topic IDE 9.4 is interpreting Mac Auth from a Cisco Wireless Lan Controller as a Radius intead of Mac Auth request in ExtremeWireless (General)

IDE 9.4 is interpreting Mac Auth from a Cisco Wireless Lan Controller as a Radius intead of Mac Auth request

Brian_Holmes — Fri, 15 Jun 2018 23:56:00 GMT

IDE 9.4 is interpreting Mac Auth from a Cisco Wireless Lan Controller as a Radius intead of Mac Auth request. This is preventing me from using IDE to authenticate using Mac Auth.

RE: IDE 9.4 is interpreting Mac Auth from a Cisco Wireless Lan Controller as a Radius intead of Mac Auth request

Shmulik — Sat, 16 Jun 2018 00:12:00 GMT

Hello Brian,

Pls check the the device template in the config of this Authenticator (the WLAN Controller) to see if the ‘mac-address source type’ is set to ‘user-name’ instead of ‘calling-station’id’.

Shmulik

RE: IDE 9.4 is interpreting Mac Auth from a Cisco Wireless Lan Controller as a Radius intead of Mac Auth request

Brian_Holmes — Mon, 18 Jun 2018 17:02:00 GMT

Here is the details....

RE: IDE 9.4 is interpreting Mac Auth from a Cisco Wireless Lan Controller as a Radius intead of Mac Auth request

Brian_Holmes — Mon, 18 Jun 2018 17:06:00 GMT

And here is the database entry for this MAC address:

RE: IDE 9.4 is interpreting Mac Auth from a Cisco Wireless Lan Controller as a Radius intead of Mac Auth request

Shmulik — Mon, 18 Jun 2018 20:52:00 GMT

Brian,

Do you have MAC Auth enabled in the Authenticator configuration for that Cisco AP? and also have the appropriate MAC Auth Access Policy associated with that AP?

Shmulik

RE: IDE 9.4 is interpreting Mac Auth from a Cisco Wireless Lan Controller as a Radius intead of Mac Auth request

Brian_Holmes — Mon, 18 Jun 2018 23:38:00 GMT

Ok. Setting ‘mac-address source type’ to ‘user-name’ fixed the issue. One last related question. Will changing this option in IDE have any impact on 802.1x authentications or is this setting only used for MacAuth?

RE: IDE 9.4 is interpreting Mac Auth from a Cisco Wireless Lan Controller as a Radius intead of Mac Auth request

Shmulik — Mon, 18 Jun 2018 23:53:00 GMT

No should not impact. Because you likely have various auth protocols enabled (incl. TLS and others) on the Authentication Policy, and the switch/AP will first attempt to auth via more secure protocols and IDE will respond accordingly.

Shmulik