Hi,
running ArubaOS 8.6.0.17
noticed certificate based authentication fails on an ios 16.1.1 device. Replicated this on two different devices. Possibly this worked if the certificate was installed on a pre ios 16 device, which was then upgraded. But certainly when the certiciate is installed on an ios 16.1.1 device, authentication fails. Installation of the cert itself succeeds. But after installation, authentication to the wireless network fails. To be clear, this is working for a few hundred existing ios devices (running most likely an older ios version, or were upgraded to ios 16 when the certificate was already installed before the upgrade) . So most likely this is ios 16.1.1 related. The auth-tracebuf shows me :
Nov 22 10:48:10 station-up * e6:b8:dc:47:87:80 24:62:ce:43:87:90 - - wpa2 aes
Nov 22 10:48:10 eap-id-req <- e6:b8:dc:47:87:80 24:62:ce:43:87:90 1 5
Nov 22 10:48:10 eap-id-resp -> e6:b8:dc:47:87:80 24:62:ce:43:87:90 1 32
blablabla@group.comNov 22 10:48:10 rad-req -> e6:b8:dc:47:87:80 24:62:ce:43:87:90 80 232 192.168.101.248
Nov 22 10:48:10 rad-resp <- e6:b8:dc:47:87:80 24:62:ce:43:87:90/SRV-BE-DI-141 80 90
Nov 22 10:48:10 eap-req <- e6:b8:dc:47:87:80 24:62:ce:43:87:90 2 6
Nov 22 10:48:10 eap-resp -> e6:b8:dc:47:87:80 24:62:ce:43:87:90 2 161
Nov 22 10:48:10 rad-req -> e6:b8:dc:47:87:80 24:62:ce:43:87:90/SRV-BE-DI-141 83 399 192.168.101.248
Nov 22 10:48:10 rad-resp <- e6:b8:dc:47:87:80 24:62:ce:43:87:90/SRV-BE-DI-141 83 1188
Nov 22 10:48:10 eap-req <- e6:b8:dc:47:87:80 24:62:ce:43:87:90 3 1096
Nov 22 10:48:10 eap-resp -> e6:b8:dc:47:87:80 24:62:ce:43:87:90 3 6
Nov 22 10:48:10 rad-req -> e6:b8:dc:47:87:80 24:62:ce:43:87:90/SRV-BE-DI-141 84 244 192.168.101.248
Nov 22 10:48:10 rad-resp <- e6:b8:dc:47:87:80 24:62:ce:43:87:90/SRV-BE-DI-141 84 980
Nov 22 10:48:10 eap-req <- e6:b8:dc:47:87:80 24:62:ce:43:87:90 4 890
Nov 22 10:48:15 eap-req <- e6:b8:dc:47:87:80 24:62:ce:43:87:90 4 890
Nov 22 10:48:20 eap-req <- e6:b8:dc:47:87:80 24:62:ce:43:87:90 4 890
Nov 22 10:48:25 eap-req <- e6:b8:dc:47:87:80 24:62:ce:43:87:90 4 890
Nov 22 10:48:30 dot1x-timeout * e6:b8:dc:47:87:80 24:62:ce:43:87:90 4 3 server timeout
Nov 22 10:48:30 dot1x-timeout * e6:b8:dc:47:87:80 24:62:ce:43:87:90 5 2 station timeout
Anyone experienced something similar?
__PRESENT