Users unable to access the internet sites

Hi Everyone,
We have users who are able to get the IP address but unable to access any internet sites.
I check the trap logs on the WLC
RADIUS server 192.168.50.1:1812 failed to respond to request (ID 16) for client 88:53:2e:99:24:b5 / user 'unknown'
RADIUS server 192.168.50.1:1812 activated on WLAN 1
RADIUS server 192.168.60.1:1812 deactivated on WLAN 1
RADIUS server 192.168.60.1:1812 failed to respond to request (ID 200) for client 88:53:2e:99:24:b5 / user 'unknown'
RADIUS server 192.168.60.1:1812 activated on WLAN 1
RADIUS server 192.168.50.1:1812 deactivated on WLAN 1
RADIUS server 192.168.50.1:1812 failed to respond to request (ID 15) for client 88:53:2e:99:24:b5 / user 'unknown'
RADIUS server 192.168.50.1:1812 activated on WLAN 1
RADIUS server 192.168.50.1:1812 failed to respond to request (ID 16) for client 88:53:2e:99:24:b5 / user 'unknown'
RADIUS server 192.168.50.1:1812 activated on WLAN 1
RADIUS server 192.168.60.1:1812 deactivated on WLAN 1
RADIUS server 192.168.60.1:1812 failed to respond to request (ID 200) for client 88:53:2e:99:24:b5 / user 'unknown'
RADIUS server 192.168.60.1:1812 activated on WLAN 1
RADIUS server 192.168.50.1:1812 deactivated on WLAN 1
RADIUS server 192.168.50.1:1812 failed to respond to request (ID 15) for client 88:53:2e:99:24:b5 / user 'unknown'
RADIUS server 192.168.50.1:1812 activated on WLAN 1
Need to know  how can i troubleshoot this further?
Regards
Mahesh

I would do the troubleshooting in  following sequence.
1. Put a wired PC on to the vlan allocated for WLAN1
2. Check whether wired PC gets an IP & can browse internet
3. If that works, then we know no issue of DHCP & not issue with L3/NAT routing to access internet
4. If step2, does not work then your issue is not within wireless, you have to change the focus of your troubleshoot.
5. If step2 works, then test a wireless client with OPEN Authentication (No ACS involvment).If this does not work,then it means wireless client does not get proper IP connectivity. Check dynamic interface configuration for this WLAN & make sure gateway addresses correctly configured. Also VLANs are trunk across to WLC from switch.
6. If step5 works, then try your client with ACS & see the client get successfully authenticated. If not it may be WLC to ACS issue. Troubleshoot that in that case.
Do some troubleshooting like this & let us know the outcome. I am sure you will abe to find out the issue easily in this way.
HTH
Rasika

Similar Messages

  • UNABLE TO ACCESS THE INTERNET FROM LOCAL PROVIDER ON A SITE-TO-SITE VPN CONNECTION

    Dear All,
    I have a site-to-site connection  from point A to point B. From point B i am unable to access the internet from local internet provider.
    I am trying to ping from 192.168.20.1 the dns 8.8.8.8   but i receive the  message "destination net unreachable".
    When i run "show ip nat translation" i receive nothing.
    The vpn connection is working properly, i can ping the other side 192.168.10/24
    Below is the configuration of the cisco router on point B.
    dot11 syslog
    ip source-route
    no ip dhcp use vrf connected
    ip dhcp excluded-address 192.168.21.254
    ip dhcp pool voice
     network 192.168.21.0 255.255.255.0
     default-router 192.168.21.254 
     option 150 ip 192.168.5.10 
    ip cef
    ip domain name neocleous.ru
    ip inspect name IOS_FIREWALL tcp
    ip inspect name IOS_FIREWALL udp
    ip inspect name IOS_FIREWALL icmp
    ip inspect name IOS_FIREWALL h323
    ip inspect name IOS_FIREWALL http
    ip inspect name IOS_FIREWALL https
    ip inspect name IOS_FIREWALL skinny
    ip inspect name IOS_FIREWALL sip
    no ipv6 cef
    multilink bundle-name authenticated
    vty-async
    isdn switch-type primary-net5
    redundancy
    crypto isakmp policy 5
     hash md5
     authentication pre-share
     group 2
    crypto isakmp policy 10
     encr aes
     authentication pre-share
     group 2
     lifetime 28800
    crypto isakmp policy 50
     encr 3des
     hash md5
     authentication pre-share
     group 2
    crypto isakmp key Pb85heuvMde9Wdac5Qohha7lziIf142u address [ip address]
    crypto isakmp invalid-spi-recovery
    crypto isakmp keepalive 10
    crypto ipsec transform-set TRANSET esp-aes esp-sha-hmac 
    crypto ipsec transform-set TRANSET2 esp-des esp-md5-hmac 
    crypto ipsec df-bit clear
    crypto map CryptoMAP1 ipsec-isakmp 
     set peer [ip address]
     set transform-set TRANSET 
     match address CryptoACL
    interface FastEthernet0/0
     description Primary Provider
     ip address [PUBLIC IP MAIN PROVIDER] 255.255.255.252
     ip access-group outside_acl in
     ip mtu 1390
     ip nat outside
     ip virtual-reassembly in
     load-interval 30
     duplex auto
     speed auto
     crypto map CryptoCY
     crypto ipsec df-bit clear
    interface FastEthernet0/1
     description TO LAN
     no ip address
     load-interval 30
     speed 100
     full-duplex
    interface FastEthernet0/1.1
     description DATA VLAN
     encapsulation dot1Q 20
     ip address 192.168.20.254 255.255.255.0
     ip access-group inside_acl in
     ip nat inside
     ip inspect IOS_FIREWALL in
     ip virtual-reassembly in
     ip tcp adjust-mss 1379
    interface FastEthernet0/1.2
     description VOICE VLAN
     encapsulation dot1Q 21
     ip address 192.168.21.254 255.255.255.0
    interface Serial0/2/0:15
     no ip address
     encapsulation hdlc
     isdn switch-type primary-net5
     isdn incoming-voice voice
     no cdp enable
    interface FastEthernet0/3/0
     no ip address
     ip access-group outside_acl in
     ip nat outside
     ip virtual-reassembly in
     shutdown
     duplex auto
     speed auto
     crypto map CryptoCY
    ip local pool VPNPool 192.168.23.2 192.168.23.10
    ip forward-protocol nd
    ip http server
    no ip http secure-server
    ip nat inside source list nat_list interface FastEthernet0/3/0 overload
    ip route 0.0.0.0 0.0.0.0 [default gateway ip]
    ip access-list standard VTY
      permit 192.168.20.0 0.0.0.255
    ip access-list extended CryptoACL
     permit ip 192.168.20.0 0.0.0.255 192.168.3.0 0.0.0.255
     permit ip 192.168.21.0 0.0.0.255 192.168.5.0 0.0.0.255
     permit ip 192.168.21.0 0.0.0.255 192.168.6.0 0.0.0.255
     permit ip 192.168.21.0 0.0.0.255 192.168.12.0 0.0.0.255
     permit ip 192.168.21.0 0.0.0.255 192.168.2.0 0.0.0.255
     permit ip 192.168.20.0 0.0.0.255 192.168.10.0 0.0.0.255
     permit ip host 192.168.22.1 192.168.5.0 0.0.0.255
     permit ip host 192.168.20.1 192.168.5.0 0.0.0.255
     permit ip host 192.168.22.1 192.168.6.0 0.0.0.255
    ip access-list extended DFBIT_acl
     permit tcp any any
    ip access-list extended inside_acl
     permit ip 192.168.20.0 0.0.0.255 host 192.168.3.35
     permit ip 192.168.20.0 0.0.0.255 host 192.168.3.39
     permit ip 192.168.20.0 0.0.0.255 host 192.168.3.23
     permit ip 192.168.20.0 0.0.0.255 host 192.168.3.18
     permit ip 192.168.20.0 0.0.0.255 host 192.168.3.55
     permit ip 192.168.20.0 0.0.0.255 host 192.168.10.144
     permit ip 192.168.20.0 0.0.0.255 host 192.168.10.146
     permit ip 192.168.20.0 0.0.0.255 host 192.168.10.141
     permit ip host 192.168.20.253 host 192.168.3.21
     permit ip host 192.168.20.254 host 192.168.3.21
     permit ip 192.168.20.0 0.0.0.255 host 192.168.3.10
     permit ip 192.168.20.0 0.0.0.255 host 192.168.20.254
    ip access-list extended nat_list
     deny   ip host 192.168.20.254 192.168.10.0 0.0.0.255
     deny   ip host 192.168.20.254 192.168.3.0 0.0.0.255
     deny   ip host 192.168.20.1 192.168.3.0 0.0.0.255
     deny   ip host 192.168.20.1 192.168.10.0 0.0.0.255
     deny   ip host 192.168.20.2 192.168.3.0 0.0.0.255
     deny   ip host 192.168.20.2 192.168.10.0 0.0.0.255
     permit ip host 192.168.20.1 any
     permit ip host 192.168.20.2 any
     permit ip host 192.168.20.254 any
    ip access-list extended outside_acl
     permit gre any host [ip address]
     permit esp any host [ip address]
     deny   ip any any
    ip sla 2
     icmp-echo 192.168.10.254 source-interface FastEthernet0/1.1
     frequency 180
     timeout 500
    ip sla schedule 2 life forever start-time now
    logging 192.168.3.21
    route-map DFBIT_routemap permit 10
     match ip address DFBIT_acl
     set ip df 0
    route-map ISP2 permit 10
     match ip address nat_list
     match interface FastEthernet0/3/0
    route-map nonat permit 10
     match ip address nonat_acl
    route-map ISP1 permit 10
     match ip address nat_list
     match interface FastEthernet0/0

    You cannot access internet, because all traffic is tunneled for VPN !!!!
    Please see cisco tech documentation and bypass traffic for internet.
    eg.  if lan traffic is going from site a to site b  then through vpn
          else
           lan traffic to internet (any) should be out thorugh the vpn .

  • After updating Firefox yesterday I have been unable to access the internet. I have tried the Norton 360 fix several times, but it still doesn't work. How can I get Firefox working again?

    After updating Firefox yesterday I have been unable to access the internet. I have tried the Norton 360 fix several times, but it still doesn't work.

    After updating Firefox yesterday I have been unable to access the internet. I have tried the Norton 360 fix several times, but it still doesn't work.

  • Unable to access the Internet over 3G Network, Wi-Fi fine.

    Hi there,
    I'm unable to access the internet on the iPhone 3G over the 3G network. Wi-Fi is fine, no problems there, but every time I try to bring up a website in Safari over 3G I get the message "Safari can't open the page because it is not connected to the Internet".
    I have Enable 3G 'ON' under Settings > General > Network, and I have full strength on the signal meter in the top left of the Home screen. I'm in a city (Melbourne, Australia) on the Optus network, so the network itself shouldn't be the issue.
    I've tried resetting the Network Settings under Settings > Reset > Reset Network Settings, but it didn't change anything. Any other ideas?
    Cheers.

    Well, there you go, fixed! Called Optus Customer Service and they were actually helpful! Apparently there were "some components in their back-end that needed to be installed manually." The man wasn't sure why they weren't there, "glitches, blah, blah..." but at least they're there now and I have 3G access.

  • TS1398 When my iphone connects to wifi, everything else in my house will not connect to the internet. They all show 3 to 4 bars on connection strength, but unable to access the internet.  The second I turn off the wifi on my iphone, everything runs perfec

    When my iphone connects to wifi, everything else in my house will not connect to the internet. They all show 3 to 4 bars on connection strength, but unable to access the internet.  The second I turn off the wifi on my iphone, everything in my house runs fine. What is going on?

    Had a similar problem a number of years ago with a laptop my daughter had. The probelm turned out to be the router. What kind of router do you have? Have you checked for firmware updates, or at least tried re-booting it?

  • HT4623 I am unable to access the internet even though my wi-fi signal is strong. It circles then times out. I can't even check for software updates. It tells me "Unable to Check for Update, an error occured while checking for a software update" What can I

    Help! I have an older iPad. I am not sure which version. I cannot access the internet even though it shows a strong Wi-Fi signal. I have tried re-starting and when I tried to search for updates I couldn't access. It told me an error had occured. What can I do? Thanks!

    Me too having the same thing what's the solution for this how can I update

  • Time Capsule has green light, but unable to access the internet

    My Time Capsule has a green light, but all devices (wired and wireless) are not allowed out to the internet.
    When I connect my iMac directly to my internet router, I am able to access the internet, so I have isolated the issue to the Time Capsule.
    The Time Capsule receives an IP address from my internet router via DHCP and I can see this address in the Time Capsule config, but for some reason the Time Capsule is not allowing internet access to both wired and wireless clients.
    Thank you.
    --SN124B

    Verify that you have a working Ethernet cable.
    Then verify that the Ethernet cable is connected from one of the LAN <-> ports on your main router to the WAN "O" port on the Time Capsule.
    Check again to make sure that the Time Capsule is configured in Bridge Mode
    Power cycle the entire network as follows:
    Power off all devices in any order you want
    Wait a few minutes
    Start the modem or modem/router first and let it run a full minute by itself
    Start the main router next the same way
    Start the Time Capsule the same way
    Continue starting devices one at a time until everything is powered back up
    Check the network

  • Suddenly unable to access the barclaycard site when i can with other browsers. I have been through the IPV6 and dns Prefetching to no avail

    Standard error message comes up ONLY on the below site that Problem Loading Page
    The connection has timed out
    The server at www.barclaycard.co.uk is taking too long to respond.
    * The site could be temporarily unavailable or too busy. Try again in a few
    moments.
    * If you are unable to load any pages, check your computer's network
    connection.
    * If your computer or network is protected by a firewall or proxy, make sure
    that Firefox is permitted to access the Web.

    Hi the-edmeister
    I have been through all of the above, and still will not connect to Barclaycard withthe same error message as in above post. What's next, deintall firefox and reinstall? Could it be some problem with VPN software, as interestingly on my works supplied machine, neither IE or Firefox will connect to this site (but all others) when I'm outside the VPN, but when I'm inside, IE5 will connect to all sites including Barclaycrd, but not firefox....could it be a conflict between IE5 and firefox? This is driving me nuts
    Thanks in advance for your response

  • Completing user authentication before accessing the Internet

    I’m using an 871 router with IOS Version 12.3(8)YI3 as a firewall to the Internet. I’ve already got the 871 using Websense for URL filtering but I need the 871 perform AAA authentication the first time a user attempts HTTP or HTTPS access to the Internet. And if authenticated, pass the user/IP information to Websense so I can apply the proper filtering policies. I’m already doing this type of function using a PIX, can I do the same on the 871 router?

    Yes, it's called auth proxy:
    http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a0080094eb0.shtml
    Hope that helps!

  • Unable to access the internet on windows xp using bootcamp. I installed the bootcamp drivers ( from snow leopard) but it still doesn't work. I have parallels 6 also installed and IT works fine. I am missing a rtl network adapter-thanksr

    Hi
    I have a new 21 inch imac oct 2011 version. I installed bootcamp and windows xp on my machine and i also installed parallels 6.
    Paralleles works great and i can open any program with it. But bootcamp also works EXCEPT it refuses to give me access to the internet. I installed the bootcamp drivers from my snow leopard disk, it did not make a difference. All the drivers installed but still no internet. I then installed the bootcamp drivers from the gray mac osx disk (#1) but it stopped installing with an error number ( 2753) and it said that the package was damaged.
    I have tried everything; i opened each disk and trieed installing the files separately. Nothing.
    What i see missing in my devices screen in XP is the network adapter.
    I have a router (dlink-dr615) and it is connected by ethernet to my imac. I wonder if THIS might have anything to do with the problem. Any guidance would be much appreciated.
    Thank you

    I'd recommend reposting in the Boot Camp forum, that is where the Boot Camp and Windows gurus hang out.
    Good luck.

  • Connected to Wi-Fi network, but unable to access the Internet ipad 2

    Hello,
    i baught a new ipad 2 32 gb , 3g.... 4.3.5os
    i am having an annoying issue regarding the internet connection..
    where i am living i cannot connect a router so my laptop has a cable connected to it to access internet ... i had to create an ad-hoc ( to make my laptop work as a router)
    ( windows 7 btw)
    now my iphone connect fine and i can browse internet, but when it comes to my ipad it only connects to the wi-fi but when i open the safari , a message pops up saying no internet connection eventhough as i said it's connected to WIFI with full signal !!
    this is really frustrating and i've read many many blogs about this issue but none of them solved my problem and this was my last option is to send u guys askin for help...
    p.s: i tried to click on renew lease but nothing is changed
    ip adress : 169.254.90.xxx
    subnet mask:255.255.0.0
    router : blank
    dns:blank

    Try using an explict DNS server, such as
    208.67.222.222 (OpenDNS server)
    8.8.8.8 (Google DNS server)
    System Preferences -> Network -> Advanced -> DNS -> [+]
    The first entry you add (at the top of the list) will be the primary DNS server.

  • Unable to access the internet through pc

    I have time capsule connected to my pc through an Ethernet cable, it says my local area network is connected at 100 Mbps yet it is unable to connect to the internet. My xbox and MBP connect without a problem, any ideas on what is going on?

    If you're using 5.1, that's a beta enviroment and not supported.
    If you have it legally, it's attached to a developer account and all questions need to be directed to the developer forums.
    Latest gold version is 5.0.1.

  • Unable to access the internet after upgrading to 10.5.2

    Since I've upgraded to 10.5.2 recently, as in yesterday, my ability to connect to the internet has changed DRAMATICALLY!!! Basically to not at all! It seems that there is ALLOT of of traffic on the forums about this problem. But no responses seem to be given from a moderator or tech support.
    I've had to downgrade the wireless to G or use the ethernet connection to get online. And that is just barely. I have NO problems with using my WIN computers on the same router. This all started when 10.5.2 arrived. Even when the network sys pref's reported back that I had an IP address on the router, it STILL didn't connect.
    Does anyone from Apple read the forums???? It appears not. And it appears that Apple don't really care as the problem seems to have been going on for awhile!

    Since I've upgraded to 10.5.2 recently, as in yesterday, my ability to connect to the internet has changed DRAMATICALLY!!! Basically to not at all! It seems that there is ALLOT of of traffic on the forums about this problem. But no responses seem to be given from a moderator or tech support.
    I've had to downgrade the wireless to G or use the ethernet connection to get online. And that is just barely. I have NO problems with using my WIN computers on the same router. This all started when 10.5.2 arrived. Even when the network sys pref's reported back that I had an IP address on the router, it STILL didn't connect.
    Does anyone from Apple read the forums???? It appears not. And it appears that Apple don't really care as the problem seems to have been going on for awhile!

  • I am having trouble activating my verizon 3g connection i am unable to access the internet currently may that b the issue? i am having trouble activating my verizon 3g connection i am unable to access the internet currently may that b the issue

    RE: having trouble acessing my 3g network.Could my problem b that i have no internet connection to allow access to bring up my cellular account?

    Either take it into your nearest Verizon Store or call Verizon and follow the prompts for technical support. They will walk you through setting it up. 800-922-0204

  • HT4623 I have downloaded and installed IOS6 for my IPad I am now unable to access the internet on IPad any help would be appreciated.

    Having downloaded and installed IOS6 for IPad ,I can no longer access internet on IPad.Any solutions ?

    1. Turn router off for 30 seconds and on again
    2. Settings>General>Reset>Reset Network Settings

Maybe you are looking for