@milamberwrote:
Hello,
I have same exact issue too but in my authentication I don't use Mac Address list.
I have 2 different SSID, first one is limited to internal network, it's just providing internet connection to guests users with WPA-PSK2 method. (there is no issue with that) second one is unlimited access and it provides internal network access too with enterprise level WPA-PSK2 method, which authenticates users via their certificates and username and passwords from Radius server.
I don't know why but my users can not join to enterprise level network sometime. interesting thing is, even if they are authenticated, they can not obtain an IP address from DHCP server. (on this SSID, as I mentioned there is no limitation to access DHCP or something else) when they tried it, I saw their devices with the 0.0.0.0 IP address.
Any suggestion?
As you mentioned, this is not likely the same issue since mac authentication is not being used.
For your internal users that are using certificates along with username and password to authenticate, that is not using WPA2-PSK but rather WPA2-Enterprise. If it is only some users who can not connect to the internal network, start with the RADIUS server and to see if users are being authorized correctly.