Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Authentication Failure in Aironet 1210

I have few APs. The client authentication is done by ACS server. ALL the APs were working fine before and some of the AP have no clients associated. Here is the output from sys log

Jun 25 19:47:05.767: %DOT11-7-AUTH_FAILED: Station 001c.bf7a.0055 Authentication failed

Jun 25 19:47:05.855: %DOT11-7-AUTH_FAILED: Station 001c.bf7a.0055 Authentication failed

Jun 25 19:47:05.910: %DOT11-7-AUTH_FAILED: Station 001c.bf7a.0055 Authentication failed

Jun 25 19:47:35.951: %DOT11-7-AUTH_FAILED: Station 001c.bf7a.0055 Authentication failed

Jun 25 19:51:27.331: %DOT11-7-AUTH_FAILED: Station 0014.a8a7.86bc Authentication failed

Jun 25 19:54:02.054: %DOT11-7-AUTH_FAILED: Station 0014.a8a7.86bc Authentication failed

Jun 25 19:56:26.545: %DOT11-7-AUTH_FAILED: Station 0014.a8a7.86bc Authentication failed

Jun 25 19:58:49.187: %DOT11-7-AUTH_FAILED: Station 0014.a8a7.86bc

As my clients are configured to work with FAST-EAP and the client credential is fine when connected with one AP but not with other. I doubt something has changed in ACS itself or AP. I put the load the configuration of working AP to the faulty AP keeping shared authentication key between Radius and AP same. but still not worked.

Anybody helps how to troubleshoot these issues.

subharose

5 REPLIES
Hall of Fame Super Silver

Re: Authentication Failure in Aironet 1210

What does the log on the ACS show. Make sure all the ap's are setup as AAA clients and the shared secret is the same.

-Scott
*** Please rate helpful posts ***
Bronze

Re: Authentication Failure in Aironet 1210

Check this document and determine what phase of the authentication is failing there should be messages before the AUTH-FAILED indicating where the process failed.

http://www.cisco.com/en/US/products/hw/wireless/ps430/products_tech_note09186a008024aa4f.shtml

Also make sure the AP's are Authenticated with the ACS server if no stations are authenticating through them.

if all the AP's have stations Authenticated and Associated then you either have a driver/suplicant issue in the station or if you are also using MAC authentication the MAC address has not be entered correctly in the ACS server.

Hope this helps

Bill

New Member

Re: Authentication Failure in Aironet 1210

It seems weired that all the stations were working before. Just two days ago, it happened abruptly. I am just wondering how to check weather the authentication system configured between client and ACS is working or not. I use debug radius authentication and found

anonymous@myabc.com is trying to associate with clients buy fails to do so.

Bronze

Re: Authentication Failure in Aironet 1210

AS Scott Said you need to check the logs on the ACS server to determine what part of the authentication is failing.

I would set up a new userid and password on the ACS server if it is your radius server or check the status of your radius server.

Bill

Hall of Fame Super Silver

Re: Authentication Failure in Aironet 1210

What are your clients using... windows zero, access connections, intel proset??

Does you client have "authenticate as computer when computer information is available" checked? if so uncheck this if you are using XP. If you have Intel ProSet Utility, check the roaming profile.

-Scott
*** Please rate helpful posts ***
1887
Views
0
Helpful
5
Replies
CreatePlease to create content