Windows Client cannot connect to wireless LAN through EAP-TLS

I have a Cisco Aironet Access point which cannot be authenticated by a remote RADIUS server to connect to wireless lan through EAP-TLS. These is the debug output from the AAA process.
*Mar 7 10:56:56.337: dot11_auth_dot1x_start: in the dot11_auth_dot1x_start
*Mar 7 10:56:56.369: dot11_auth_parse_client_pak: Received EAPOL packet from 08
11.9650.8cb0
*Mar 7 10:56:56.385: dot11_auth_parse_client_pak: Received EAPOL packet from 08
11.9650.8cb0
*Mar 7 10:56:56.385: dot11_auth_parse_client_pak: id is not matching req-id:1re
sp-id:2, waiting for response
*Mar 7 10:56:56.401: dot11_auth_parse_client_pak: Received EAPOL packet from 08
11.9650.8cb0
*Mar 7 10:56:56.717: dot11_auth_dot1x_parse_aaa_resp: Received server response:
GET_CHALLENGE_RESPONSE
*Mar 7 10:56:56.717: dot11_auth_dot1x_parse_aaa_resp: found eap pak in server r
esponse
*Mar 7 10:56:56.785: dot11_auth_parse_client_pak: Received EAPOL packet from 08
11.9650.8cb0
*Mar 7 10:56:57.097: dot11_auth_dot1x_parse_aaa_resp: Received server response:
GET_CHALLENGE_RESPONSE
*Mar 7 10:56:57.097: dot11_auth_dot1x_parse_aaa_resp: found eap pak in server r
esponse
*Mar 7 10:56:57.101: dot11_auth_parse_client_pak: Received EAPOL packet from 08
11.9650.8cb0
*Mar 7 10:56:57.393: dot11_auth_dot1x_parse_aaa_resp: Received server response:
GET_CHALLENGE_RESPONSE
*Mar 7 10:56:57.393: dot11_auth_dot1x_parse_aaa_resp: found eap pak in server r
esponse
*Mar 7 10:56:57.397: dot11_auth_parse_client_pak: Received EAPOL packet from 08
11.9650.8cb0
*Mar 7 10:56:57.673: dot11_auth_dot1x_parse_aaa_resp: Received server response:
GET_CHALLENGE_RESPONSE
*Mar 7 10:56:57.673: dot11_auth_dot1x_parse_aaa_resp: found eap pak in server r
esponse
*Mar 7 10:56:57.677: dot11_auth_parse_client_pak: Received EAPOL packet from 08
11.9650.8cb0
*Mar 7 10:56:57.953: dot11_auth_dot1x_parse_aaa_resp: Received server response:
GET_CHALLENGE_RESPONSE
*Mar 7 10:56:57.953: dot11_auth_dot1x_parse_aaa_resp: found eap pak in server r
esponse
*Mar 7 10:56:57.957: dot11_auth_parse_client_pak: Received EAPOL packet from 08
11.9650.8cb0
*Mar 7 10:56:58.317: dot11_auth_dot1x_parse_aaa_resp: Received server response:
GET_CHALLENGE_RESPONSE
*Mar 7 10:56:58.317: dot11_auth_dot1x_parse_aaa_resp: found eap pak in server r
esponse
*Mar 7 10:56:58.321: dot11_auth_parse_client_pak: Received EAPOL packet from 08
11.9650.8cb0
*Mar 7 10:56:58.685: dot11_auth_dot1x_parse_aaa_resp: Received server response:
GET_CHALLENGE_RESPONSE
*Mar 7 10:56:58.685: dot11_auth_dot1x_parse_aaa_resp: found eap pak in server r
esponse
*Mar 7 10:56:58.685: dot11_auth_parse_client_pak: Received EAPOL packet from 08
11.9650.8cb0
*Mar 7 10:56:58.993: dot11_auth_dot1x_parse_aaa_resp: Received server response:
GET_CHALLENGE_RESPONSE
*Mar 7 10:56:58.993: dot11_auth_dot1x_parse_aaa_resp: found eap pak in server r
esponse
*Mar 7 10:56:59.041: dot11_auth_parse_client_pak: Received EAPOL packet from 08
11.9650.8cb0
*Mar 7 10:57:01.077: Client 0811.9650.8cb0 failed: reached maximum retries
*Mar 7 10:57:08.997: %RADIUS-4-RADIUS_DEAD: RADIUS server 165.72.12.12:1812,181
3 is not responding.
*Mar 7 10:57:08.997: %RADIUS-4-RADIUS_ALIVE: RADIUS server 165.72.12.12:1812,18
13 is being marked alive.
*Mar 7 10:57:14.481: dot11_auth_dot1x_start: in the dot11_auth_dot1x_start
*Mar 7 10:57:14.521: dot11_auth_parse_client_pak: Received EAPOL packet from 08
11.9650.8cb0
*Mar 7 10:57:44.521: %DOT11-7-AUTH_FAILED: Station 0811.9650.8cb0 Authenticatio
n failed
*Mar 7 10:57:44.801: dot11_auth_dot1x_start: in the dot11_auth_dot1x_start
*Mar 7 10:57:44.829: dot11_auth_parse_client_pak: Received EAPOL packet from 08
11.9650.8cb0
*Mar 7 10:58:14.829: %DOT11-7-AUTH_FAILED: Station 0811.9650.8cb0 Authenticatio
n failed
*Mar 7 10:58:15.105: dot11_auth_dot1x_start: in the dot11_auth_dot1x_start
*Mar 7 10:58:15.141: dot11_auth_parse_client_pak: Received EAPOL packet from 08
11.9650.8cb0
*Mar 7 10:58:45.141: %DOT11-7-AUTH_FAILED: Station 0811.9650.8cb0 Authenticatio
n failed
*Mar 7 10:58:45.425: dot11_auth_dot1x_start: in the dot11_auth_dot1x_start
*Mar 7 10:58:45.449: dot11_auth_parse_client_pak: Received EAPOL packet from 08
11.9650.8cb0
*Mar 7 10:59:15.449: %DOT11-7-AUTH_FAILED: Station 0811.9650.8cb0 Authenticatio
n failed
*Mar 7 10:59:15.729: dot11_auth_dot1x_start: in the dot11_auth_dot1x_start
*Mar 7 10:59:15.753: dot11_auth_parse_client_pak: Received EAPOL packet from 08
11.9650.8cb0
*Mar 7 10:59:45.753: %DOT11-7-AUTH_FAILED: Station 0811.9650.8cb0 Authenticatio
n failed
*Mar 7 10:59:46.009: dot11_auth_dot1x_start: in the dot11_auth_dot1x_start
*Mar 7 10:59:46.037: dot11_auth_parse_client_pak: Received EAPOL packet from 08
11.9650.8cb0
*Mar 7 10:59:50.077: Client 0811.9650.8cb0 failed: reached maximum retries
*Mar 7 10:59:50.349: dot11_auth_dot1x_start: in the dot11_auth_dot1x_start
*Mar 7 10:59:50.373: dot11_auth_parse_client_pak: Received EAPOL packet from 08
11.9650.8cb0
*Mar 7 10:59:55.077: Client 0811.9650.8cb0 failed: reached maximum retries
*Mar 7 10:59:55.341: dot11_auth_dot1x_start: in the dot11_auth_dot1x_start
*Mar 7 10:59:55.361: dot11_auth_parse_client_pak: Received EAPOL packet from 08
11.9650.8cb0
*Mar 7 11:00:00.077: Client 0811.9650.8cb0 failed: reached maximum retries
*Mar 7 11:00:00.333: dot11_auth_dot1x_start: in the dot11_auth_dot1x_start
*Mar 7 11:00:00.357: dot11_auth_parse_client_pak: Received EAPOL packet from 08
11.9650.8cb0
*Mar 7 11:00:05.077: Client 0811.9650.8cb0 failed: reached maximum retries
*Mar 7 11:00:05.341: dot11_auth_dot1x_start: in the dot11_auth_dot1x_start
*Mar 7 11:00:05.365: dot11_auth_parse_client_pak: Received EAPOL packet from 08
11.9650.8cb0
*Mar 7 11:00:10.077: Client 0811.9650.8cb0 failed: reached maximum retries

Kindly get verified the configuration and the compatibility if there is a mismatch. Please find the link below for more information on EAP-TLS functions in Access points and clients.
http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_white_paper09186a008009256b.shtml#wp39110

Similar Messages

IMac 27": Windows 7 cannot connect to wireless internet

I just installed Windows 7 on my iMac (new model 2011) on another partition, so I now have both OS X and Windows 7, and I cannot connect to my Wireless Network in Windows 7, but I can in OS X.
I've tried basically everything and looked in millions of threads to find a sollution - but I can't. I'm using my laptop now (Windows XP) and it's connecting fine.
I've tried:
- Resetting the router
- Changing the security type from WPA2/TKIP to none
- Updating the driver (In Windows it says it's and Atheros AR938x Wireless Lan Card)
- Update all Windows
What can I do?
Gear:
Router: Netgear CG 2000
iMac 27 (New model 2011 or what it's called. It a year old)
I've read several times that Windows 7 has problems with connection, but the threads are like 2 years old, so someone must have come up with a sollution?
Christian

I've done that.
I've installed Windows 7 with Bootcamp and everything is installed correctly if I look in "Device Manager". There are no problems - except that I cannot join the wireless network.
If I plug a cable in it works fine.

Windows XP cannot connect to wireless HP6980

I replaced my hard drive and can connect wirelessly to the internet but my computer cannot connect to my printer. I followed instructions to enter the IP address in the browser and found my printer but could not configure it. Now when I put in the IP address it does not recognize the address. I disabled windows firewall but this did not help. I have the WEP Key and the system sees the gateway and mask but still can't find the printer.

Did you install the HP software from here?
Do not use WEP, it is not secure (can be broken in about 10 minutes with freeware) and can also cause connection problems. Change to WPA or WPA2 with a passphrase you create - use 13+characters, numbers and letters, upper and lower case.
Say thanks by clicking "Kudos" "thumbs up" in the post that helped you.
I am employed by HP

8.8 Client cannot connect to Windows Server 2008 error -1102

SAP Business On 8.8 on PL 18
This is not the first time I have had this issue with Windows Server 2008.
however everytime the resolution was diffrent. Now this site is causing trouble.
The issue is the client cannot connect. We have the log on window, can see the company list. type on the password and we get a -1102 error.
The client on the Server itself can log on. It is the cleints that cannot.
I checked these below.
1 SQL Native client is installed and ok.
2. Licence server is configured and ok
3. The user has admin access to locl PC
4. The SAP user name and password are correct ( client on server can connect fine )
5. The ports 1433, 30000 and 30001 are open on the server.
6. Through SQL server configuration the named pipes and TCP are enabled.
7. SQL server browser is running
The only things I have not tried are
The Firewall is running on the server and I have not yet stopped it. Will try that tomorrow.
Do you have any other ideas please ?

I have got this working but I am not confidant of the outcome - yet - I really need your expert advise here.
This is what I did. In that order.
1.     As Owen suggested I checked if there was a specified Port for the instance. What I found was TCP Dynamic ports were enabled ( SQL server config manager | network configuration | tcp properties ) and there was no TCP port specified. Assuming ( ai may be wrong) that the system assigns a dynamic port to this instance I set it up so the Dynamic port does not happen and manually specified the Port 1433. Restarted the SQL Service. ( still having the Port 1433 open in the firewall). This did not solve the issue.
2.     With the above setting still on, switched off the firewall. Went to the PC client and SAP can log on now. Now keeping the SAP client running, switched on the Firewall on the server. Log off SAP on PC client and log back in ( with firewall off ). SAP now can log on.
3.     I had to do the above step for all PCs to get them working.
4. Currently the firewall is on and clients can connect
So what could be happening? I have no clue. It is apparent there is some setting that gets saved within the PCs ( may be user profile) after the first log on with the Firewall off - to say its safe ?
However I have no idea what will happen if the server is restarted u2013 this server we cannot restart any time we want as itu2019s a critical server and runs other things.
I would still like to get to the bottom of this to understand what is happening.
I have a SAP message running too and will ask them this same question.

Macbook clients cannot connect to Windows Server 2008 RRAS with L2TP/IPSec

Hi everyone,
I had installed "Remote and Routing Access" or a VPN server on Windows Server 2008. The connection type set up is L2TP/IPSec. All the Windows clients can connect to the L2TP/IPSec VPN server without problem but Macbook users are facing problem.
The Macbook users got the error message "The L2TP-VPN server did not respond. Try reconnecting. If the problem continues, verify your settings and contact your Administrator."
I think it is something related to the pre-shared key encryption but I am not sure. The Macbook users could connect if the connection type is changed to PPTP on server and clients side. I searched for similar problems and solutions online but no luck, I couldn't find solution that helps. I found this is a common problem faced by many macbook users.
Does anyone have a solution or suggestion for this, please? I appreciate all the helps and suggestion given.
Thanks,
CK

Hi,
Thanks for the question, however, this forum is for Remote Desktop Clients related questions.
Regarding the issue, as Windows clients can connect with no problem, I suspect that it is a Mac side issue and I would like to suggest you contact Apple support for help.
Thanks.
Jeremy Wu
TechNet Community Support

I cannot change the wireless LAN encryption WEP settings

Dear all,
I have a WRC-1000 which I did not use for about year and a half. Now I reconnected the unit and during the configuration I cannot change the wireless LAN settings for security (WEP). No matter what I do it keeps stuck on 128 bit WEP.
It also does not show the WEP key settings (so the screen where I should configure the WEP key).
This is what I have done so far: Full reset, reload default configuration, updated to latest firmware. Still no change. I suspect a hardware failure. Is this a memory failure (flash)??
Can someone help me out?
Thanks in advance

Hi
Do you speak about the router settings or about the WLan setting on the notebook???
Did you try to use a Wlan connectivity tool like Intel ProSet Utility or Atheros WLan client utility?
Depending on your WLan card I would recommend checking these both tools and try to establish the WLan connection using one of these programs!

How can I know which clients are connected to my network through express and which are connected through extreme?

I have an airport express extending, through wireless, a network provided by an airport extreme. How can I know which clients are connected to my network through express and which are connected through extreme?
Here you can see both routers:
I would expect to some clients connected to the express, other than the extreme. And that's all I see: only the airport extreme appears as client of the airport express.
Below, one can see the summary of the config for both routers.
Would somebody explain it?
Thanks,
Marcelo
Message was edited by: Marcelão

please disregard this answer.
Message was edited by: Marcelão

The client cannot connect to the server

we just installed the boe but found that the client cannot connect to the server.
server: windows server 2008
boe xi3
client: window xp sp3
the server and client are in same dns
all components are work in server but client.
any idea on this?
ps: i can ping the server name successful.
thanks
ada
Edited by: Ada_Wei on Oct 29, 2010 10:12 AM

Can you please try to stop and disable the Windows firewall service on your client machine?
WHich client do you use and which error message do you get exactly?
Regards,
Stratos

TS2756 iam using iphone 4S with win 7 PC and i cannot connect to the internet through my phone but i tried with my other 4S and it works but what should i do for the first iphone 4S???

iam using iphone 4S with win 7 PC and i cannot connect to the internet through my phone but i tried with my other 4S and it works but what should i do for the first iphone 4S???
as i said i have two iphone 4S,,,,,
1st one --- has os 5.1
2nd one has os 6.0
i tried 2nd one with carrier reliance gsm nd it works with that personal hotspot setting using USB...
but i want to connect the first 4S with carrier TATA DOCOMO GSM but its not working with the same USB feature????
plz reply asap...!!!
thnxxx in advance!!!

If not this:
iOS: Wi-Fi or Bluetooth settings grayed out or dim
One user reported that placing the iPod in the freezer fixed the problem.
Also heating sometimes works. See:
Why can't I select my wifi settings?
A trick that works frequently with iPhones:
Settings > AirPlane Mode ON, Do Not Disturb ON
Power down and wait 5-10 minutes
Power up
Settings > AirPlane Mode OFF, Do Not Disturb OFF
If not successful, an appointment at the Genius Bar of an Apple store is usually in order.
Apple Retail Store - Genius Bar
Then:
Does the iOS device connect to other networks? See other networks? If yes that tends to indicate a problem with your network.
Does the iOS device see the network?
Any error messages?
Do other devices now connect?
Did the iOS device connect before?
Try the following to rule out a software problem:
- Reset the iOS device. Nothing will be lost
Reset iOS device: Hold down the On/Off button and the Home button at the same time for at
least ten seconds, until the Apple logo appears.
- Power off and then back on your router
.- Reset network settings: Settings>General>Reset>Reset Network Settings
- iOS: Troubleshooting Wi-Fi networks and connections
- Wi-Fi: Unable to connect to an 802.11n Wi-Fi network
- iOS: Recommended settings for Wi-Fi routers and access points
- Restore from backup. See:
iOS: How to back up
- Restore to factory settings/new iOS device.
If still problem and it does not connect to any networks make an appointment at the Genius Bar of an Apple store since it appears you have a hardware problem.
Apple Retail Store - Genius Bar

I cannot connect to the internt through my home router allthough i am putting in the correct secuirity password located on the bottom of my router-what should i do????

i cannot connect to the internet through my home router allthough i have put in the correct password from my internt router into my ipod touch-what should i do????????????

- Try resetting your iPod:
Reset iPod touch: Press and hold the On/Off Sleep/Wake button and the Home
button at the same time for at least ten seconds, until the Apple logo appears.
- Power off and then back on your router
- Reset network settings: Settings>General>Reset>Reset Network Settings
- The troubleshooting here:
iPhone and iPod touch: Troubleshooting Wi-Fi networks and connections

Questions: cannot connect via wireless laptop (router WR...

Questions:
cannot connect via wireless laptop (router WRK54G)
cannot secure my network using WEP

from the wired computer , access the router using http://192.168.1.1 . the default password is admin
on the router ui , click on the "wireless" tab , change the ssid - any non-linksys name , channel - 11 , ssid broadcast - enabled
go to the "wireless security" subtab .. change the security mode to WEP - 64 bits , default transmit key - 1 , enter a 10 digit hexadecimal number in the WEP key 1 field , passphrase - empty
under the "advanced wireless settings" , change the beacon interval - 50 , Fragmentation threshold - 2304 , RTS threshold - 2307

ODI Client cannot connect the datebase after the datebase IP changed

ODI Client cannot connect the datebase after the datebase IP changed.
1,the datebase on mac A,the mac changed ip
2,on the client, tnsping db is ok.
3,use pl/sql ,can connect on the db
4,with odi,changed the repostry URL to the new db IP,throw the exception below
java.sql.SQLException: Io Exception: The Network Adapter could not establish the connection
     at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:125)
     at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:162)
     at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:274)
     at oracle.jdbc.driver.T4CConnection.logon(T4CConnection.java:328)
     at oracle.jdbc.driver.PhysicalConnection.<init>(PhysicalConnection.java:361)
     at oracle.jdbc.driver.T4CConnection.<init>(T4CConnection.java:151)
     at oracle.jdbc.driver.T4CDriverExtension.getConnection(T4CDriverExtension.java:32)
     at oracle.jdbc.driver.OracleDriver.connect(OracleDriver.java:595)
     at com.sunopsis.sql.SnpsConnection.u(SnpsConnection.java)
     at com.sunopsis.sql.SnpsConnection.c(SnpsConnection.java)
     at com.sunopsis.sql.h.run(h.java)
Is anything we need to config after change db machine IP?

yeah,I got it.Everything is ok now.
After change IP,we must open TopologyManager:change the JDBC connection of workrepository which must chose in Designer.
when we open the Designer ,it will connect to db.then coonect to workrepository with original IP.So,we must rechange workrepository's JDBC first!

My laptop's internal speakers have stopped working since i connected my wireless beats through bluetooth

My laptop's internal speakers have stopped working since i connected my wireless beats through bluetooth. It's as if it no longer recognises any other audio output, even when i have disconnected the headphones

System Prefernces > Sound > Output
Internal Speakers selected?
"Mute" enabled? Disable it
Reset PRAM. http://support.apple.com/kb/PH4405
If this does not help, try resetting SMC.
Reset SMC. http://support.apple.com/kb/HT3964
Choose the method for:
"Resetting SMC on portables with a battery you should not remove on your own".
Best.

New-Pssession client cannot connect to the destination specified

I've used the following cmdlets to connect powershell to our tenant for months and now I cannot open a possession with the same commands.
I've searched on some of the error text show below without any great progress. We have a pair of Hybrid servers and we get the same result on either.
Any suggestions are appreciated.
Bruce
Import-module msonline
$O365Cred = Get-Credential
$O365Session = New-PSSession –ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell -Credential $O365Cred -Authentication Basic -AllowRedirection
Import-PSSession $O365Session
Connect-MsolService –Credential $O365Cred
[email protected]
working password at the MicrosoftOnline Portal
$O365Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell -Credential $O365Cred -Authentication Basic –AllowRedirection
WARNING: Your connection has been redirected to the following URI:
https://pod51038psh.outlook.com/powershell-liveid?PSVersion=4.0
New-PSSession : [pod51038psh.outlook.com] Connecting to remote server pod51038psh.outlook.com failed with the following error message : The client cannot connect to the destination specified
in the request. Verify that the service on the destination is running and is accepting requests. Consult the logs and documentation for the WS-Management service running on the destination, most commonly IIS or WinRM. If the destination is the WinRM service,
run the following command on the destination to analyze and configure the WinRM service: "winrm quickconfig". For more information, see the about_Remote_Troubleshooting Help topic.
+ $O365Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUr ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo          : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [New-PSSession], PSRemotingTransportException + FullyQualifiedErrorId : CannotConnect,PSSessionOpenFailed
Import-PSSession $O365Session
Import-PSSession : Cannot validate argument on parameter 'Session'. The argument is null. Provide a valid value for the argument, and then try running the command again.
At line:1 char:18
+ Import-PSSession $O365Session
+
~~~~~~~~~~~~
+ CategoryInfo
: InvalidData: (:) [Import-PSSession], ParameterBindingValidationException
+ FullyQualifiedErrorId : ParameterArgumentValidationError,Microsoft.PowerShell.Commands.ImportPSSessionCommand
Connect-MsolService -Credential $O365Cred

You are using the outdated URI string, which is known to cause problems. Should be: https://outlook.office365.com/powershell-liveid/
Just follow the instructions in the TechNet article:
https://technet.microsoft.com/en-us/library/jj984289(v=exchg.150).aspx

I have done the step 1 to 3,but still cannot connect the wireless network?

i have done the step 1 to 3,but still cannot connect the wireless network?

Step 1 to 3 of what? Can you elaborate on the issue?

Windows Client cannot connect to wireless LAN through EAP-TLS

Similar Messages

Maybe you are looking for