Welcome to Cisco Support Community. We would love to have your feedback.
For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.
Everything works great with a Lenovo T61 laptop running EAP-FAST using the IBM Access Connections client.
However a new out of box 7925G SCCP 1.3(3) phone shows "connection failed" onscreen to WLC 188.8.131.52 and ACS 5.1
Here is what the RADIUS log on Cisco Secure ACS 5.1 shows, TAC verified the ACS is good.
11001 Received RADIUS Access-Request
11017 RADIUS created a new session
Evaluating Service Selection Policy
15004 Matched rule
15012 Selected Access Service - 7925s
11507 Extracted EAP-Response/Identity
12100 Prepared EAP-Request proposing EAP-FAST with challenge
11006 Returned RADIUS Access-Challenge
11018 RADIUS is re-using an existing session
12102 Extracted EAP-Response containing EAP-FAST challenge-response and accepting EAP-FAST as negotiated 12800 Extracted first TLS record; TLS handshake started.
12805 Extracted TLS ClientHello message.
12806 Prepared TLS ServerHello message.
12808 Prepared TLS ServerKeyExchange message.
12810 Prepared TLS ServerDone message.
12105 Prepared EAP-Request with another EAP-FAST challenge
5411 EAP session timed out
Did you change the eap timeout to a higher value? I know this is for a 7921, but I believe that the 7925 has the same issue.
"config advanced eap request-timeout 20"