Controllerless Networks

Frequent Contributor I

802.1x Auth/Roaming Issues Instant Environment

As my instant deployment grows I am having users experience issues with roaming and or 802.1x auth.  The user initially authenticates however they may have issues staying authenticated.  I see many logs in Airwave.  It looks like when a client roams and attemepts to reauth the server may time out and a subsequent reuquest uses host/ instead of domain-name\joesmith. It appears this may happen after multiple timeouts however I cannot say that 100%.    Any ideas why clients may randomly attemot to authenticate with machine rather than their AD credentials?




Example of log output 


Client authentication failed for 00:3A:DE:93:AB:00 host/


Authentication server request timed out for allentownradius my-domain\jsmith

Guru Elite

Re: 802.1x Auth/Roaming Issues Instant Environment

That looks like machine authentication.  Are you currently supporting (allowing) successful machine authentication in your radius server?  Typically machine authentication only occurs when the Windows machine is at the ctrl-alt-delete prompt.


The roaming issue might be something separate...

*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.5 User Guide
InstantOS 8.5 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Remote Access Point Solution Guide
ArubaOS Consolidated Release Notes
ArubaOS 8 ViA VPN Solution Guide
Frequent Contributor I

Re: 802.1x Auth/Roaming Issues Instant Environment

Thanks Colin. That's what is odd about this.  We do not support machine auth at the radius server and the machines are logged in and connected when the random machine auth attempts occur. Many times I will see this after a few valid domain/user authentication request timed out messages.    It seems like occasionaly something triggers a machina auth attempt.   You are correct this may be separate form the roaming issues as I have now seen this as well in the logs of my controller environment and different Instant clusters however I am not receiving complaints from those locations.    

Search Airheads
Showing results for 
Search instead for 
Did you mean: