Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Automatic PAC provisioning failing

Good morning guys

I have a 1121 AP and manual PAC provisioning passed but automatic does not. What debug statements can I use to troubleshoot this? I'm also using local RADIUS on the AP and CSSC 5.1.0.39 which I believe does not support manual PAC file import

Attached is the AP config

Thank you All!

1 REPLY
Silver

Re: Automatic PAC provisioning failing

Make sure that by default, when you use EAP-MSCHAP inner methods, ACS allows authentication attempts up to the specified value you configured on the Service page inside the TLS tunnel if the initial authentication attempt fails. After the fourth failed authentication attempt inside the SSL tunnel, ACS terminates the EAP conversation, resulting in a RADIUS access-reject.

ACS supports issuing an out-of-band PAC file that allows you to generate a PAC that can be downloaded to ACS.

291
Views
0
Helpful
1
Replies
CreatePlease to create content