topic Smartcard 802.1x EAP-TLS authentication in ExtremeWireless (General)

Smartcard 802.1x EAP-TLS authentication

Tomasz_Lubas — Thu, 20 Dec 2018 19:08:00 GMT

Hello,
I'm working on smartcard authentication with Yubikey4 [smartcard].
As far authentication works as intended with one annoying bug I cannot overcome.
User can log in into domain with yubikey, connect to Extreme wifi [identifi] , and authenticate with smartcard certificate. When yubikey is removed and wifi disconnected, another connection is immpossible till windows user logout and login.

XMC shows: "Authentication request became stale, challenge sent, no response received from client"
Any ideas how to fix it ?

RE: Smartcard 802.1x EAP-TLS authentication

Kurt_Semba — Thu, 20 Dec 2018 19:20:00 GMT

Hi Tomasz,

the message "Authentication request became stale, challenge sent, no response received from client" usually indicates a config error on the client's supplicant. You could debug this deeper by enabling certain verbose logs on the NAC appliance but for now I would try to play with the Windows Supplicant config where you configured your smart card.

Kurt

RE: Smartcard 802.1x EAP-TLS authentication

Tomasz_Lubas — Thu, 20 Dec 2018 19:34:00 GMT

Thanks Kurt, it looks like disabling "Remember my credentials..." on security wifi tab - helps 