Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Radius not Authenticating issue, AP

Hey Guys, 

 

I am not able to authenticate USer and while running debugging I am getting the following logs. Can anyone help me to resolve this issue, anyways I have already checked the radius server and its fine so the issue could be else.

 

 

 

*Jul 24 16:01:23.171: RADIUS:  AAA Unsupported Attr: ssid              [346] 8   131862908
*Jul 24 16:01:23.171: RADIUS:  AAA Unsupported Attr: service-type      [344] 4   1
*Jul 24 16:01:23.171: RADIUS:  AAA Unsupported Attr: interface         [221] 3   131863776
*Jul 24 16:01:23.175: RADIUS(0000001A): Config NAS IP:  10.9.9.9 
*Jul 24 16:01:23.175: RADIUS(0000001A): Config NAS IPv6: ::
*Jul 24 16:01:23.175: RADIUS/ENCODE(0000001A): acct_session_id: 16
*Jul 24 16:01:23.175: RADIUS(0000001A): Config NAS IP:  10.9.9.9 
*Jul 24 16:01:23.175: RADIUS(0000001A): sending
*Jul 24 16:01:23.175: RADIUS(0000001A): Sending a IPv4 Radius Packet
*Jul 24 16:01:23.175: RADIUS(0000001A): Send Access-Request to 10.1.1.1:1812 id 1645/14,len 156
*Jul 24 16:01:23.175: RADIUS:  authenticator 7B 67 44 37 AA 69 7A E7 - E8 9E A9 63 68 7E 1F 6C
*Jul 24 16:01:23.175: RADIUS:  User-Name           [1]   11  "AUS/Khan"
*Jul 24 16:01:23.175: RADIUS:  Framed-MTU          [12]  6   1400
*Jul 24 16:01:23.175: RADIUS:  Called-Station-Id   [30]  28  "DB-A5-F6-65-F7-E0:ATssid"
*Jul 24 16:01:23.175: RADIUS:  Calling-Station-Id  [31]  19  "15-0B-B9-99-CC-4C"
*Jul 24 16:01:23.175: RADIUS:  Service-Type        [6]   6   Login                     [1]
*Jul 24 16:01:23.175: RADIUS:  Message-Authenticato[80]  18
*Jul 24 16:01:23.175: RADIUS:   6D CF 22 F0 2A D0 49 24 DF FA DF AD A3 95 0B 3F            [ m"*I$?]
*Jul 24 16:01:23.175: RADIUS:  EAP-Message         [79]  16
*Jul 24 16:01:23.175: RADIUS:   02 02 00 0E 01 55 4B 5C 6D 6F 69 73 65 63         [ AUS/Khan]
*Jul 24 16:01:23.175: RADIUS:  NAS-Port-Type       [61]  6   802.11 wireless           [19]
*Jul 24 16:01:23.175: RADIUS:  NAS-Port            [5]   6   270
*Jul 24 16:01:23.175: RADIUS:  NAS-Port-Id         [87]  5   "270"
*Jul 24 16:01:23.175: RADIUS:  NAS-IP-Address      [4]   6    10.9.9.9 
*Jul 24 16:01:23.175: RADIUS:  Nas-Identifier      [32]  9   "AP-Test"
*Jul 24 16:01:23.175: RADIUS(0000001A): Started 5 sec timeout
*Jul 24 16:01:28.199: RADIUS(0000001A): Request timed out!
*Jul 24 16:01:28.199: RADIUS: Retransmit to (10.1.1.1:1812,1813) for id 1645/14
*Jul 24 16:01:28.199: RADIUS(0000001A): Started 5 sec timeout
*Jul 24 16:01:33.223: RADIUS(0000001A): Request timed out!
*Jul 24 16:01:33.223: RADIUS: Retransmit to (10.1.1.1:1812,1813) for id 1645/14
*Jul 24 16:01:33.223: RADIUS(0000001A): Started 5 sec timeout
*Jul 24 16:01:38.247: RADIUS(0000001A): Request timed out!
*Jul 24 16:01:38.247: RADIUS: Retransmit to (10.1.1.1:1812,1813) for id 1645/14
*Jul 24 16:01:38.247: RADIUS(0000001A): Started 5 sec timeout
*Jul 24 16:01:43.271: RADIUS(0000001A): Request timed out!
*Jul 24 16:01:43.271: RADIUS: Fail-over to (10.2.2.2:1812,1813) for id 1645/14
*Jul 24 16:01:43.271: RADIUS(0000001A): Started 5 sec timeout
*Jul 24 16:01:48.295: RADIUS(0000001A): Request timed out!
*Jul 24 16:01:48.295: RADIUS: Retransmit to (10.2.2.2:1812,1813) for id 1645/14
*Jul 24 16:01:48.295: RADIUS(0000001A): Started 5 sec timeout
*Jul 24 16:01:53.319: RADIUS(0000001A): Request timed out!
*Jul 24 16:01:53.319: RADIUS: Retransmit to (10.2.2.2:1812,1813) for id 1645/14
*Jul 24 16:01:53.319: RADIUS(0000001A): Started 5 sec timeout
*Jul 24 16:01:58.343: RADIUS(0000001A): Request timed out!
*Jul 24 16:01:58.343: RADIUS: Retransmit to (10.2.2.2:1812,1813) for id 1645/14
*Jul 24 16:01:58.343: RADIUS(0000001A): Started 5 sec timeout
*Jul 24 16:02:03.367: RADIUS(0000001A): Request timed out!
*Jul 24 16:02:03.367: RADIUS: No response from (10.2.2.2:1812,1813) for id 1645/14
*Jul 24 16:02:03.367: RADIUS/DECODE: No response from radius-server; parse response; FAIL
*Jul 24 16:02:03.367: RADIUS/DECODE: Case error(no response/ bad packet/ op decode);parse response; FAIL
*Jul 24 16:02:03.367: %DOT11-7-AUTH_FAILED: Station XXXX.a999.XXXX Authentication failed

 

 

5 REPLIES
VIP Purple

 *Jul 24 16:02:03.367: RADIUS

 

*Jul 24 16:02:03.367: RADIUS: No response from (10.2.2.2:1812,1813) for id 1645/14

Check the port numbers on both sides.

Cisco uses the 1645 and 1646 by default, but you must use the 1812 and 1813, so If there is a port mismatch your RADIUS environment will not work.

 

Regards

New Member

I tried with Default port and

I tried with Default port and seeing same error;

 RADIUS: No response from (10.104.214.5:1645,1646) for id 1645/32

 

New Member

any one have the same issue ?

any one have the same issue ?

Bronze

Hi,have you tried after

Hi,

have you tried after increasing the handshaking timeout, if you are using WPA

Go into the interface Dot11Radio0

dot11 wpa handshake timeout 500

Gold

Refer the link :http://www

Refer the link :

http://www.cisco.com/c/en/us/support/docs/wireless/aironet-1200-series/50843-debug-authen.html#EAP

https://learningnetwork.cisco.com/thread/35468

210
Views
0
Helpful
5
Replies