B@AP, 802.1x encryption, Radius per Sites and controller loss ?

  • 0
  • 1
  • Question
  • Updated 1 year ago
  • Answered

What's the AP behavior with a VNS B@AP, 802.1x encryption and 2 Radius per SItes mode when the controller loss ?

Will it contínuos to accept and authenticate new 802.1x Users ?


Photo of Valter Veiga

Valter Veiga

  • 600 Points 500 badge 2x thumb

Posted 1 year ago

  • 0
  • 1
Photo of Ronald Dvorak

Ronald Dvorak, Embassador

  • 47,558 Points 20k badge 2x thumb
Yes, that's exactly what sites does, clients are still able to authenticate with 802.1X.
Photo of Valter Veiga

Valter Veiga

  • 600 Points 500 badge 2x thumb

But isn't working,

I'm using V2210 firmware 10.31.01.0048 and AP3805.

With the controller UP, the APs were requesting authetication to the NPS of the site. With the controller DOWN we don't have requests. The users that were connected maintain the connection.

the document in the Gtac is not clear about sites.

https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-Maintain-Wireless-Services-upon-an-...


Photo of Ronald Dvorak

Ronald Dvorak, Embassador

  • 47,558 Points 20k badge 2x thumb
Photo of Valter Veiga

Valter Veiga

  • 600 Points 500 badge 2x thumb

OK, it should work, I will investigate why it isn't working, no request received at NPS.

Photo of Sam

Sam, Employee

  • 1,858 Points 1k badge 2x thumb
Hi Valter, 

If you remove one of the Radius servers does it work? 

- Sam 
Photo of Valter Veiga

Valter Veiga

  • 600 Points 500 badge 2x thumb

Done the troubleshooting. The problem was the Radius Server not available.

This a Long infrastructure, we have 4 Radius servers.

What hapens, is that we are only using 1 Radius Servers, because of instability when using 2 radius servers in sites config.


Photo of Sam

Sam, Employee

  • 1,858 Points 1k badge 2x thumb
Hi Valter, 

Is this referencing a case you have open with GTAC (01292083)? 

- Sam 
Photo of Valter Veiga

Valter Veiga

  • 600 Points 500 badge 2x thumb
The instability of using 2 radius servers , yes.
Photo of Umut Aydin

Umut Aydin, Escalation Support Engineer

  • 2,280 Points 2k badge 2x thumb
Hi Valter,
this is your esc..I have similar escalation and it should be fixed in
V10.31.01 - V9.21.17- V10.21.04
If you don't have this version..could you test it?

Rgds
Umut
(Edited)
Photo of Valter Veiga

Valter Veiga

  • 600 Points 500 badge 2x thumb

Hi Umut,

I'm running 10.31.01.0048, and it didn't resolved