IDE 9.4 is interpreting Mac Auth from a Cisco Wireless Lan Controller as a Radius intead of Mac Auth request

  • 0
  • 1
  • Question
  • Updated 5 months ago
  • Answered
IDE 9.4 is interpreting Mac Auth from a Cisco Wireless Lan Controller as a Radius intead of Mac Auth request.  This is preventing me from using IDE to authenticate using Mac Auth.
Photo of Brian Holmes

Brian Holmes

  • 328 Points 250 badge 2x thumb

Posted 5 months ago

  • 0
  • 1
Photo of Shmulik

Shmulik, Employee, PLM for ExtremeGuest and ExtremeControl

  • 564 Points 500 badge 2x thumb
Hello Brian,

Pls check the the device template in the config of this Authenticator (the WLAN Controller) to see if the ‘mac-address source type’ is set to ‘user-name’ instead of ‘calling-station’id’.

Shmulik
Photo of Brian Holmes

Brian Holmes

  • 328 Points 250 badge 2x thumb
it is set to calling-station-id...see the attached screen shot
Photo of Brian Holmes

Brian Holmes

  • 328 Points 250 badge 2x thumb
Here is the details....
Photo of Brian Holmes

Brian Holmes

  • 328 Points 250 badge 2x thumb
And here is the database entry for this MAC address:
Photo of Shmulik

Shmulik, Employee, PLM for ExtremeGuest and ExtremeControl

  • 564 Points 500 badge 2x thumb
Brian,

Do you have MAC Auth enabled in the Authenticator configuration for that Cisco AP? and also have the appropriate MAC Auth Access Policy associated with that AP?

Shmulik
Photo of Brian Holmes

Brian Holmes

  • 328 Points 250 badge 2x thumb
Ok.  Setting ‘mac-address source type’ to ‘user-name’ fixed the issue.  One last related question.  Will changing this option in IDE have any impact on 802.1x authentications or is this setting only used for MacAuth?
Photo of Shmulik

Shmulik, Employee, PLM for ExtremeGuest and ExtremeControl

  • 564 Points 500 badge 2x thumb
No should not impact. Because you likely have various auth protocols enabled (incl. TLS and others) on the Authentication Policy, and the switch/AP will first attempt to auth via more secure protocols and IDE will respond accordingly.

Shmulik