Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

IAS (RADIUS) authentication difference between windows OS and other (OS x and smartphone)

 

 I had an issue in RADIUS (IAS) box last week, so internal users who authenticate through RADIUS box had an issue. 

But, funny thing is this. Every MAC user (OS X) and smartphone (including iOS and Android) did not have any issue in terms of authentication. 

Especially I tested one user with two different OS system (OS X and Windows: dual booting option laptop) which tells me that because of OS different it happened. But I was not able to grab the reason why or where configuration was messedup. 

Basically User ---  AP --- WLC --- RADIUS 

I logged in and took a look at logs from RADIUS box, but there was no difference in log in terms of device types. 

 

This is an event log from RADIUS box (error)

   (Windows Event Log)

Event Type: Error

Event Source: IAS
Event Category: None
Event ID: 3
Date: 4/25/2014
Time: 2:44:15 PM
User: N/A
Computer: RADIUS-TEST
Description:
Access request for user fkaya was discarded.
 Fully-Qualified-User-Name = <undetermined> 
 NAS-IP-Address = 10.254.0.12
 NAS-Identifier = testwlc
 Called-Station-Identifier = 00-22-90-39-05-90:TEST_SSID
 Calling-Station-Identifier = 9c-20-7b-53-64-e0
 Client-Friendly-Name = TEST_SSID
 Client-IP-Address = 10.254.0.x
 NAS-Port-Type = Wireless - IEEE 802.11
 NAS-Port = 1
 Proxy-Policy-Name = Use Windows authentication for all users
 Authentication-Provider = Windows 
 Authentication-Server = <undetermined> 
 Reason-Code = 96
 Reason = The authentication request was not processed because the session timed out. 
 
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00               ....    

 

 

 There are logs from RADIUS, unfortunately RADIUS logs showed only succeeded access only (did not have any failed access) 

 

(Samsung Galaxy) ---> working great 

10.254.x.x,test\usertest,04/28/2014,08:08:38,IAS,RADIUS-TEST,5000,audit-session-id=0c00fe0a0001c908b1445e53,31,34-23-ba-0e-c2-57,30,00-21-a0-81-27-80:NewSSID,5,4,4,10.254.x.x,32,cffwlc,26,0x00003763010600000001,6,2,12,1300,61,19,64,13,65,6,81,16,4108,10.254.x.x,4116,0,4128,cffwlc,4155,1,4154,Use Windows authentication for all users,25,311 1 10.1.2.x 04/25/2014 22:40:42 13724,4129,test\usertest,4130,test\usertest,4149,Allow Wireless LAN Access to test Authorized,4132,Secured password (EAP-MSCHAP v2),4127,11,4136,1,4142,0
10.254.x.x,test\usertest,04/28/2014,08:08:38,IAS,RADIUS-TEST,25,311 1 10.1.2.x 04/25/2014 22:40:42 13724,4132,Secured password (EAP-MSCHAP v2),4127,11,8100,0,4120,0x014346,29,1,6,2,4108,10.254.x.x,4116,0,4128,cffwlc,4155,1,4154,Use Windows authentication for all users,4129,test\usertest,4130,test\usertest,4149,Allow Wireless LAN Access to test Authorized,4136,2,4142,0

10.254.x.x,test\usertest,04/28/2014,11:30:21,IAS,RADIUS-TEST,5000,audit-session-id=0c00fe0a0001ca5054675e53,31,34-23-ba-0e-c2-57,30,00-12-44-b2-51-10:NewSSID,5,7,4,10.254.x.x,32,cffwlc,26,0x00003763010600000001,6,2,12,1300,61,19,64,13,65,6,81,16,4108,10.254.x.x,4116,0,4128,cffwlc,4155,1,4154,Use Windows authentication for all users,25,311 1 10.1.2.x 04/25/2014 22:40:42 37605,4129,test\usertest,4130,test\usertest,4149,Allow Wireless LAN Access to test Authorized,4132,Secured password (EAP-MSCHAP v2),4127,11,4136,1,4142,0
10.254.x.x,test\usertest,04/28/2014,11:30:21,IAS,RADIUS-TEST,25,311 1 10.1.2.x 04/25/2014 22:40:42 37605,4132,Secured password (EAP-MSCHAP v2),4127,11,8100,0,4120,0x014346,29,1,6,2,4108,10.254.x.x,4116,0,4128,cffwlc,4155,1,4154,Use Windows authentication for all users,4129,test\usertest,4130,test\usertest,4149,Allow Wireless LAN Access to test Authorized,4136,2,4142,0


 (Windows Laptop) --> working great

10.254.x.x,test\usertest,04/28/2014,11:22:32,IAS,RADIUS-TEST,5000,audit-session-id=0c00fe0a0001cc0431725e53,31,24-77-03-66-32-00,30,00-12-44-b2-51-10:NewSSID,5,7,4,10.254.x.x,32,cffwlc,26,0x00003763010600000001,6,2,12,1300,61,19,64,13,65,6,81,16,4108,10.254.x.x,4116,0,4128,cffwlc,4155,1,4154,Use Windows authentication for all users,25,311 1 10.1.2.x 04/25/2014 22:40:42 36656,4129,test\usertest,4130,test\usertest,4149,Allow Wireless LAN Access to test Authorized,4132,Secured password (EAP-MSCHAP v2),4127,11,4136,1,4142,0
10.254.x.x,test\usertest,04/28/2014,11:22:32,IAS,RADIUS-TEST,25,311 1 10.1.2.x 04/25/2014 22:40:42 36656,4132,Secured password (EAP-MSCHAP v2),4127,11,8100,0,4120,0x014346,29,1,6,2,4108,10.254.x.x,4116,0,4128,cffwlc,4155,1,4154,Use Windows authentication for all users,4129,test\usertest,4130,test\usertest,4149,Allow Wireless LAN Access to test Authorized,4136,2,4142,0

 

 (Apple MAC)

10.254.x.x,usertest2,04/28/2014,08:44:29,IAS,RADIUS-TEST,5000,audit-session-id=0c00fe0a0001c945284d5e53,31,78-31-c1-22-b1-12,30,00-12-44-b2-51-10:NewSSID,5,7,4,10.254.x.x,32,cffwlc,26,0x00003763010600000001,6,2,12,1300,61,19,64,13,65,6,81,16,4108,10.254.x.x,4116,0,4128,cffwlc,4155,1,4154,Use Windows authentication for all users,25,311 1 10.1.2.x 04/25/2014 22:40:42 16691,4129,test\usertest2,4130,test\usertest2,4149,Allow Wireless LAN Access to test Authorized,4132,Secured password (EAP-MSCHAP v2),4127,11,4136,1,4142,0
10.254.x.x,usertest2,04/28/2014,08:44:29,IAS,RADIUS-TEST,25,311 1 10.1.2.x 04/25/2014 22:40:42 16691,4132,Secured password (EAP-MSCHAP v2),4127,11,8100,0,4120,0x014346,29,1,6,2,4108,10.254.x.x,4116,0,4128,cffwlc,4155,1,4154,Use Windows authentication for all users,4129,test\usertest2,4130,test\usertest2,4149,Allow Wireless LAN Access to test Authorized,4136,2,4142,0

10.254.x.x,usertest2,04/28/2014,08:44:30,IAS,RADIUS-TEST,5000,audit-session-id=0c00fe0a0001c945284d5e53,31,78-31-c1-22-b1-12,30,04-da-d2-2f-0e-80:NewSSID,5,1,4,10.254.x.x,32,cffwlc,26,0x00003763010600000001,6,2,12,1300,61,19,64,13,65,6,81,16,4108,10.254.x.x,4116,0,4128,cffwlc,4155,1,4154,Use Windows authentication for all users,25,311 1 10.1.2.x 04/25/2014 22:40:42 16709,4129,test\usertest2,4130,test\usertest2,4149,Allow Wireless LAN Access to test Authorized,4132,Secured password (EAP-MSCHAP v2),4127,11,4136,1,4142,0
10.254.x.x,usertest2,04/28/2014,08:44:30,IAS,RADIUS-TEST,25,311 1 10.1.2.x 04/25/2014 22:40:42 16709,4132,Secured password (EAP-MSCHAP v2),4127,11,8100,0,4120,0x014346,29,1,6,2,4108,10.254.x.x,4116,0,4128,cffwlc,4155,1,4154,Use Windows authentication for all users,4129,test\usertest2,4130,test\usertest2,4149,Allow Wireless LAN Access to test Authorized,4136,2,4142,0

 

 

 

  

Everyone's tags (1)
569
Views
0
Helpful
0
Replies
CreatePlease to create content