Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Wireless Radius server authentication issue

Hi All,

Below is he output from debug radius authentication from my AP.

I can see request is forwarding from AP to radius but Radius is not sending any response.Not sure why its not responding.

I also did not under stand few out outputs also

no sg in radius-timers and

RADIUS/DECODE: parse response no app start; FAIL

what does it mean.

I  restarted radius server , changed secret key but no luck.

019639: May  1 16:15:08.727: RADIUS:  User-Name           [1]   32  "host/3KYGRH1.idcap.intdata.com"

019640: May  1 16:15:08.727: RADIUS:  Framed-MTU          [12]  6   1400

019641: May  1 16:15:08.727: RADIUS:  Called-Station-Id   [30]  16  "0012.01d6.f691"

019642: May  1 16:15:08.727: RADIUS:  Calling-Station-Id  [31]  16  "0021.6aca.9bae"

019643: May  1 16:15:08.727: RADIUS:  Service-Type        [6]   6   Login                     [1]

019644: May  1 16:15:08.727: RADIUS:  Message-Authenticato[80]  18  *

019645: May  1 16:15:08.728: RADIUS:  EAP-Message         [79]  37

019646: May  1 16:15:08.728: RADIUS:   02 02 00 23 01 68 6F 73 74 2F 33 4B 59 47 52 48  [???#?host/3KYGRH]

019647: May  1 16:15:08.729: RADIUS:   31 2E 69 64 63 61 70 2E 69 6E 74 64 61 74 61 2E  [1.idcap.intdata.]

019648: May  1 16:15:08.729: RADIUS:   63 6F 6D                                         [com]

019649: May  1 16:15:08.729: RADIUS:  NAS-Port-Type       [61]  6   802.11 wireless           [19]

019650: May  1 16:15:08.729: RADIUS:  NAS-Port            [5]   6   63096

019651: May  1 16:15:08.729: RADIUS:  NAS-IP-Address      [4]   6   192.168.61.197

019652: May  1 16:15:08.729: RADIUS:  Nas-Identifier      [32]  18  "s-melmvn-aironet"

019653: May  1 16:15:13.932: RADIUS: no sg in radius-timers: ctx 0xD0A570 sg 0x0000

019654: May  1 16:15:13.932: RADIUS: Retransmit to (172.24.33.5:1645,1646) for id 1645/111

019655: May  1 16:15:19.561: RADIUS: no sg in radius-timers: ctx 0xD0A570 sg 0x0000

019656: May  1 16:15:19.561: RADIUS: Retransmit to (172.24.33.5:1645,1646) for id 1645/111

019657: May  1 16:15:25.191: RADIUS: no sg in radius-timers: ctx 0xD0A570 sg 0x0000

019658: May  1 16:15:25.191: RADIUS: Retransmit to (172.24.33.5:1645,1646) for id 1645/111

019659: May  1 16:15:30.661: RADIUS: no sg in radius-timers: ctx 0xD0A570 sg 0x0000

019660: May  1 16:15:30.661: RADIUS: No response from (172.24.33.5:1645,1646) for id 1645/111

019661: May  1 16:15:30.661: RADIUS/DECODE: parse response no app start; FAIL

019662: May  1 16:15:30.661: RADIUS/DECODE: parse response; FAIL      

Second thing i am using  

AIR-AP1231G-A-K9 and it does have only WPA support and laptops are supporting WPA2.

Does this can be also an issue?

4 REPLIES

Wireless Radius server authentication issue

Are you seeing anything in the radius server logs? 

What type of radius server do you have ?

Did this work before?

Is this issue with only 1 ap ?

__________________________________________________________________________________________ "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin ___________________________________________________________
New Member

Wireless Radius server authentication issue

Hi George,

Thanks for reply.

Can not see anything in logs.

Radius server is on window 2003. It never worked before. yes we have only 1 AP.

New Member

Wireless Radius server authentication issue

Hi Saurabh,

Check the connectivity between Server and AP.

Check is that server using 1812,1813 ports or 1645,1646 ports and configure AP to match it.

Regards

Kasun

Hall of Fame Super Silver

Re: Wireless Radius server authentication issue

Just to add my 2 cents, you have the SSID setup or wpa, but your clients are setup or wpa2? This will not work if that is how you have it setup. I'm also guessing you have defined the radius server on the AP and have added the ap as a AAA client on the radius server with the same shared secret? In your windows 7, you have the client setup for wpa-enterprise?

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
1087
Views
0
Helpful
4
Replies