Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Issues with PEAP and 7921 phones

I am running 7921's with PEAP authentication back to ACS 4.2 but often get "Authen session timed out: Challenge not provided by client" failed authentications in ACS. Leading up to the failure, I see the phone authenticate about 2 minutes before in the most recent case. Sometimes there will only be one failure and sometimes 4-5 in a minute.

I'm thinking about switching authentication to EAP-FAST but curious if others are using PEAP and running into the same thing.

Cisco Employee

Re: Issues with PEAP and 7921 phones

Are you using version 1.2(1) with server validation enabled? Shouldn't matter as long as using a single ACS, but could be an issue if a problem with the certs across multiple ACS. Ensure you have the ACS eap request timeout set to the default of 20 seconds. Also check the AP side.

If using the WLAN controller, do "show advanced eap". Ensure the request timeout is also set for 20 seconds.

See the 7921G Deployment Guide for more info.