp/wwhimpl/js/html/wwhelp.htm

Thanks Colin, I have created a new via profile and I'm not using the default.

Will this cause an issue?

Mike

There are no logs attached.

I'm not sure why the logs didn't attached.

They should be now.

Do you have a VPN pool configured?

Can you try it without the server derivation rule?

Yes, I have configured an address pool for this.  I have also assigned a VLAN to this and assigned the VIA profile to this VLAN.

We have tested this using the internal DB and this works without any issues, once I set this to use their radius servers it downloads the profile and authenticates correctly but then gives the client the error.

Thanks,

Mike

Removed

Did you say that you had a VLAN attached to the role?  If so, please remove it.

Yes, I have the VLAN I've created.

I will remove this.

Mike

Colin, I have removed the VLAN from the profile and this has allowed the user to login without any issues and stay connected using the internal DB.

I then changed this back and they are getting the same error message and this is still trying to match the incorrect role.

Thanks,

Mike