Wireless Access

 View Only
  • 1.  Strangest RADIUS reject message I've ever seen

    Posted Aug 06, 2014 04:41 PM

    Just saw this go by in syslog:

     

    13:33:40 10.30.32.9   <089modca-wc1 10.30.32.9>  Dropping the radius packet for Station 6c:b7:f4:ef:08:89 00:24:6c:44:a8:70 doing 802.1x
    
    13:33:40 10.30.32.9   <089modca-wc1 10.30.32.9>  RADIUS reject for station mm xxx zbdbxxzzx d. xxx visual of the telephone and was Colin and I was like wow visual of the telephone and was callin and I was like wow 6c:b7:f4:ef:08:89 from server Clearpass

     Can anyone explain it to me?



  • 2.  RE: Strangest RADIUS reject message I've ever seen
    Best Answer

    Posted Aug 06, 2014 06:15 PM
    That field where the garble is the username. Looks like someone typed into the wrong window ;)


  • 3.  RE: Strangest RADIUS reject message I've ever seen

    Posted Aug 06, 2014 07:49 PM

    You're probably right. After a little digging, I see that this is someone's Samsung mobile device - unauthenticated on our guest wireless. Probably has some app trying to send on wifi and got its output into the username and password boxes of the captive portal.

     

    Still wierd though.