Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

The secure SSID has stop allowing win 7 machines from logging in

This thread has been viewed 0 times
  • 1.  The secure SSID has stop allowing win 7 machines from logging in

    Posted Oct 21, 2013 09:35 PM

    I have 3 SSID Secured side for the network, one for printers and a guest. User log on to the secure side using their user name and password issued. As PC sleep or are shut off  and they wake up no longer able to log onto the secure side. The guest side is working fine. This is my first time working on a Aruba network and need some help.



  • 2.  RE: The secure SSID has stop allowing win 7 machines from logging in

    Posted Oct 21, 2013 09:39 PM

    Which Aruba solution are you using?  Controller Based+APs  or Instant-APs ?

     

    Is there an error message on the client?

     

     

     

    JF



  • 3.  RE: The secure SSID has stop allowing win 7 machines from logging in

    Posted Oct 21, 2013 09:40 PM

    the 3400



  • 4.  RE: The secure SSID has stop allowing win 7 machines from logging in

    Posted Oct 21, 2013 09:42 PM

    Excellent.

     

    What 'user role' do the users on the secure-ssid get when you look at monitoring/clients on the WEBUI of the 3400 ?



  • 5.  RE: The secure SSID has stop allowing win 7 machines from logging in

    Posted Oct 21, 2013 09:43 PM

    No message I tried rest password no luck 

     



  • 6.  RE: The secure SSID has stop allowing win 7 machines from logging in

    Posted Oct 21, 2013 09:46 PM

    Employ the system is not being fully used who ever set this up keep it very simple I was not here for the install



  • 7.  RE: The secure SSID has stop allowing win 7 machines from logging in

    Posted Oct 21, 2013 09:48 PM

    Looks like it uses a server on the network to get authentication



  • 8.  RE: The secure SSID has stop allowing win 7 machines from logging in

    Posted Oct 21, 2013 09:51 PM

    Navigate to Diagnostics/aaa test server  and try to input a users credentials there as a test.

     

    This test will also indicate which server was set up when you were not there... see if you recognize that server IP address.

     

    If you do, I would restart that server if its just doing radius (as it isn't likely doing it well right now).  If that server has other functions I would hold off on resetting just yet.


    JF



  • 9.  RE: The secure SSID has stop allowing win 7 machines from logging in

    Posted Oct 21, 2013 10:11 PM

    if i wire into the network I have no problem with the user. when I get back to work I will check the server



  • 10.  RE: The secure SSID has stop allowing win 7 machines from logging in

    Posted Oct 21, 2013 10:19 PM

    Wiring into the network likely doesn't use the 802.1x protocol, whereas Wireless does.  That's why you see the difference.

     

    Let's pick up this conversation when you are back in the office.


    JF



  • 11.  RE: The secure SSID has stop allowing win 7 machines from logging in

    Posted Oct 21, 2013 10:25 PM

    Sounds good I Appreciate your help



  • 12.  RE: The secure SSID has stop allowing win 7 machines from logging in

    Posted Oct 23, 2013 08:04 PM
    It was the radius server cert was out of date for a fast fix am using the controller to authenticate until I can get a new cert


  • 13.  RE: The secure SSID has stop allowing win 7 machines from logging in

    Posted Oct 21, 2013 09:52 PM

     

    When this occurs you should try enabling debugging for that particular device mac address and see if you can more information :

     

    logging level debugging user-debug <device mac>

     

    You can also run the following :

     

    show show auth-tracebuf | include <device mac> --- This command will give you an overview of whats going on with the authentication process

     

    What Radius server are you using ? You should also check the logs in the radius server to see if there's any error message

     

    What AOS version do you have installed ?

     

    Does this also happens if you disable the wireless NIC or it just happens when device comes from a doze state ?

     

     Note: Make sure you disable the debugging when you are done troubleshooting : no logging level debugging user-debug <device mac>



  • 14.  RE: The secure SSID has stop allowing win 7 machines from logging in

    Posted Oct 21, 2013 10:08 PM

    No radius server just active directory they are using 2003 server