I am using Cisco 1231 ap's with ACS v3.3 and peap auth, the ACS server is using machine auth. also, and AD user database. Everything is working really well with PC's and even with the Macbooks if the password is typed correctly. The problem occurs when a MACBOOK user types their password wrong, the macbook doesn't seem to acknowledge the response from the radius server that it had an invalid username or password and tries to reauthenticate many many times which causes the AD account to immediatly get locked out. I can't seem to find any reasoning behind this. Any ideas would be greatly appreciated.