WAP2000 - not forwardnig RADIUS requests

Hi to all!
I have four WAP2000 APs. They all have same wireless configuration. Three SSIDs on different VLANs. One SSID is completely open (no security at all) and other two use WPA2 Enterprise authentication.
There is no problem with open SSID and it works normally all the time.
Problem occurs with WPA2 Ent authentication:
- on every device reboot (software or hardware), device won't forward authentication request to RADIUS server. Solution for this problem for me is to logon to admin interface, go to section WIRELESS --> Security and to click Save button. I don't make any changes in the configuration or anything except I just press Save button
- after few days of normal operation, device just stops sending authentication request to RADIUS server. As in previuos problem, solution is clicking Save button on Wireless-->Security configuration screen.
Devices have latest FW: 2.0.0.5 on HW revision: 1.0
I've already tried to reapply FW, to reconfigure APs (without using saved configuration).
I would appreciate any suggestions you might have!
Thank you

Hi to all,
We have similiar issue but with WAP200 access points.
Several Linksys WAP200 APs, wifi clients are authenticated by radius server, security mode is WPA2-Enterprise.
Each AP is configured through web interface, among other options radius shared secret is entered, config is saved, AP works fine and authenticate clients till it is turned off. After starting up AP "forgets" radius-server key, couldn't communicate with radius and thus authenticate clients.
To fix that problem we have to use web interface again and push "save" button on Wireless Security page. Nothing else is entered or changed, just save options manually and everything works again till next reboot.
I guess it's software issue and though web interface form do remember correct radius-server key, AP doesn't or couldn't parse it at boot time. When web interface is visited and options are reapplied everything works fine again.
Problem is reproduced in linksys firmware our WAP200s were shipped with, and in both ETSI images available for download from cisco site (1.0.22 and 2.0.1.3).

Similar Messages

  • ISE 1.3 not receiving Radius requests from WLC 5508 ver 8.0.110.0

    Hello all. I just implemented ISE 1.3 at a customer site. added a WLC running 8.0.110.0 using its mgmt address with a RADIUS preshared key. On the WLC, I created to SSIDs, corp and guest.
    For corp I configured WPA2 and AES and forwarded Radius requests to my 2 ISE node PSN interfaces
    For the guest I configured MAC filter with advanced features AAA overide and Radius NAC - per Cisco's documents
    The corp forwards Radius requests to ISE, the guest does not. I get nothing from the guest.
    I configured the WLC step by step from the Cisco document. I have completed over 10 ISE implementations in the last year using ISE 1.2 and WLC 7.x and have never run into this issue before.
    Any help will be much appreciated.

    This issue has been resolved. The issue was that for the guest SSID MAC filtering was enabled as required, but they had the test PCs on a mac filter bypass list for that SSID in the WLC. This was automatically authenticating the PC, and therefore not forwarding the RADIUS to ISE.
    Once we removed the PC from the MAC filter list in the WLC, the authentications were forwarded to ISE as desired.

  • The RADIUS request did not match any configured connection request policy (CRP)

    I setup NPS server and added a RADIUS Client access point, my project is to get a wireless user to authenticate using his/her AD credientials, my problem is i can't seem to authenticate my user
    my NPS server is giving me this error log under Event Viewer > Server Logs > Network Policy and Access Services
        Reason:                The RADIUS request did not match any configured connection request policy (CRP).
    but from my understanding i don't need to setup Connection Request Policies because i am using Network Policy
    Please Help!

    thanks for your reply, i setup a new NPS policy here is my error log
    Network Policy Server denied access to a user.
    Contact the Network Policy Server administrator for more information.
    User:
        Security ID:            NULL SID
        Account Name:            csdomain\rsingh
        Account Domain:            csdomain
        Fully Qualified Account Name:    csdomain\rsingh
    Client Machine:
        Security ID:            NULL SID
        Account Name:            -
        Fully Qualified Account Name:    -
        OS-Version:            -
        Called Station Identifier:        0026.992f.6761
        Calling Station Identifier:        2477.0392.b0f8
    NAS:
        NAS IPv4 Address:        192.50.2.2
        NAS IPv6 Address:        -
        NAS Identifier:            MYWAP
        NAS Port-Type:            Wireless - IEEE 802.11
        NAS Port:            35290
    RADIUS Client:
        Client Friendly Name:        MYWAP
        Client IP Address:            192.50.2.2
    Authentication Details:
        Connection Request Policy Name:    PEAP
        Network Policy Name:        -
        Authentication Provider:        Windows
        Authentication Server:        MYSERVER.csdomain.com
        Authentication Type:        EAP
        EAP Type:            -
        Account Session Identifier:        -
        Logging Results:            Accounting information was written to the local log file.
        Reason Code:            22
        Reason:                The client could not be authenticated  because the Extensible Authentication Protocol (EAP) Type cannot be processed by the server.

  • ISE v1.2 - Status-Server - 5405 RADIUS Request dropped

    Just a note:
    Some devices send regular RADIUS status messages;
    The ISE drops these as 
    Event: 5405 RADIUS Request dropped
    Failure Reason: 11031 RADIUS packet type is not a valid Request
    Root cause: RADIUS packet type is not a valid Request.
    Wireshark shows:-
    Code: Status-Server (12)
    Attribute Value Pairs:
    AVP: l=6  t=Service-Type(6): Shell-User(6)
    AVP: l=18  t=Message-Authenticator(80): df48bb4b50f0a772bd7c891ef6548c68
    AVP: l=6  t=NAS-IP-Address(4): 10.1.1.1
    I believe that ISE should accept and respond to these messages RFC5997  up2866.
    A RADIUS server or proxy implementing this specification SHOULD respond to a Status-Server packet with an Access-Accept (authentication port) or Accounting-Response (accounting port).  An Access-Challenge response is NOT RECOMMENDED.  An Access-Reject response MAY be used.

    Neno
    Nothing to do with that,
    The devices will use RADIUS to authenticate fine; databass, credentials, etc fine.
    However they send keepalives to validate the RADIUS server is still there.  ISE doesn't implement this and ISE logs get full of rejections.  The end devices are unable to prioritise which ISE to used based on up/down.  But still work.
    This was just a note to everyone so they are aware of the issue,

  • Problem in ACS5.1 : "EAP session timed out", "RADIUS Request dropped "

    Hi .
    Part of my access points do not want to authenticate wi-fi users (through Radius server and Microsoft AD) .
    The scheme is: wi-fi PC-access point -ACS server 5.1 (Radius)-Microsoft AD
    After I  configured some AP, next logs we can see :
    EAP session timed out (many)
    RADIUS Request dropped (many)
    Could not establish connection with ACS Active Directory agent
    User's Groups retrieval from Active Directory failed
    The user is not found in the internal users identity store.
    Another part of devices (AP) works well.
    Anyone can help me to solve this problem please?

    Hi Nicolas.
    In logs usually we see some steps of beginning relations between devices. But here we see only one log line:
    What can it mean?
    The other messages seem to indicate that there is a problem with your AD. Did you test the bind ? Can you retrieve the AD groups list from ACS ?
    Yes, we tested relations between AD and ACS, AD groups list retrieve fine from AD. In addition half of devices in network works fine: wi-fi devices authenticates excellent .
    Do you use AD with the ACS for another part of your network that would be working fine ?
    Yes, there is single AD and ACS.

  • ISE PSN rejecting RADIUS request

    Hi,
    We have a distributed ISE infrastructure version 1.3.
    We begin noticing the following problem.
    Randomly the PSN's started dropping radius requests.
    Basically they didn't serviced any client.
    It looked like this bug:
    ISE PSN rejecting RADIUS request; deadlocks found @ catalina.out
    CSCur43427
    Symptom:
    ++ CU runs distributed deployment; 2PSN +MnT +PMN;
    ++ PSN "node status were up during the issue;
    ++ PSNs were rejecting RADIUS request; ICMP reachability to PSN were OK;
    ++ both wired and wireless are affected
    ++ removing accounting from both foreign/anchor did not fix the issue;
    Conditions:
    ++ ISE 1.2.0.p10
    ++ happens every 2-3 weeks;
    Workaround:
    ++ restart ISE services;
    So we installed patch 2.
    But now we got the same problem and there is no newer patch.
    Did anyone encountered this also?
    thanks,
    laszlo

    We've also encountered this with 1.3 and logged a TAC case but unfortunately they weren't able to determine the cause due to not enough detail. They suggested changing the log level for runtime-AAA and prrt-JNI to debug temporarily and when it happens again, before restarting the PSN, download the logs from it to supply to TAC.
     

  • ACS 5.2 Error message: 5405 RADIUS Request dropped

    The error message "5405  RADIUS Request dropped", what does it meen ?.
    We have implemented 802.1X on a C4506 switch running IOS 12.2(53), it has worked fine for about 3 months but now I get users not able to authenticate. In the loggs on the ACS I get the obove message.
    ACS 5.2 is running 5.2.0.26 Build 3075.
    Has anyone have hade the same problem ?

    It's fixed in 5.3...
    http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.3/release/notes/acs_53_rn.html
    ...or stop/start ACS as a workaround till it's happen again.
    Kind regards,
    Ron

  • SQL access to interface port descriptions or via radius request?

    Does anyone know how to include port descriptions within a radius request or of a database that I can pull the information from a Using a SQL statement. We have Cisco CER, Cisco works, Cisco prime or am looking to populate my own database. Thanks

    Q: Do I simply install calls to the entry points in the RS-232 Library using COM6 as the port ID?
    A: Yes
    Q: I guess I also want to know if the RS232 Library functions all interface to the hardware through the Windows API?
    A: Yes
    Keep in mind that the objective of any Virtual COM Port Driver is to mimic a native com port. If you ever run into the situation where the native com port works, but your converter's com port doesn't, you should contact the manufacturer. This of course refers to calls to the Windows serial API, direct writes to memory are not included in this statement.

  • ISE-5443 RADIUS request dropped due to reaching EAP sessions limit

    Hi Guys,
    I am getting the below error message from two PSNs (out of 4) & resulting 95% failed authentications on ISE
    "5443 RADIUS request dropped due to reaching EAP sessions limit"
    Could not find any documents/reference & trying to get on hold TAC in the mean time.
    If anyone of you know what could it be, pls share your inputs
    TIA
    Rasika

    Hi Scott,
    Thanks for that..
    here is bit more information about this evnts log in ISE system (1.2 Patch 4).
    Event: 5405 RADIUS Request dropped
    Failure Reason :5443 RADIUS request dropped due to reaching EAP sessions limit
    Resolution : Wait a few seconds before invoking another RADIUS request with new EAP  session. If system overload continues to occur, try restarting the ISE  Server
    Root cause: A RADIUS request was dropped due to reaching EAP sessions limit. This  condition can be caused by too many parallel EAP authentication  requests.
    Worked with TAC & restarted the service of one PSN node & that brings that node to normal condition & removed the other PSN form the F5 pool until TAC analyze gathered support bundle from that.
    It is not heavily loaded environment (3k wireless clients) at the moment & bit scary since we are expecting around 15k when students are back in early March. Authentication failure rate is around 100 in every 15-20s interval. Not sure what is the limitation of the ISE system itself to handle number of EAP sessions per second.
    Rasika

  • Add domain name to radius "request"?

    Hi there.
    Is it possible for one to access a clientless portal/Anyconnect VPN, login using only the initials and not the full domain name?
    In a multiple user/domain environment?
    Example:
    test instead of testdomain/test
    Can the ASA pass the full name testdomain/test on if the users are identified by a specific portal page/group?(Adding the domain to the radius request)
    This is meant to be in a environment with multiple domains, so i need as much seperation as possible(But still easy workflow from the user perspective).
    Or how is this done? Thanks.
    Hope you understand my question.
    /Søren

    Is it possible when choosing a seperate portal to add the domain to the user info before passing it to the Radius server?
    /Søren

  • Error:  "Could not complete your request because of a program error" (photoshop CS2 9.0.2 on MAC OSX

    Today I started my program (photoshop CS2 9.0.2) and opened a JPG file. When I went to print the file the program crashed and closed. When I restarted the program and went to open the file I got this error message, "Could not complete your request because of a program error".
    I have tried several different file types/sizes and all result in the same error message since the program crashed. It will not open any file I try to open. As I indicated above I am using Photoshop CS2 9.0.2 it is on a MAC with OSX 10.4.11.
    I called Adobe and the Rep directed me to Tech Note 331307 and told me to Re-create the Photoshop preferences files. Which I did and restarted the program, but when I tried to open a file (any file) I still get the same error message so it doesn't appear to be the preferences.
    Does anyone have any info as to what the problem may be and how to correct it.
    Thanks

    Thanks for the response. OK... This is the first day I have been able to get back to the problem.
    My system I am running Photoshop on is a Power Mac G4, AGP Graphics ATY Rage 128Pro chip set 16MB VRAM LCD 1280x1024 32-bit color, 500MHz, 1.75GB of memory, 1 MB L2 Cache, 100 MHz Bus Speed. I had installed the latest security update and repaired the permissions the day the problem started.
    Now to day I started the system and went in and created a Guest Account. I logged into the guest account and started Photoshop. Low and behold it worked just fine. So I logged out of guest and logged into my main user account And started Photoshop. Wouldn't you know it.... It works just fine. I can open any file I want with now problems.
    I got to thinking after I had done all of this that I wished I had tried to open a file in Photoshop today prior to creating the guest account to see if it still had the problem in my main user account.
    I did not change anything else on the system and all seems to work fine now. So at his point I am really not sure what the problem was.
    Again thanks for taking the time to respond to this issue.

  • I want to edit my raw images on cs5 photoshop.  But when I go to open the .CR2 file it says  '' Could not complete your request because the file appears to be from a camera model which is not supported by the installed version of Camera Raw. Please visit

    I want to edit my raw images on cs5 photoshop.  But when I go to open the .CR2 file it says 
    '' Could not complete your request because the file appears to be from a camera model which is not supported by the installed version of Camera Raw. Please visit the Camera Raw help documentation for additional information.  '' 
    When I go to updates in photoshop help i try to update photoshop and photoshop camera raw but it then says 
    '' Updates could not be applied the error log file may help you in identifying the problem. Then, try updating again. If the problems persist, contact customer support for further assistance. 
    Photoshop Camera Raw 8.7.1(CS6) There was an error installing this update. Please quit and try again later. Error Code: U44M1I216 ''  
    I dont know how to get around this please help

    CR2 files from which Canon camera?
    Supported cameras are listed here
    Camera Raw plug-in | Supported cameras

  • I keep getting a message saying "Could not complete your request because of a program error"

    I keep getting a message saying ( Could not complete your request because of a program error??
    Does anyone know what this means or how to fix?

    blucoast,
    Can you please be more detailed? When are you getting this - what is causing it? Any specific tool or while starting Photoshop itself?
    Do you see an error number or error code or a report? Can you post that here?

  • Effects not working? "Could not complete your request because of a program error?"

    Hey guys&gals - I have always had this problem when working in RGB/CYMK modes - can anyone help me with that?
    More more importantly, now I am getting in in Grayscale mode as of this morning.
    I run Photoshop 6 V 13.1.2 x64 and just updated it this AM.
    Effects are crucial for my job, so I need this fixed asap!!
    I have tried the ctrl, alt, shift start up to no avail. Restarted, shutdown my PC as well.
    Please advise!
    Thanks,
    blaqgranitelaser

    Found the places I was supposed to - now what? Photoshop isn't crashing... doesn't give me any info other than a box saying "Could not complete your request because of a program error." And I have no choice but to click OK. This only happens when I try to use the layer effects in any color mode. Originally it was only in RGB/CMYK but now also happens in Grayscale.
    I'm not technologically savvy - I know what programs I use, but that is all.

  • Can't open file: "Could not complete your request because of a program error"

    I have a Photoshop file that suddenly won't open.  Last week I upgraded to CS5--the file had been created in CS3 prior to that.  When I try to open it, I receive this error message (in CS5): "Could not complete your request because of a program error."  I tried to open the same file in CS3; there, the file opens, but as soon as I try to do anything I get the same error message....which, annoyingly, re-appears the second I click "OK," so the only thing I can do in CS3 is force-quit.
    I've used Time Machine to retrieve versions of the file that were saved four days ago, seven days, and several weeks ago, and I get the same message every time.  Even on versions that were last saved with CS3 (before I installed CS5).
    Naturally, this is one of the most important files in my life right now....it's a 300 MB file that contains hundreds of layers and dozens of comps.  So the fact that I suddenly can't open it, after shelling out $1200 to upgrade to the latest and greatest Adobe has to offer, is, to say the least, distressing.
    Any advice will be appreciated.
    Thanks,
    TheWocky

    First thing I would do is investigate hard drive issues and the health of the OS.

Maybe you are looking for