Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

WLC and Radius issue

We keep get the following error. And everytime we got this, the clients have been force to re-authentication.

Any idea?

Thanks,

RADIUS server 10.108.32.33:1812 activated on WLAN 1

RADIUS server 10.140.4.9:1812 deactivated on WLAN 1

12 REPLIES
Hall of Fame Super Silver

Re: WLC and Radius issue

Did you have these radius servers configured on your wlc?

-Scott
*** Please rate helpful posts ***
New Member

Re: WLC and Radius issue

Hello ,

I am facing the same error... did you ever got a solution ???

New Member

Re: WLC and Radius issue

Hello ,

I am facing the same error... did you ever got a solution ???

Re: WLC and Radius issue

Fird\st make sure these radius servers are online and are configured in your wlc properly. If they are tehn look at the server timeout in the WLC under the radius config. Its default is 2 seconds. In crease it to 10 seconds.

Monitor and see if you still get the alerts

__________________________________________________________________________________________
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
__________________________________________________________________________________________
‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

__________________________________________________________________________________________ "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin ___________________________________________________________
New Member

Re: WLC and Radius issue

George, tks for your reply!

I have changed the timeout to 10 secs as you suggested.

Look, the alarm message shows up only for "accounting servers" thru 1646 port

Do I really need that config ? I mean, can I use only the authentication servers (port 1645) ?

thanks in advance!!

Hall of Fame Super Silver

Re: WLC and Radius issue

If you are not doing accounting, you don't need that configured. Only if you are also doing accounting would you need that port open 1646.

Sent from Cisco Technical Support iPad App

-Scott
*** Please rate helpful posts ***
New Member

Re: WLC and Radius issue

Hi Scott... tks again!

I disabled accounting servers, then I am not seeing anymore the error message "RADIUS server X.X.X.X:1813 deactivated in global list"... But I am still seeing 2 or 3 users (out of 40) with auth problems...

pls check below screen shot

*** user julio.quintao is associated but he has just "de-authentication".... (other association without users are mobile phones) ***

Did you ever see a problem like that ?

Re: WLC and Radius issue

Go to clients. Look up the client by mac address and look at the PEM state. It will tell you why the client is failing ..

DHCP_REQ is meaning there is a DHCP issue

8021x_REQ means it failed auth

You could also turn off exclude as a test, perhaps these clients are a little slow to auth.

__________________________________________________________________________________________
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
__________________________________________________________________________________________
‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

__________________________________________________________________________________________ "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin ___________________________________________________________
New Member

Re: WLC and Radius issue

Hi George, tks for your reply!

I got that DHCP error message... what that means ?

I confirmed no problem at DHCP server... I am using 50% of that range.....

Re: WLC and Radius issue

On that WLAN do you have DHCP REQ check boxed ? If you do and you have a static ip it could reg that. You said you checked the DHCP server, but a problem with DHCP would also show that ..

__________________________________________________________________________________________
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
__________________________________________________________________________________________
‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

__________________________________________________________________________________________ "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin ___________________________________________________________
New Member

Re: WLC and Radius issue

this is the situation I have in that advanced tab

Also, this is my DHCP server (windows srv 2003)

Re: WLC and Radius issue

the client having the issue. Check to make sure he DOESNT have a static address set ..

__________________________________________________________________________________________
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
__________________________________________________________________________________________
‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

__________________________________________________________________________________________ "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin ___________________________________________________________
710
Views
0
Helpful
12
Replies
CreatePlease login to create content