EAP Response frame is not always forwarded to the Radius Server when doing Full Authentications.
We have seen issues with a Cisco 5500 and 2405 WLAN controller with older and the latest controller firmware(8.x) of not forwarding the first EAP Response frame to the radius server on 802.1x WLAN devices doing full authentications. The first EAP Response frame from the WLAN client is supposed to be forwarded to the Radius server but a Wireshark trace shows that frame is never sent by the WLAN controller. The WLAN controller does ack the first EAP Response frame but the EAP response frame when the problem occurs always seems to be a retried packet. I do have all RRM and AP scanning turned off. This is an intermittent issue and only occurs on devices doing full authentications and does occur on multiple vendors products. This produces a 18-20 second drop-off until the station recovers by sending an EAP-Start frame and then it associates properly. Since the first EAP Response frame is never forwarded to the Radius server and the EAP Response frame is being ack’d on the retried packet, this seems to be a WLAN controller issues but I’m looking at all possibilities. Does anyone have any thoughts?
I attached a wireless and wired trace of the issue. See the Readme.txt file in the attachment for specific information.
Thanks in advance.
Do you have a packet capture to see this ? If so pls attach it
Rasika
Similar Messages
-
Changes in Signature text not carried forward to the next server
Hi All,
I changed the Signature TExt in Global Server.
I need to transport this to development server.3
After moving the transport, no chagnes are updated in development.
I moved the transport 3 times.
Please help me in solving this problem.Hi
Signature texts needs to be maintained by opening the client , these will not be tranportable.....
Please check the export & import process once again..
Regards
Suresh -
3750 switch not forwarding EAPoL to RADIUS server
I have a 3750 switch stack running version 12.2(53)SE2 IPBASEK9-M. I have dot1x configured on the switch and have a Windows 7 PC connected with 802.1x configured on the interface. I see the EAPoL start message from the PC, but I don't see any RADIUS packets from the switch to the RADIUS server. I have a simple dot1x config just to try to get it working prior to adding additional features such as guest-vlan...
Config and debug file attached.
I don't know if the ip dhcp snooping and arp inspection configuration is causing an issue with this or not. I see the EAPoL packet received on the switch as seen in the debug attachment, but I still never see the RADIUS packet. I did set both to trust on the interface but still the same outcome. I can't disable it since it is a production switch with a test interface.
Any ideas?
Thanks,
MarkHi Mark,
The config seems to be OK, nothing I would miss if I assume that mandatory
commands not shown in your config are in place
aaa-new-model is required for dot1x to function, I don't seee that command.
I have configured dot1x just a few times but I always used the commands
aaa authorization network default group radius
and
radius-server vsa send
(honestly, I'm not sure whether they are required, it's just a template which
I know as working)
Careful if this is a production system
AAA New-Model will radically change every authentication behaviour on the
switch if it is not already configured
The main issue seems that the catalys is not sending an "EAP-Request/Identity"
back, Radius-Packets will only be sent after the "EAP-Response/Identity":
(taken from http://www.cisco.com/en/US/docs/switches/lan/catalyst3750e_3560e/software/release/12.2_50_se/configuration/guide/sw8021x.html)
Do you have any other dot1x client?
You can use a cisco router for testing dot1x if you have
test system at hand:
conf term
dot1x credentials DOT1XTEST
username testuser
password testpassword
exit
interface [name-of-interface-connected-to-catalyst]
dot1x pae supplicant
dot1x credentials DOT1XTEST
Another approach:
use the classic config (not auth-manager but "dot1x syntax") you are
using a very new version of IOS, might be buggy:
Switch(config)# aaa new-model
Switch(config)# aaa authentication dot1x default group radius
Switch(config)# aaa authorization network default group radius
Switch(config)# radius-server host [IP-address] auth-port [port] key [port]
Switch(config)# dot1x system-auth-control
Switch(config)# interface [interface]
Switch(config-if)# switchport mode access
Switch(config-if)# dot1x port-control auto
Hope something is helpful
Additional debug hints:
use
show dot1x all
show dot1x interface [interface-name] detail
show dot1x interface [interface-name] satistic
Do see something like "RxResp = x" with x>0?
rgds, MiKa -
Message could not be forwarded to the JCA adapter
Dear all,
I am facing the issue:
i am trying to send files to sftp server via SFTP adapter but in the receiver channel I am getting this error:
Message could not be forwarded to the JCA adapter. Reason: 3: Putting /folder1/folder2/10124__20140603-152747-700.txt failed.
exception caught with cause javax.resource.ResourceException: 3: Putting /folder1/folder2/10124__20140603-152747-700.txt failed.
Adapter Framework caught exception: 3: Putting /folder1/folder2/10124__20140603-152747-700.txt failed.
Delivering the message to the application using connection SFTP_http://sap.com/xi/XI/SFTP failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException: javax.resource.ResourceException: 3: Putting /folder1/folder2/10124__20140603-152747-700.txt failed..
I am not able to keep the files in folder2.
there is no problem in access rights.
I am able to access the same from Putti but from channel i m unable to do so.
Please help.Hi Sinha,
Thank you for the response, I might not have written the issue correctly.
Remove Spaces in EDI Files
Please refer the above blog, we are facing a simmilar issue, when we remove those spaces the file works correctly. But when the files are transmitted we have a single stream of characters and there is a space after the IEA segment and the next ISA Segment.
Regards,
Pranay -
SFTP Receiver adapter error Message could not be forwarded to the JCA adapter
Hi Experts,
I'm needing help to solve a problem with an SFTP Receiver interface.
Before I was sending in the adapter configuration as "Direct" in Write Modus (File .txt) and now I changed to "Use temporary file" is occurring this error:
Message
could not be forwarded to the JCA adapter. Reason: 2: Moving
/ABCftp/To_XXX/140187613515701OUT_20140604-100214-622.TXT.tmp to /ABCftp/To_XXX/01OUT_20140604-100214-622.TXT failed.
Files as TXT they are being written to the SFTP however when as TMP returns this error ... would not rule SFTP server to accept different TXT files?
I also changed the namespace to "http://sap.com/xi/XI/System/SFTP" and "http://sap.com/xi/XI/System/File" but is not working.
Any help will be welcome!
tks.Hi Durga and Naveen...
I believe the problem is when the application's legacy system picks up the file because the log file got the "tmp", ie, was not formed yet ...
I changed to a directory without the intervention of the legacy application and it worked.
I'm waiting for the opportunity to modify the legacy system to capture only files with the extension TXT.
Tks All for help! -
Notes always show in the inbox
In the mail program notes always show in the inbox as well as the reminders tab which is an annoyance as I do not want them to always show in the inbox.
Is there a way to only have them display in the reminders section.
Thanks in advance for any help, Kenneth.Sorry but the answer came as related posts after I posted the question.
Regards, Kenneth. -
I didn't have a signal so I restored my iphone 4s but this always comes up "Your iPhone could not be activated because the activation server is temporarily unavailable" HELP PLS!
Try this link for activation problems ...
http://support.apple.com/kb/ts3424
If you had iOS 7 BETA installed, just go to developer.apple.com and log in using your developer account. There are discussions about this issue. Otherwise... for non-developers, I'm afraid you're on your on. Use Google. -
on my iphone 4, when i try to open an app, the icons start wiggling like i want to delete them. the touch screen does not always work. sometimes the phone reboots itself. any help out there?
Have you tried basics from the manual?
restart,
reset,
restore
iPhone User Guide (For iOS 4.2 and 4.3 Software) -
When I try to use spellcheck, I get the "Cannot find the User dictionary". It has always worked in the past and when I go to choose the main dictionary, it just goes back to the same line, cannot find user dictionary.
Have you ever created a user dictionary? You have to manually create one, AppleWorks won't do for you. The user dictionary & any other dictionaries belong in the AppleWorks Essentials folder which belongs in the AppleWorks 6 folder in Applications.
Deleting & reinstalling AppleWorks from the original disk will not delete your files unless you have saved them in the application folder. The Mac OS creates a separate Documents folder for your files & that is where the documents you created should be.
Unless all of your documents are AppleWorks 6 word processing documents, Pages alone is not sufficient. The iWork applications - Keynote, Pages & Numbers - can only open AppleWorks 6 presentation, word processing & spreadsheet documents, respectively. They will not open any other type of AppleWorks 6 files or any AppleWorks 5 or any version of ClarisWorks files. -
Hi
I have tried to restore my i phone 3gs using a USB cable connecting to itunes.The process has gone smoothley but i am now getting this message on my i phone;"your i phone could not be activated because the activation server is temporarily unavailable.Try connecting your i phone to itunes to activate it,or try again in a few minutes.I have been trying and trying again and switched off my firewall too.but still getting this message.Can anyone please advise me?That is almost always because the phone was hacked to unlock it from the original carrier.
-
Your iPhone could not be activated because the activation server is temporarily unavailable." I have iphone 3gs , What is the solution?
That's almost always because the phone was hacked to unlock it.
You can not get help for a hacked or jailbroken phone here. -
Please can someone offer me some help in sorting out issues with 2 new iphone 3gs.
I purchased them in mid april this year brand new unlocked.. I had them plugged into my laptop charging and both now are requesting to be restored . Get as far as activatation then i get message
Your IPhone could not be activated because the activation server is temporarily unavailable. I have been to Telstra store 3 times and into the Mac Pro store where i am today
No one is able to help me unless i go to melb sydney or Brisbane!
Any help would be so very much appreciatedThat is almost always because the phone was hacked to unlock it from the original carrier.
-
my iphone could not be activated because the activation server could not be rached. how can i solve this problem?
Make sure the wifi you're connecting to has a strong connection. Also, it has to be set up with basic security, meaning you can't activate your phone using wifi that needs you to access Safari to sign in.
You can also always use iTunes on your computer (with a strong Internet connection) to do this as well. -
i delete my iphone from find my i phone and now i want to make active my i phone i get the message your i phone could not be activated because the activation server failed i try it several time but my iphone is not activate help me fpls
Activation issues are almost always the result of a device that has been hacked or jailbroken. If that is the case, no support can be provided here.
The other possible issue is a device running the iOS7 Beta. If that is the case, and you are a developer, sign into the developers forums for assistance. If that is the case and you are not a developer, try google. -
i am not able to active my ipone 3gs after upgrat to ios5.1.1. it show error message " your iphone could not be activted because the activation server is temperarily unavailable.try connecting you iphone to itunes to activate it, or try again in a couple of munutes" i retry many time, could not sold problem.
You had a jailbreak and unlock.
When you updated you cooked it.
Your phone is done.
Time for a new one.
Maybe you are looking for
-
Hi all, My computer just croaked on me. It was running fine then suddenly shut down. Now when I press the power button the power light turns on then off, there is a clicking sound, the internal fan starts to turn then stops. All this takes less than
-
Condition ChooseFromList doesn't work
Hi On the AP Invoice Form i added to the ChooseFromList a new condition. This works with the following code fine. SAPbouiCOM.ChooseFromListCollection cflc = parentForm.ChooseFromLists; SAPbouiCOM.ChooseFromList cfl = cflc.Item("2"); SAPbouiCOM.Condit
-
Live Office - dont see reports
Hi Experts, I installed: BO Edge trial version Crystal Reports 2008 Live Office When I open Excel there is the Live Office menu bar. I can connect to my Enterprise platform and I see the folders. But I dont see the reports and WebI documents. Cant ac
-
Macbook Pro stuck on grey screen with Apple logo
Macbook Pro was purchased in mid-late 2009 and is running on OS X 10.6. Today is suddenly stopped responding and so I turned it off. When I turned it back on it opend to the grey screen with the Apple logo and the loading icon and that is where it st
-
Can you add an image to a studio gadget? Want to do a contest based on a picture of the week. Studio is the perfect place but can seem to see how to add an image.