WLC 2106 and Microsoft IAS and Windows XP Supplicant

For one of my SSID's I am using 802.1x with WPA2/AES. I have configured IAS on windows server 2003 and from the server message logs I am able to authenticate a user. I never complete the authentication through the eyes of the WLC though. In using debug commands on the WLC I can see an error that I can not solve.
Wed Apr 7 03:09:40 2010: 00:23:4e:70:a9:97 Received EAPOL-Key from mobile 00:23:4e:70:a9:97
Wed Apr 7 03:09:40 2010: 00:23:4e:70:a9:97 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:23:4e:70:a9:97
Wed Apr 7 03:09:40 2010: 00:23:4e:70:a9:97 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 00:23:4e:70:a9:97
Wed Apr 7 03:09:40 2010: 00:23:4e:70:a9:97 Stopping retransmission timer for mobile 00:23:4e:70:a9:97
I suspect my issues revolves around the message: Ignoring invalid EAPOL version (1) in EAPOL-key message
Anyone have any idea or insight on additional debug steps that can be taken?
Regards,
Justin

ERD Commander (ERD 5.0) is the version that supports Windows XP. The next version is DaRT Supported Vista and later

Similar Messages

I downloaded updates for "Office for Mac" a few days ago and it won't finish. It keeps saying I have to close Safari, Microsoft Word and Microsoft Powerpoint and I don't have any of these open. Can anybody help me?

I downloaded updates for "Office for Mac" a few days ago and it won't finish. It keeps saying I have to close Safari, Microsoft Word and Microsoft Powerpoint and I don't have any of these open. Can anybody help me?

Hi Anne,
Did you do this through one of the Office app updates, or did you download it directly from the Microsoft website?
Whichever way you tried it, I would try it the opposite way this time, although simply repeating what you did before may also work.

Windows Server 2003 and Microsoft Assessment and Planning tool (MAP)

Preparing for the end of support for Windows Server 2003 (4/2015) and the need to migrate from Windows Server 2003, I have been directed on several sites run the Microsoft Assessment
and Planning tool (MAP) to aid in identifying any software and hardware issues. Apparently this tool has been recently updated (7/2014) and cannot be installed on a Windows Server 2003 system. As it requires .NET Framework 4.5 to run. Unfortunately,
.NET Framework 4.5 cannot be installed on a Windows Server 2003 as it only supports .NET 4.0.x versions. All older version links to the MAP tool have been updated to link directly to version 9.1. Where can I get a MAP tool version that will run
on Windows Server 2003?

Hi,
Yes, i would agree with arnavsharma
After the environment scan has been completed in Windows Server 2008r2 or another supported OS, MAP looks at computers running earlier versions of Windows.
http://technet.microsoft.com/en-us/magazine/ee677580.aspx
Meanwhile, for the MAP related issue, you'd better ask in MAP forums:
https://social.technet.microsoft.com/Forums/en-US/home?forum=map
Regards.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Wampserver, and Microsoft Express in Windows 7 Bootcamp

I have system 10.6.7. I plan on running PC products like Wampserver, and Microsoft Express. Has anyone had no problem? issues? in running these products in Windows 7 on bootcamp?

I'm running Wampserver and having zero problems. I am also running the full version of Visual Studio, not the Express version, and am not having any problems with that either. Windows 7 SP1, Macbook Pro, 8GB RAM, 500GB HD.

HT2506 how do I make preview the default reader when I open a file? I just installed Icloud and Microsoft word and excel are still the default.

I just installed icloud. Afterwards I am having trouble opening files becasue Microsoft excel and word aren't working now. How do I change the default to preview to open files?

Do I have to do this for each file?
When someone sends me a file created in Excel, can my computer default to opening it wit Numbers?
Thanks, your fix worked for the individual file.

802.1x and MS IAS and Nortel IP phone

hi,
i have setup 802.1x MS IAS. All seems to work fine when i am using a plain pc connection to switch but the moment IP phone is involved i start facing issues.
I am using cisco 3750 switch with version 12.2(25)SEB4
dhcp server is on windows which is on a different network i.e. 10.50.1.9
dhcp relay agent is defined on firewall subinterces
All works when phone is not involved. BTW i am using Nortel IP phone
when the phone is plugged and cable is throug the phone, i provide the user name and credentials and also when i say show vlan on switch i can see i am aprt of corrent vlan but i do not get an ip address.
This is the error i get on switch when is said debug radius:
pls find two attachments of debug dot1x events and radius.
pls help
Regards
AI

Hi Adil,
I'm testing with a Catalyst 3560 running IOS version 12.2(44)SE2.
I have a Nortel-LG IP phone which does not have 802.1x supplicant.
I tried configuring MDA on the switchport and use MAB to authenticate the phone.
My questions:
1. In the ACS, I created a group for the IP phone and specify "device-traffic-class=voice" as the cisco-av-pair. Is this what I should be doing for a non-Cisco phone?
2. I know the phone's MAC address is 00-40-5A-17-C6-30. I created a user 00405a17c630 (password is also 00405a17c630) and assign it to the IP phone group I created above. Is this correct?
My testing wasn't successful. I got the following output:
Switch#sh dot1x int f0/48 de
Dot1x Info for FastEthernet0/48
PAE = AUTHENTICATOR
PortControl = AUTO
ControlDirection = Both
HostMode = MULTI_DOMAIN
Violation Mode = PROTECT
ReAuthentication = Disabled
QuietPeriod = 60
ServerTimeout = 30
SuppTimeout = 30
ReAuthPeriod = 3600 (Locally configured)
ReAuthMax = 2
MaxReq = 2
TxPeriod = 30
RateLimitPeriod = 0
Mac-Auth-Bypass = Enabled
Inactivity Timeout = None
Guest-Vlan = 999
Dot1x Authenticator Client List
Domain = UNKNOWN
Supplicant = 0040.5a17.c630
Auth SM State = AUTHENTICATING
Auth BEND SM State = REQUEST
Port Status = UNAUTHORIZED
Authentication Method = Dot1x
Domain = UNKNOWN
Port Status = UNAUTHORIZED
My switch config is as follows:
aaa new-model
aaa authentication dot1x default group radius
dot1x system-auth-control
radius-server host 1.1.1.1 auth-port 1645 acct-port 1646 key cisco123
radius-server source-ports 1645-1646
radius-server vsa send authentication
interface FastEthernet0/48
description *** 802.1x Test Port ***
switchport access vlan 70
switchport mode access
switchport voice vlan 71
no snmp trap link-status
dot1x mac-auth-bypass
dot1x pae authenticator
dot1x port-control auto
dot1x host-mode multi-domain
dot1x violation-mode protect
dot1x guest-vlan 999
spanning-tree portfast
In the ACS' Failed Attempts logs, I saw entries for:
User-Name = 00405a17c630
Group-Name = IP_Phone_Test_Group
Caller-ID = 00-40-5A-17-C6-30
Authen-Failure-Code = Internal error
ACS version is 4.1.
what am I missing? Please advise.
Thank you.
B.Rgds,
Lim TS

Downloaded Security Update and Microsoft Word and iPhoto don't work

I recently downloaded the newest Security Update for my Mac, and now Microsoft Word won't launch, giving me the error message:
The application "Word" could not be launched because of a shared library error: "2<Microsoft Word><CarbonLib><CFMPriv_CarbonSound>"
and photos won't appear in iPhoto. That is, iPhoto launches, but when I click on a picture to view it, the loading rotating circle appears in the middle and the picture doesn't come up. Can anyone help? Thank you!

I've got the teacher's version of MS Office and it wasn't affected by the security update. You might have to reinstall MS to get the supporting files back.
You might ask over in the Tiger forum. Someone may have first hand experience with that.

Something happened and your installation of Windows 8.1 couldn't be completed

I have a brand new Acer with Win 8 installed. I've removed McAfee. Other than that the machine is as delivered.
Trying to download 8.1 and install it from the store. It sits there for a couple of minutes then says:
Your Windows 8.1 installation couldn't be completed
Something happened and the installation of Windows 8.1 can't be completed.
Now apart from this being really annoying could anyone have come up with a less useful message?
I have tried it several times. I've run the compatibility util and it passes. I've tried the store without logging in, then tried the store with logging in.
I've tried it in Firefox, tried it in IE.
Same result every time.

OK, so I posted 2 days ago about this issue, and I resolved it yesterday. I essentially performed a "refresh" under Windows 8, which removed a lot of the updates and applications that could be potential issues.
I then had to go to the Sony website to re-install the latest drivers, SW and driver patches related to my Vaio Duo (I had already updated the firmware and Bios -- necessary to install Windows 8.1--). I then had to re-install all Windows 8 updates,
and magically, the Windows 8.1 update started to download when I clicked on it in the Windows Marketplace. I do not know what was the source of the problem, but the refresh definitely got rid of it. It is a long process however as a lot has to
be reinstalled to bring the refreshed system to its full functionality with the latest manufacturer and Microsoft updates for Windows 8.
I can't see how a non-technical user could perform all these steps to upgrade a recent tablet to Windows 8.1!
Good luck!
Olivier

Troubleshoot windows 7-64 and OL CS5 and CS3

I have problems with OL and Windows 7 Ultimate 64. I installed OL Cs5 and when I try to record a HDV signal, nothing happens and the program freezes. Prior to pressing the record button, the scopes and monitor show the camera signal as expected. When I feed a DV signal, the program records fine. When I install OL CS3 om the same computer, I can record the HDV signal, but the monitor does not show the HDV signal. The monitor is just black. My computer is a Dell xps M1350 with core 2 duo, 2.50 Ghz, 4 Gb ram. I have disabled all start-up and Microsoft services, and problem continues. Most recent updates for video card installed. Any idea how to troubleshoot this??

Hmm. Do I understand correctly that you see Vidblaster in the Field Monitor panel's tab, along with your HDV camera?
If so, then that's likely the cause of the problems in OL CS5. Basically, OnLocation should recognize only FireWire (IEEE 1394) devices. If any other devices are showing in that dropdown list, they are likely to interfere with OnLocation behaving correctly. Until now, we were aware only of webcams showing up among the list of devices. It sounds like you've discovered another case: Vidblaster.

Compress file / images in Microsoft word and powerpoint

On the older version of word and power point, compressing images was very easy: right clik, compress images, and done. I don't have this option on my 2008 version. I am finding it very frustrating to work with very large image files. I write a lot of reports with photos using word (maybe not the best sofware for that, but I am old school, if you have a better suggestion for a better sofware, please feel free to suggest...), same with powerpoint, a lot of photos. With word, I am currently editing the photos on photoshop first before using them on a word document, a real pain. On powerpoint, it is more complicated and my presentions are enormous. Would you have a suggestion on how to produce lower resolution / smaller file on both word and powerpoint, quick and easy solution if poss? Is the solution to upgrade to office 2011 or is it more money wasted to Microsoft?
Many thanks for your help
Yannick

Dear Varjak,
Many thanks for your reply. I agree it is a Microsoft product but used on a mac.... As many of us (Mac' users) are still using Office (sometime relunctantly but no option), I am hoping for a response from a Mac user' point of view. I have spotted differences between Mac office and Microsoft office and would therefore appreciate answers from a Mac user.
Thanks in advance,
Yannick

JPEG color difference between Adobe Raw and Microsoft Image Viewer

When I calibrate my monitor or use the monitors ICC file which came with the Monitor, there is a color difference between Camera Raw image and the JPEG I save from Camera Raw, displayed in Microsoft Image Viewer.
However, if I make my ICC file for the system to be SRGB Color Space Profile, and go through the same conversion, the JPEG image created and viewed in Microsoft Image viewer is identical to the one seen in Camera Raw.
It appears therefore, that the operating system only uses SRGB Color Space profile for Microsoft Imaging Viewer?
Most people I give photos to, do in fact look at them in microsoft viewer.
How can I use the ICC profile for my calibrated monitor and end up with the same results in terms of color with Camera Raw and Microsoft image and Fax Viewer.

All profiles are not created equal. There's a basic version issue (ICC v4 vs. earlier), and profiles are complex things containing many fields. Lots of things can go wrong in the creation of a proper color transform from the combination of the document and device profiles, and it kind of depends on what color management code the software uses whether it can be done properly. Adobe has their own - the Adobe Color Engine - and there are others such as LittleCMS or even Microsoft's system-provided ICM that application designers may be using in their code.
It may be that the profile your calibrator/profiler has produced for your monitor (or other device) isn't compatible with every application. It happens.
This isn't intended to provide a solution or workaround, just to help explain things a bit.
-Noel

Lion... I bought Lion and i am having problems, because i had Adobe Creative Suite CS4 and Microsoft Office

I bought Lion and i am having problems, because i had Adobe Creative Suite CS4
and Microsoft Office and after i installed Lion those programs are working no more...
I am trying to call Apple by phone, but no body can help me there..
Could somebody tell me how can i resolve this issue?
Thanks!!

Thank you leroydouglas and all the people who are trying to help with it!
This is exactly that i am trying to do, but the thing is the next:
When i try to open any of the adobe apps, the next sign come up:
And i don't understand wy it says that, because i have an internet connection
working perfectly. When i press (Network Diagnostics) everything about my
internet connection is running well and when i try to open the photoshop
app again the same sign come up again!!
Also, when i try to do the adobe update trough ( Software Update ) The system
tell me that there is no software to be updated.
God!!! I am desespered with this!!!
Do you know if there is another easy way to fix this? I will appreciate a lot leroydouglas!
Thank you!!!
DAVID ESTEPHAN

Using Cisco WCS with Microsoft IAS

Hi.
I have two 5508 and WCS 7.0.172. I want to user Active Directory users credintals to login on ther WCS. Have a configurated NPS role on server with windows 2008 r2.
I have read this http://zmq503o1.wordpress.com/2008/01/06/using-cisco-wcs-with-microsoft-ias/ and done the same.
I dont't agree with "on the "Encryption" tab and clear all the checkboxes except "No encryption" - wants an encryption connection but this didn't work till in user's properites in AD permit "Reversible encryption". This is not what that I want. Would I need to generate ssl-cert for the wcs as wroted this?http://www.cisco.com/en/US/docs/wireless/wcs/7.0MR1/configuration/guide/hard.html#wp1042471
or doing smth else? thx

Camera is only supported for use with CUVA. Any other application attempting to utilize the camera is not tested and is not supported.

AP1522 with WLC 2106

Hi.
I want to know how to join the AP1522 to a WLC 2106.
The Controller and the AP are in the network, but the AP can't be joined to the controller. What is missing?

First of all make sure that the APs can communicate and get IP address from DHCP server (it might be an external DHCP or internal pool running on WLC).
Are your APs on the same subnet as controller?

EAP-TLS with WLC 5508, Microsoft NPS and custom EKU OID´s

We are trying to implement EAP-TLS with client certificates that have a custom EKU OID to distinguish the WLAN clients. The Microsoft Press Book
Windows Server 2008 PKI and Certificate Security gives an example on how to configure a policy in NPS that matches specific EKU OID´s. At the moment we have two policies that have an allowed-certificate-oid configured that matches the OID´s in our certificates, but our setup is not working as expected. Authentications will only be successful, if the client authenticates with the certificate that is matched by the first policy rule.
For example:
Policy 1: allowed-certificate-OID --> corporate
Policy 2: allowed-certificate-OID --> private
Client authenticates with EKU corporate --> success
Client authenticates with EKU private --> reject
My expectation was, that if Policy 1 will not match the NPS goes over to Policy 2 and tries to authenticate the client.
Has anyone a simmilar setup or can help to figure out what is going wrong?
We have a WLC 5508 with Software Version 7.4.100.0 and a NPS on a Windows Server 2008 R2
regards
Fabian

The policy rejects and the NPS goes to the next policy, only if the user does not belong to the configured group.
This means I need to have one AD group per application policy, but that will not solve my problem. A user could belong to more than one group, depending on how many devices he/she has. It will work with one group only for each user, because the first policy that matches a AD group, the user belongs to, could have a OID that is not in the certificate. This would cause a recejct with reason code 73:
The purposes that are configured in the Application Policies extensions, also called Enhanced Key Usage (EKU) extensions, section of the user or computer certificate are not valid or are missing. The user or computer certificate must be configured with the Client Authentication purpose in Application Policies extensions. The object identifier for Client Authentication is 1.3.6.1.5.5.7.3.2.
The certificate does include this OID but not the custom EKU.

WLC 2106 and Microsoft IAS and Windows XP Supplicant

Similar Messages

Maybe you are looking for