Security

 View Only
last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Authentication issue with wireless client

This thread has been viewed 33 times

  • 1.  Authentication issue with wireless client

    Posted Jan 23, 2023 09:20 AM
    Hi,

    Some Dell and HP laptops are showing no internet when we are connecting them to our office wifi. But with other wifi hotspots, these devices are working fine.
    We are suspecting there is some authentication issue with the WLC.

    We are using mac authentication to connect our devices.

    Our APs are 515 models we are using Aruba 7205 WLC controllers which are in HA configuration and running on AOS 8.6.0.11.

    Any suggestions would be greatly appreciated.



    ------------------------------
    Sanjib Behera
    Highradius
    ------------------------------


  • 2.  RE: Authentication issue with wireless client

    Posted Jan 23, 2023 09:46 AM
    What Role do the computers get assigned?  Does this role have internet access?  You are doing local MAC auth on the controller or MAC auth via RADIUS on ClearPass?  So your SSID is completely open with MAC auth enabled?
    Original Message


  • 3.  RE: Authentication issue with wireless client

    Posted Jan 23, 2023 09:53 AM
    One more thing...

    Are these devices configured to use private mac addresses? If so, are only listed mac addresses allowed, that is, only the real ones? Try turning off private mac address and see if that works...






    Original Message


  • 4.  RE: Authentication issue with wireless client

    Posted Jan 24, 2023 03:23 AM
    We already disabled the random mac address option in these win-10 laptops we authenticated these laptops with the physical mac.

    ------------------------------
    Sanjib Behera
    Highradius
    ------------------------------

    Original Message


  • 5.  RE: Authentication issue with wireless client

    Posted Jan 24, 2023 03:19 AM
    We are using local mac auth on the controller.

    We are using authenticated role.

    Only some laptops are showing this kind of behavior.

    The SSID is WPA3 enabled. With the same SSID other users are able to access the internet.

    ------------------------------
    Sanjib Behera
    Highradius
    ------------------------------

    Original Message


  • 6.  RE: Authentication issue with wireless client

    EMPLOYEE
    Posted Jan 24, 2023 05:30 AM
    Convert to WPA2 and see if you are having the same problems.

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    HPE Design and Deploy Guides: https://community.arubanetworks.com/support/migrated-knowledge-base?attachments=&communitykey=dcc83c62-1a3a-4dd8-94dc-92968ea6fff1&pageindex=0&pagesize=12&search=&sort=most_recent&viewtype=card
    ------------------------------

    Original Message


  • 7.  RE: Authentication issue with wireless client

    Posted Jan 24, 2023 05:47 AM

    Hi Joseph,

    We have a running infra with over 1000 users connected, So changing the authentication method is not a good decision.


    If you require any additional information to determine the exact issue I can provide it.



    ------------------------------
    Sanjib Behera
    Highradius
    ------------------------------

    Original Message


  • 8.  RE: Authentication issue with wireless client

    EMPLOYEE
    Posted Jan 24, 2023 05:55 AM
    To be honest 8.6.0.11 is older.  I would contact technical support to see the proper version of ArubaOS based on your circumstances and to troubleshoot your issues. There are many factors at play, WPA3, client drivers, ArubaOS code version.  I would work with technical support to go through your issue methodically.  

    With regards to my previous suggestion; it was just an idea to test a few clients this way on a test WPA2 SSID.



    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    HPE Design and Deploy Guides: https://community.arubanetworks.com/support/migrated-knowledge-base?attachments=&communitykey=dcc83c62-1a3a-4dd8-94dc-92968ea6fff1&pageindex=0&pagesize=12&search=&sort=most_recent&viewtype=card
    ------------------------------

    Original Message


  • 9.  RE: Authentication issue with wireless client

    Posted Jan 24, 2023 09:17 AM
    WPA3 with what?  Enterprise? SAE-PSK?  Do you have WPA3 transition mode enabled or WPA3 enforced?  Or is this an open network with OWE?
    Original Message


  • 10.  RE: Authentication issue with wireless client

    Posted Jan 24, 2023 07:53 AM
    Hello Sanjib,

    We had a very similar client with an HP connect but no internet. Saw 3 connections in our controllers for this clients MAC 2 in the enterprise role and 1 in the guest role. We run ClearPass so in the endpoints we removed the client and removed the client from the controllers. Had Client reboot device. Made sure the three connections were gone in the controller and nothing came up in the endpoint.  Once the client came back online and connected to our eduroam (WPA2 enterprise) the device worked fine.  Now the only change we have made in our environment is update our WPA2 enterprise cert.  This is our first PC with issues and we have had about 20 MAC users with issues (different work around for the MAC's - https://community.arubanetworks.com/discussion/macbook-not-able-to-connect#bmf98dac4d-bbdf-4d94-b62f-0185de249b3f)  

    We did not have to make any changes in our WiFi environment, we deemed not too for only about 50 devices showing issues. We have 31k users a day on our network. 

    Hope this helps.
    Bill
    Original Message