Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Authentication issue for AAA

Hi Everyone,

I have converted AP's AIR-LAP1231G-A-K9 to lightweight mode to work with WLC 2106 but after conveting the AP's have joined to WLC but clients when they try to connected using these Access points face authentication issues, we are using the same AAA sever IP and ports for authentication as we are were using for autonomus mode. with  access poitns operating in autonomous mode they dont have any issue with authentication. We are suing WPA2 policy with AES for authentication with AAA server. We have the reachbility to AAA sever from network, no issue with this. Please see the output of debug AAA evernts taken from WLC

radiusTransportThread: Jul 07 02:54:48.541: ****Enter processRadiusResponse: response code=11

*radiusTransportThread: Jul 07 02:54:48.541: 00:22:5f:49:a9:30 Access-Challenge received from RADIUS server x.x.x.x for mobile 00:22:5f:49:a9:30 receiveId = 37

*aaaQueueReader: Jul 07 02:54:48.542: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0

*aaaQueueReader: Jul 07 02:54:48.543: 00:22:5f:49:a7:ad Successful transmission of Authentication Packet (id 155) to x.x.x.x:1812, proxy state 00:22:5f:49:a7:ad-00:00

*aaaQueueReader: Jul 07 02:54:48.562: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0

*aaaQueueReader: Jul 07 02:54:48.562: 00:22:5f:49:a9:30 Successful transmission of Authentication Packet (id 156) to x.x.x.x:1812, proxy state 00:22:5f:49:a9:30-00:00

*radiusTransportThread: Jul 07 02:54:49.308: c0:f8:da:9f:73:cf Successful transmission of Authentication Packet (id 137) to x.x.x.x:1812, proxy state c0:f8:da:9f:73:cf-00:00

*radiusTransportThread: Jul 07 02:54:49.534: 00:db:df:08:bd:53 Max retransmission of Access-Request (id 41) to x.x.x.x reached for mobile 00:db:df:08:bd:53

*radiusTransportThread: Jul 07 02:54:49.534: 00:db:df:08:bd:53 [Error] Client requested no retries for mobile 00:DB:DF:08:BD:53

*radiusTransportThread: Jul 07 02:54:49.534: 00:db:df:08:bd:53 Returning AAA Error 'Timeout' (-5) for mobile 00:db:df:08:bd:53

*aaaQueueReader: Jul 07 02:54:50.088: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0

*aaaQueueReader: Jul 07 02:54:50.088: c0:f8:da:9f:73:cf Successful transmission of Authentication Packet (id 157) to x.x.x.x:1812, proxy state c0:f8:da:9f:73:cf-00:00

*radiusTransportThread: Jul 07 02:54:50.280: ****Enter processIncomingMessages: response code=11

*radiusTransportThread: Jul 07 02:54:50.280: ****Enter processRadiusResponse: response code=11

*radiusTransportThread: Jul 07 02:54:50.280: c0:f8:da:9f:73:cf Access-Challenge received from RADIUS server x.x.x.x for mobile c0:f8:da:9f:73:cf receiveId = 65

*aaaQueueReader: Jul 07 02:54:50.284: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0

*aaaQueueReader: Jul 07 02:54:50.284: c0:f8:da:9f:73:cf Successful transmission of Authentication Packet (id 158) to x.x.x.x:1812, proxy state c0:f8:da:9f:73:cf-00:00

*radiusTransportThread: Jul 07 02:54:52.963: c0:f8:da:9f:7d:17 Successful transmission of Authentication Packet (id 59) to x.x.x.x:1812, proxy state c0:f8:da:9f:7d:17-00:00

*radiusTransportThread: Jul 07 02:54:54.812: c0:f8:da:9f:7d:17 Successful transmission of Authentication Packet (id 96) to x.x.x.x:1812, proxy state c0:f8:da:9f:7d:17-00:00

*radiusTransportThread: Jul 07 02:54:57.568: c0:f8:da:9f:7d:17 Max retransmission of Access-Request (id 43) to x.x.x.x reached for mobile c0:f8:da:9f:7d:17

*radiusTransportThread: Jul 07 02:54:57.568: c0:f8:da:9f:7d:17 [Error] Client requested no retries for mobile C0:F8:DA:9F:7D:17

*radiusTransportThread: Jul 07 02:54:57.568: c0:f8:da:9f:7d:17 Returning AAA Error 'Timeout' (-5) for mobile c0:f8:da:9f:7d:17

*radiusTransportThread: Jul 07 02:54:58.489: c0:f8:da:9f:7d:17 Successful transmission of Authentication Packet (id 61) to x.x.x.x:1812, proxy state c0:f8:da:9f:7d:17-00:00

*radiusTransportThread: Jul 07 02:54:59.481: c0:f8:da:9f:7d:17 Successful transmission of Authentication Packet (id 79) to x.x.x.x:1812, proxy state c0:f8:da:9f:7d:17-00:00

*radiusTransportThread: Jul 07 02:55:00.373: c0:f8:da:9f:7d:17 Successful transmission of Authentication Packet (id 98) to x.x.x.x:1812, proxy state c0:f8:da:9f:7d:17-00:00

*radiusTransportThread: Jul 07 02:55:01.362: c0:f8:da:9f:7d:17 Successful transmission of Authentication Packet (id 119) to x.x.x.x:1812, proxy state c0:f8:da:9f:7d:17-00:00

*radiusTransportThread: Jul 07 02:55:02.273: c0:f8:da:9f:7d:17 Successful transmission of Authentication Packet (id 139) to x.x.x.x:1812, proxy state c0:f8:da:9f:7d:17-00:00

*radiusTransportThread: Jul 07 02:55:02.786: c0:f8:da:9f:91:a5 Successful transmission of Authentication Packet (id 140) to x.x.x.x:1812, proxy state c0:f8:da:9f:91:a5-00:00

*radiusTransportThread: Jul 07 02:55:03.681: c0:f8:da:9f:91:a5 Max retransmission of Access-Request (id 45) to x.x.x.x reached for mobile c0:f8:da:9f:91:a5

*radiusTransportThread: Jul 07 02:55:03.681: c0:f8:da:9f:91:a5 [Error] Client requested no retries for mobile C0:F8:DA:9F:91:A5

*radiusTransportThread: Jul 07 02:55:03.681: c0:f8:da:9f:91:a5 Returning AAA Error 'Timeout' (-5) for mobile c0:f8:da:9f:91:a5

*radiusTransportThread: Jul 07 02:55:04.598: c0:f8:da:9f:91:a5 Successful transmission of Authentication Packet (id 63) to x.x.x.x:1812, proxy state c0:f8:da:9f:91:a5-00:00

*radiusTransportThread: Jul 07 02:55:05.795: 00:24:2b:70:13:d7 Max retransmission of Access-Request (id 47) to x.x.x.x reached for mobile 00:24:2b:70:13:d7

*radiusTransportThread: Jul 07 02:55:05.795: 00:24:2b:70:13:d7 [Error] Client requested no retries for mobile 00:24:2B:70:13:D7

*radiusTransportThread: Jul 07 02:55:05.795: 00:24:2b:70:13:d7 Returning AAA Error 'Timeout' (-5) for mobile 00:24:2b:70:13:d7

*aaaQueueReader: Jul 07 02:55:06.080: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0

*aaaQueueReader: Jul 07 02:55:06.080: c0:f8:da:9f:7d:17 Successful transmission of Authentication Packet (id 159) to x.x.x.x:1812, proxy state c0:f8:da:9f:7d:17-00:00

*radiusTransportThread: Jul 07 02:55:06.130: c0:f8:da:9f:7d:0f Max retransmission of Access-Request (id 48) to x.x.x.x reached for mobile c0:f8:da:9f:7d:0f

*radiusTransportThread: Jul 07 02:55:06.130: c0:f8:da:9f:7d:0f [Error] Client requested no retries for mobile C0:F8:DA:9F:7D:0F

*radiusTransportThread: Jul 07 02:55:06.130: c0:f8:da:9f:7d:0f Returning AAA Error 'Timeout' (-5) for mobile c0:f8:da:9f:7d:0f

*radiusTransportThread: Jul 07 02:55:06.638: 00:db:df:08:bd:53 Successful transmission of Authentication Packet (id 100) to x.x.x.x:1812, proxy state 00:db:df:08:bd:53-00:00

*radiusTransportThread: Jul 07 02:55:07.168: 00:db:df:08:bd:53 Successful transmission of Authentication Packet (id 121) to x.x.x.x:1812, proxy state 00:db:df:08:bd:53-00:00

*radiusTransportThread: Jul 07 02:55:07.168: c0:f8:da:9f:7d:0f Successful transmission of Authentication Packet (id 65) to x.x.x.x:1812, proxy state c0:f8:da:9f:7d:0f-00:00

*radiusTransportThread: Jul 07 02:55:07.735: 00:db:df:08:bd:53 Successful transmission of Authentication Packet (id 142) to x.x.x.x:1812, proxy state 00:db:df:08:bd:53-00:00

*radiusTransportThread: Jul 07 02:55:08.003: 00:24:2b:70:13:d7 Max retransmission of Access-Request (id 50) to x.x.x.x reached for mobile 00:24:2b:70:13:d7

*radiusTransportThread: Jul 07 02:55:08.003: 00:24:2b:70:13:d7 [Error] Client requested no retries for mobile 00:24:2B:70:13:D7

*radiusTransportThread: Jul 07 02:55:08.003: 00:24:2b:70:13:d7 Returning AAA Error 'Timeout' (-5) for mobile 00:24:2b:70:13:d7

*aaaQueueReader: Jul 07 02:55:08.003: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0

*aaaQueueReader: Jul 07 02:55:08.004: 00:24:2b:70:13:d7 Successful transmission of Authentication Packet (id 160) to x.x.x.x:1812, proxy state 00:24:2b:70:13:d7-00:00

*aaaQueueReader: Jul 07 02:55:08.057: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0

*aaaQueueReader: Jul 07 02:55:08.058: 00:db:df:08:bd:53 Successful transmission of Authentication Packet (id 161) to x.x.x.x:1812, proxy state 00:db:df:08:bd:53-00:00

*radiusTransportThread: Jul 07 02:55:08.130: c0:f8:da:9f:91:a5 Successful transmission of Authentication Packet (id 82) to x.x.x.x:1812, proxy state c0:f8:da:9f:91:a5-00:00

*radiusTransportThread: Jul 07 02:55:08.160: 00:24:2b:70:13:d7 Successful transmission of Authentication Packet (id 67) to x.x.x.x:1812, proxy state 00:24:2b:70:13:d7-00:00

*radiusTransportThread: Jul 07 02:55:08.263: ****Enter processIncomingMessages: response code=11

*radiusTransportThread: Jul 07 02:55:08.263: ****Enter processRadiusResponse: response code=11

*radiusTransportThread: Jul 07 02:55:08.263: 00:db:df:08:bd:53 Access-Challenge received from RADIUS server x.x.x.x for mobile 00:db:df:08:bd:53 receiveId = 6

*aaaQueueReader: Jul 07 02:55:08.269: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0

*aaaQueueReader: Jul 07 02:55:08.270: 00:db:df:08:bd:53 Successful transmission of Authentication Packet (id 162) to x.x.x.x:1812, proxy state 00:db:df:08:bd:53-00:00

*radiusTransportThread: Jul 07 02:55:08.275: c0:f8:da:9f:7d:0f Successful transmission of Authentication Packet (id 83) to x.x.x.x:1812, proxy state c0:f8:da:9f:7d:0f-00:00

*radiusTransportThread: Jul 07 02:55:08.376: c0:f8:da:9f:91:a5 Successful transmission of Authentication Packet (id 102) to x.x.x.x:1812, proxy state c0:f8:da:9f:91:a5-00:00

*radiusTransportThread: Jul 07 02:55:08.689: 00:24:2b:70:13:d7 Successful transmission of Authentication Packet (id 85) to x.x.x.x:1812, proxy state 00:24:2b:70:13:d7-00:00

*radiusTransportThread: Jul 07 02:55:08.860: 00:24:2b:70:13:d7 Successful transmission of Authentication Packet (id 104) to x.x.x.x:1812, proxy state 00:24:2b:70:13:d7-00:00

*radiusTransportThread: Jul 07 02:55:09.206: c0:f8:da:9f:91:a5 Successful transmission of Authentication Packet (id 123) to x.x.x.x:1812, proxy state c0:f8:da:9f:91:a5-00:00

*radiusTransportThread: Jul 07 02:55:09.293: c0:f8:da:9f:7d:0f Successful transmission of Authentication Packet (id 106) to x.x.x.x:1812, proxy state c0:f8:da:9f:7d:0f-00:00

*radiusTransportThread: Jul 07 02:55:09.428: 00:24:2b:70:13:d7 Successful transmission of Authentication Packet (id 125) to x.x.x.x:1812, proxy state 00:24:2b:70:13:d7-00:00

*radiusTransportThread: Jul 07 02:55:09.589: 00:24:2b:70:13:d7 Successful transmission of Authentication Packet (id 144) to x.x.x.x:1812, proxy state 00:24:2b:70:13:d7-00:00

*radiusTransportThread: Jul 07 02:55:09.741: 00:23:4e:b7:1d:d3 Max retransmission of Access-Request (id 52) to x.x.x.x reached for mobile 00:23:4e:b7:1d:d3

*radiusTransportThread: Jul 07 02:55:09.741: 00:23:4e:b7:1d:d3 [Error] Client requested no retries for mobile 00:23:4E:B7:1D:D3

*radiusTransportThread: Jul 07 02:55:09.741: 00:23:4e:b7:1d:d3 Returning AAA Error 'Timeout' (-5) for mobile 00:23:4e:b7:1d:d3

*radiusTransportThread: Jul 07 02:55:09.948: 00:23:4e:b7:1d:d3 Successful transmission of Authentication Packet (id 69) to x.x.x.x:1812, proxy state 00:23:4e:b7:1d:d3-00:00

*aaaQueueReader: Jul 07 02:55:10.041: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0

*aaaQueueReader: Jul 07 02:55:10.042: 00:24:2b:70:13:d7 Successful transmission of Authentication Packet (id 163) to x.x.x.x:1812, proxy state 00:24:2b:70:13:d7-00:00

*radiusTransportThread: Jul 07 02:55:10.244: ****Enter processIncomingMessages: response code=11

*radiusTransportThread: Jul 07 02:55:10.244: ****Enter processRadiusResponse: response code=11

*radiusTransportThread: Jul 07 02:55:10.244: 00:24:2b:70:13:d7 Access-Challenge received from RADIUS server x.x.x.x for mobile 00:24:2b:70:13:d7 receiveId = 34

*radiusTransportThread: Jul 07 02:55:10.323: c0:f8:da:9f:73:cf Successful transmission of Authentication Packet (id 107) to x.x.x.x:1812, proxy state c0:f8:da:9f:73:cf-00:00

*aaaQueueReader: Jul 07 02:55:10.326: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0

*aaaQueueReader: Jul 07 02:55:10.326: 00:24:2b:70:13:d7 Successful transmission of Authentication Packet (id 164) to x.x.x.x:1812, proxy state 00:24:2b:70:13:d7-00:00

*radiusTransportThread: Jul 07 02:55:10.432: c0:f8:da:9f:7d:0f Successful transmission of Authentication Packet (id 127) to x.x.x.x:1812, proxy state c0:f8:da:9f:7d:0f-00:00

*radiusTransportThread: Jul 07 02:55:10.715: 00:23:4e:b7:1d:d6 Max retransmission of Access-Request (id 53) to x.x.x.x reached for mobile 00:23:4e:b7:1d:d6

*radiusTransportThread: Jul 07 02:55:10.715: 00:23:4e:b7:1d:d6 [Error] Client requested no retries for mobile 00:23:4E:B7:1D:D6

*radiusTransportThread: Jul 07 02:55:10.715: 00:23:4e:b7:1d:d6 Returning AAA Error 'Timeout' (-5) for mobile 00:23:4e:b7:1d:d6

*radiusTransportThread: Jul 07 02:55:10.734: 00:23:4e:b7:1d:d3 Successful transmission of Authentication Packet (id 87) to x.x.x.x:1812, proxy state 00:23:4e:b7:1d:d3-00:00

*radiusTransportThread: Jul 07 02:55:11.022: 00:23:4e:b7:1d:d3 Successful transmission of Authentication Packet (id 109) to x.x.x.x:1812, proxy state 00:23:4e:b7:1d:d3-00:00

*radiusTransportThread: Jul 07 02:55:11.855: 00:23:4e:b7:1d:d3 Successful transmission of Authentication Packet (id 129) to x.x.x.x:1812, proxy state 00:23:4e:b7:1d:d3-00:00

*radiusTransportThread: Jul 07 02:55:12.075: 00:23:4e:b7:1d:d3 Successful transmission of Authentication Packet (id 146) to x.x.x.x:1812, proxy state 00:23:4e:b7:1d:d3-00:00

*radiusTransportThread: Jul 07 02:55:12.254: c0:f8:da:9f:73:cf Max retransmission of Access-Request (id 54) to x.x.x.x reached for mobile c0:f8:da:9f:73:cf

*radiusTransportThread: Jul 07 02:55:12.254: c0:f8:da:9f:73:cf [Error] Client requested no retries for mobile C0:F8:DA:9F:73:CF

*radiusTransportThread: Jul 07 02:55:12.254: c0:f8:da:9f:73:cf Returning AAA Error 'Timeout' (-5) for mobile c0:f8:da:9f:73:cf

*aaaQueueReader: Jul 07 02:55:12.664: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0

*aaaQueueReader: Jul 07 02:55:12.664: 00:23:4e:b7:1d:d3 Successful transmission of Authentication Packet (id 165) to x.x.x.x:1812, proxy state 00:23:4e:b7:1d:d3-00:00

*radiusTransportThread: Jul 07 02:55:12.842: ****Enter processIncomingMessages: response code=11

*radiusTransportThread: Jul 07 02:55:12.842: ****Enter processRadiusResponse: response code=11

*radiusTransportThread: Jul 07 02:55:12.843: 00:23:4e:b7:1d:d3 Access-Challenge received from RADIUS server x.x.x.x for mobile 00:23:4e:b7:1d:d3 receiveId = 34

*aaaQueueReader: Jul 07 02:55:12.847: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0

*aaaQueueReader: Jul 07 02:55:12.847: 00:23:4e:b7:1d:d3 Successful transmission of Authentication Packet (id 166) to x.x.x.x:1812, proxy state 00:23:4e:b7:1d:d3-00:00

*radiusTransportThread: Jul 07 02:55:13.107: c0:f8:da:9f:91:a5 Successful transmission of Authentication Packet (id 148) to x.x.x.x:1812, proxy state c0:f8:da:9f:91:a5-00:00

*aaaQueueReader: Jul 07 02:55:13.712: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0

*aaaQueueReader: Jul 07 02:55:13.713: c0:f8:da:9f:91:a5 Successful transmission of Authentication Packet (id 167) to x.x.x.x:1812, proxy state c0:f8:da:9f:91:a5-00:00

*radiusTransportThread: Jul 07 02:55:13.830: 00:23:4e:b7:1d:d6 Max retransmission of Access-Request (id 56) to x.x.x.x reached for mobile 00:23:4e:b7:1d:d6

*radiusTransportThread: Jul 07 02:55:13.830: 00:23:4e:b7:1d:d6 [Error] Client requested no retries for mobile 00:23:4E:B7:1D:D6

*radiusTransportThread: Jul 07 02:55:13.830: 00:23:4e:b7:1d:d6 Returning AAA Error 'Timeout' (-5) for mobile 00:23:4e:b7:1d:d6

*aaaQueueReader: Jul 07 02:55:13.831: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0

*aaaQueueReader: Jul 07 02:55:13.831: 00:23:4e:b7:1d:d6 Successful transmission of Authentication Packet (id 168) to x.x.x.x:1812, proxy state 00:23:4e:b7:1d:d6-00:00

*radiusTransportThread: Jul 07 02:55:13.912: ****Enter processIncomingMessages: response code=11

*radiusTransportThread: Jul 07 02:55:13.912: ****Enter processRadiusResponse: response code=11

*radiusTransportThread: Jul 07 02:55:13.912: c0:f8:da:9f:91:a5 Access-Challenge received from RADIUS server x.x.x.x for mobile c0:f8:da:9f:91:a5 receiveId = 66

*aaaQueueReader: Jul 07 02:55:13.917: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0

*aaaQueueReader: Jul 07 02:55:13.917: c0:f8:da:9f:91:a5 Successful transmission of Authentication Packet (id 169) to x.x.x.x:1812, proxy state c0:f8:da:9f:91:a5-00:00

*radiusTransportThread: Jul 07 02:55:14.049: 00:23:4e:b7:1d:d6 Successful transmission of Authentication Packet (id 71) to x.x.x.x:1812, proxy state 00:23:4e:b7:1d:d6-00:00

*radiusTransportThread: Jul 07 02:55:14.061: 00:22:5f:49:a9:30 Max retransmission of Access-Request (id 58) to x.x.x.x reached for mobile 00:22:5f:49:a9:30

*radiusTransportThread: Jul 07 02:55:14.061: 00:22:5f:49:a9:30 [Error] Client requested no retries for mobile 00:22:5F:49:A9:30

*radiusTransportThread: Jul 07 02:55:14.061: 00:22:5f:49:a9:30 Returning AAA Error 'Timeout' (-5) for mobile 00:22:5f:49:a9:30

*radiusTransportThread: Jul 07 02:55:14.271: 00:22:5f:49:a9:30 Successful transmission of Authentication Packet (id 73) to x.x.x.x:1812, proxy state 00:22:5f:49:a9:30-00:00

*radiusTransportThread: Jul 07 02:55:14.577: c0:f8:da:9f:7d:0f Successful transmission of Authentication Packet (id 150) to x.x.x.x:1812, proxy state c0:f8:da:9f:7d:0f-00:00

*radiusTransportThread: Jul 07 02:55:14.820: 00:23:4e:b7:1d:d6 Successful transmission of Authentication Packet (id 90) to x.x.x.x:1812, proxy state 00:23:4e:b7:1d:d6-00:00

*radiusTransportThread: Jul 07 02:55:14.900: 00:22:5f:49:a9:30 Successful transmission of Authentication Packet (id 91) to x.x.x.x:1812, proxy state 00:22:5f:49:a9:30-00:00

*radiusTransportThread: Jul 07 02:55:15.032: 00:23:4e:b7:1d:d6 Successful transmission of Authentication Packet (id 112) to x.x.x.x:1812, proxy state 00:23:4e:b7:1d:d6-00:00

*radiusTransportThread: Jul 07 02:55:15.081: 00:22:5f:49:a9:30 Successful transmission of Authentication Packet (id 113) to x.x.x.x:1812, proxy state 00:22:5f:49:a9:30-00:00

*aaaQueueReader: Jul 07 02:55:15.399: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0

*aaaQueueReader: Jul 07 02:55:15.400: c0:f8:da:9f:7d:0f Successful transmission of Authentication Packet (id 170) to x.x.x.x:1812, proxy state c0:f8:da:9f:7d:0f-00:00

*radiusTransportThread: Jul 07 02:55:15.472: 00:22:5f:49:a7:ad Successful transmission of Authentication Packet (id 75) to x.x.x.x:1812, proxy state 00:22:5f:49:a7:ad-00:00

*radiusTransportThread: Jul 07 02:55:15.583: ****Enter processIncomingMessages: response code=11

*radiusTransportThread: Jul 07 02:55:15.583: ****Enter processRadiusResponse: response code=11

*radiusTransportThread: Jul 07 02:55:15.583: c0:f8:da:9f:7d:0f Access-Challenge received from RADIUS server x.x.x.x for mobile c0:f8:da:9f:7d:0f receiveId = 9

*aaaQueueReader: Jul 07 02:55:15.589: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0

*aaaQueueReader: Jul 07 02:55:15.589: c0:f8:da:9f:7d:0f Successful transmission of Authentication Packet (id 171) to x.x.x.x:1812, proxy state c0:f8:da:9f:7d:0f-00:00

*radiusTransportThread: Jul 07 02:55:15.832: 00:23:4e:b7:1d:d6 Successful transmission of Authentication Packet (id 131) to x.x.x.x:1812, proxy state 00:23:4e:b7:1d:d6-00:00

*radiusTransportThread: Jul 07 02:55:16.066: 00:23:4e:b7:1d:d6 Successful transmission of Authentication Packet (id 152) to x.x.x.x:1812, proxy state 00:23:4e:b7:1d:d6-00:00

*radiusTransportThread: Jul 07 02:55:16.253: 00:22:5f:49:a7:ad Successful transmission of Authentication Packet (id 93) to x.x.x.x:1812, proxy state 00:22:5f:49:a7:ad-00:00

*radiusTransportThread: Jul 07 02:55:16.264: c0:f8:da:9f:73:cf Successful transmission of Authentication Packet (id 77) to x.x.x.x:1812, proxy state c0:f8:da:9f:73:cf-00:00

*aaaQueueReader: Jul 07 02:55:16.654: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0

*aaaQueueReader: Jul 07 02:55:16.655: 00:23:4e:b7:1d:d6 Successful transmission of Authentication Packet (id 172) to x.x.x.x:1812, proxy state 00:23:4e:b7:1d:d6-00:00

*radiusTransportThread: Jul 07 02:55:16.831: ****Enter processIncomingMessages: response code=11

*radiusTransportThread: Jul 07 02:55:16.831: ****Enter processRadiusResponse: response code=11

*radiusTransportThread: Jul 07 02:55:16.831: 00:23:4e:b7:1d:d6 Access-Challenge received from RADIUS server x.x.x.x for mobile 00:23:4e:b7:1d:d6 receiveId = 34

*aaaQueueReader: Jul 07 02:55:16.837: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0

*aaaQueueReader: Jul 07 02:55:16.837: 00:23:4e:b7:1d:d6 Successful transmission of Authentication Packet (id 173) to x.x.x.x:1812, proxy state 00:23:4e:b7:1d:d6-00:00

*radiusTransportThread: Jul 07 02:55:17.003: 00:22:5f:49:a7:ad Successful transmission of Authentication Packet (id 115) to x.x.x.x:1812, proxy state 00:22:5f:49:a7:ad-00:00

*radiusTransportThread: Jul 07 02:55:17.271: c0:f8:da:9f:73:cf Successful transmission of Authentication Packet (id 95) to x.x.x.x:1812, proxy state c0:f8:da:9f:73:cf-00:00

(Cisco Controller) >

(Cisco Controller) >

(Cisco Controller) >

(Cisco Controller) >*radiusTransportThread: Jul 07 02:55:17.763: 00:22:5f:49:a7:ad Successful transmission of Authentication Packet (id 133) to x.x.x.x:1812, proxy state 00:22:5f:49:a7:ad-00:00

*radiusTransportThread: Jul 07 02:55:18.299: c0:f8:da:9f:73:cf Successful transmission of Authentication Packet (id 117) to x.x.x.x:1812, proxy state c0:f8:da:9f:73:cf-00:00

debug aaa events enable *radiusTransportThread: Jul 07 02:55:18.344: 00:22:5f:49:a9:30 Successful transmission of Authentication Packet (id 135) to x.x.x.x:1812, proxy state 00:22:5f:49:a9:30-00:00

*radiusTransportThread: Jul 07 02:55:18.543: 00:22:5f:49:a7:ad Successful transmission of Authentication Packet (id 155) to x.x.x.x:1812, proxy state 00:22:5f:49:a7:ad-00:00                                                                                                                                         debug aaa events disable*radiusTransportThread: Jul 07 02:55:18.563: 00:22:5f:49:a9:30 Successful transmission of Authentication Packet (id 156) to x.x.x.x:1812, proxy state 00:22:5f:49:a9:30-00:00

*aaaQueueReader: Jul 07 02:55:18.987: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0

*aaaQueueReader: Jul 07 02:55:18.987: 00:22:5f:49:a9:30 Successful transmission of Authentication Packet (id 174) to x.x.x.x:1812, proxy state 00:22:5f:49:a9:30-00:00

*aaaQueueReader: Jul 07 02:55:19.105: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0

*aaaQueueReader: Jul 07 02:55:19.106: 00:22:5f:49:a7:ad Successful transmission of Authentication Packet (id 175) to x.x.x.x:1812, proxy state 00:22:5f:49:a7:ad-00:00

*radiusTransportThread: Jul 07 02:55:19.155: ****Enter processIncomingMessages: response code=11

*radiusTransportThread: Jul 07 02:55:19.155: ****Enter processRadiusResponse: response code=11

*radiusTransportThread: Jul 07 02:55:19.155: 00:22:5f:49:a9:30 Access-Challenge received from RADIUS server x.x.x.x for mobile 00:22:5f:49:a9:30 receiveId = 37

*aaaQueueReader: Jul 07 02:55:19.159: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0

*aaaQueueReader: Jul 07 02:55:19.159: 00:22:5f:49:a9:30 Successful transmission of Authentication Packet (id 176) to x.x.x.x:1812, proxy state 00:22:5f:49:a9:30-00:00

*radiusTransportThread: Jul 07 02:55:19.278: ****Enter processIncomingMessages: response code=11

*radiusTransportThread: Jul 07 02:55:19.278: ****Enter processRadiusResponse: response code=11

*radiusTransportThread: Jul 07 02:55:19.278: 00:22:5f:49:a7:ad Access-Challenge received from RADIUS server x.x.x.x for mobile 00:22:5f:49:a7:ad receiveId = 8

*aaaQueueReader: Jul 07 02:55:19.284: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0

*aaaQueueReader: Jul 07 02:55:19.284: 00:22:5f:49:a7:ad Successful transmission of Authentication Packet (id 177) to x.x.x.x:1812, proxy state 00:22:5f:49:a7:ad-00:00

*radiusTransportThread: Jul 07 02:55:19.309: c0:f8:da:9f:73:cf Successful transmission of Authentication Packet (id 137) to x.x.x.x:1812, proxy state c

3 REPLIES
Hall of Fame Super Silver

Re: Authentication issue for AAA

Did you add the radius server on the WLC and did you add the WLC as a aaa client in radius?

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
New Member

Hi Scott, I got the same

Hi Scott,

 

I got the same problem from WLC 2106, I have added radius server on WLC and added WLC as AAA client on the Microsoft NPS server 2012 R2.

 

Here is the log from WLC:

*radiusTransportThread: Sep 08 13:36:13.148: 60:67:20:44:c4:08 Access-Reject received from RADIUS server 10.10.50.68 for mobile 60:67:20:44:c4:08 receiveId = 14

*radiusTransportThread: Sep 08 13:36:13.148: 60:67:20:44:c4:08 [Error] Client requested no retries for mobile 60:67:20:44:C4:08

*radiusTransportThread: Sep 08 13:36:13.149: 60:67:20:44:c4:08 Returning AAA Error 'Authentication Failed' (-4) for mobile 60:67:20:44:c4:08

 

Here is the error code from NPS:

"EIA-ADS4","IAS",09/08/2015,18:13:55,3,,"name.domain.com/NewOrg/Users/Admin Accounts/username Admin",,,,,,,,0,"10.10.141.10","WLC",,,,,,,5,"Connections to other access servers",65,"311 1 10.10.50.68 09/08/2015 14:13:09 2",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"Use Windows authentication for all users",1,,,,

 

Thanks,

Bernard

 

 

Authentication issue for AAA

What is your Radius server?
what do the logs on the radius server say about these attempts?

Rating useful replies is more useful than saying "Thank you"

Rating useful replies is more useful than saying "Thank you"
526
Views
0
Helpful
3
Replies