Wireless Access

Reply
Frequent Contributor I
Posts: 82
Registered: ‎05-28-2010

Win7 client reauthenticating to RADIUS server while roaming

I have a couple of Windows 7 clients that will occasionally reauthenticate to the RADIUS server when roaming from one AP to another. This does not happen all the time, but when it does, it causes certain applications to crash. Has anyone ever experienced this or any recommendations on trying to figure out why the client finds the need to reauthenicate? TAC asked me to confirm that my dot1x profile has both 1) Validate PMKID: and 2) Opportunistic Keyu Caching: checked off and it does. When a client succefully roams, show auth-tracebuf reports:

 

station-down             -      -    
station-up
station-data-ready  
wpa2-key1
wpa2-key2
wpa2-key3
wpa2-key4

 

When it fails and reauthenticates, it reports:

 

station-down             -      -    
station-up
eap-id-req
eap-id-resp
rad-req
rad-resp
eap-req
eap-resp
rad-req
rad-resp
eap-req
eap-resp
rad-req
rad-resp
eap-req
eap-resp
rad-req
rad-accept
eap-success

 

Modified the Windows 7 client WLAN AutoConfig service to be automatically started and still have the same issues. The svchost_RASCHAP.LOG file on the client reports a "RasEapGetInfo" at the same time that the "eap-id-req" reports. It appears to me that the issue is the client, but I cannot figure out for sure if it is and if so why.

 

Regards,

Tony Marques

 

Guru Elite
Posts: 21,259
Registered: ‎03-29-2007

Re: Win7 client reauthenticating to RADIUS server while roaming

Please try to upgrade the client driver.

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Frequent Contributor I
Posts: 82
Registered: ‎05-28-2010

Re: Win7 client reauthenticating to RADIUS server while roaming

Client driver has been upgraded. We've also removed the third party vendor software and have the WLAN AutoConfig service configured to automatically start. Problem has become less sprodaic, but logs still showing DEAUTH FROM STA with REASON UNSPECIFIED FAILURE. Not sure if under the 802.11 settings it would be worth checking off "This network uses pre-authentication". Problem is limited to a couple of Lenovo laptops.

Search Airheads
Showing results for 
Search instead for 
Did you mean: