Cisco :: Getting Authentication Failed AP1131
Aug 31, 2011
I got a report from a branch office which is getting trouble to authenticate users to the WLAN this is a stand alone AP which has a configuration script that we use for all our branch offices but in this case is not working. It seems to be an issue with RADIUS but if it was the case the whole company would be experiencing problems since it is a central RADIUS server.
Here is a log from the AP By the way I modified the radius server timeout to 90 sec
APIMMEXP01#
Sep 1 17:01:47.240: %DOT11-7-AUTH_FAILED: Station 0021.5c7f.1739 Authentication
failed
Sep 1 17:01:53.503: %DOT11-7-AUTH_FAILED: Station 0026.c64b.c3d6 Authentication
failed
Sep 1 17:01:58.739: %DOT11-7-AUTH_FAILED: Station 001e.65cf.9ca8 Authentication
failed
[code]....
View 1 Replies
ADVERTISEMENT
May 19, 2011
I have a guest network and lately I have been experiencing troubles with some users.The symptom, as I create a username and password and type'em in a laptop the authentication fields in the web authentication page don't keep the data as if I didn't type anything
WLC 4402-50
Version 7.0.98.210
View 7 Replies
View Related
Dec 20, 2012
I'm trying to connect to ISP with PPPoE method using Cisco 861 equip. On the other side Cisco 3845 BRAS.Session fails at authentication phase. Authentication protocol chosen by routers is ms-chap-v2. Chap supported also. [code]
View 2 Replies
View Related
Mar 12, 2013
I have already set up a lab comprising of 1x2950-24 switch, 2x3750-24T in stack mode and 2x MS Domain Controller with AD 2008 Servers and NPS enabled (Domain level 2008). I use NPS as a Radius Server. I am trying to test the 802.1x framework in two scenarios.
1. I use as client a domain laptop with Windows XP SP3 with the embedded 802.1x MS supplicant. As authenticator use the 2950 switch and as authentication servers I use the two NPS integrated in MS DCs. Everything is working fine as I expected with basic configuration guidelines from Cisco & Microsoft.
2. I use as client a domain laptop with Windows XP SP3 with the embedded 802.1x MS supplicant (the same as before). As authenticator I use the 3750 Stack switch and as authentication servers I use the two NPS integrated in MS DCs (the same as before). I have configured the supplicant for both machine or user authentication in both scenarios. However the client never pass the authentication in the second one. I disconnect and connect the same supplicant in the 2950 switch and the authentication is completed successfully. Getting back to the 3750 stack the authentication failed and the laptop gains network access in the configured Auth-Failed Vlan. I have tried several configuration changes without success. I cannot understand why does this happen. I have made some debugs and I am sending them a long with a partial basic configuration of 3750 stack switch.
View 7 Replies
View Related
May 27, 2013
We have a C4948E switch which is generating the following logs every ten minutes:
May 28 12:44:13 UTC: %SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: Username: -40.0] [Source: 0.0.0.0] [localport: 0] [Reason: Login Authentication Failed] at 12:44:13 UTC Tue May 28 2013
May 28 12:44:59 UTC: %SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: ] [Source: 0.0.0.0] [localport: 0] [Reason: Login Authentication Failed] at 12:44:59 UTC Tue May 28 2013
We have a terminal server (C2901) set up with reverse ssh to all the devices including the above C4948E. Can this be the one to initiate the logins?
The IOS of both devices is as below:
C4948E - cat4500e-entservicesk9-mz.151-1.SG.bin
C2901 - c2900-universalk9-mz.SPA.152-3.T.bin
I am unable to identify what is triggering the above logs to be created.
View 2 Replies
View Related
Nov 24, 2012
I've just purchased a second hand laptop for my Hubby and trying to gain access to the internet through my SKY wifi router. It keeps saying its within range but this error of Wireless authentication failed because of timeout!
View 5 Replies
View Related
May 3, 2011
picking up on old thread, but same issue: authentification failed because of a timeout
*previously*! i was able to auto connect fine on this home network via wifi.the line and box recently changed, same provider, and now i'm the only one who can't connect.the SSID changed, but i've done all the usual routines, deleting and re-adding manually, etc. but nothing so far...
i *don't* think this is a case of changing gear, but i don't know enough about internet/connection/configuration to fix this. yet!
NB: when i perform the reset on the box as instructed, using the provider's setup software - i am not the account holder - for the wifi, it shows connected very briefly in the animation, and then goes off again; this is the authentification/verification failing, i conclude.
so: with what is said above, i'm wondering if my antivir is to blame, or the windows firewall settings.or malwarebytes.i'm going to study the info i've got off my system, and looking at the router via the http routine, offline, as i now have to get off the internet(...); i'll get the infos together so i can post something useful.
View 7 Replies
View Related
Nov 5, 2012
I realize there are a few other threads on this subject. Ive followed some of the advice and I still can not connect. I am currently connected via Ethernet cable but I cannot connect to wireless. I have removed all the stored networks. My event log states: [code]....
View 5 Replies
View Related
Sep 3, 2012
I'm trying to set up my DIR-835. I keep getting "Authentication failed".
View 4 Replies
View Related
Jul 7, 2012
When I try to log-in to my D-Link DIR-835 Router using IE9, I get an 'Authentication Failed' error. FireFox & Chrome work just fine. what I need to change or fix in IE9 so it will also log-in to my router?
View 13 Replies
View Related
Jul 2, 2012
We have ASA 5520 as SSL VPN concentrator so users can access internal web from outside. Our internal web also has several internet URL. What we want is when user click internet URL in our internal web, ASA forward those request to internal proxy server. I already config proxy using port 8080 and username "companyuser" and password, but always have authentication failed on ssl vpn browser. We uses forefront TMG as proxy. Username and password have right to access Internet.
View 2 Replies
View Related
Jun 27, 2012
we have a ACS server V4 installed on W2003 server ,when we make a telnet to an equipement on the wan the authentication pass on the first connexion ,but when we telent to a switch on the lan the first connxion fails and we need to retry to login .when i check the field attempt log on the ACS i dont find the field attempt.i find this issue in ALL switch on the LAN ,from the switch i can ping the the ACS server .this problem appear frequently?
View 1 Replies
View Related
Jun 5, 2011
I have a little problem with my ASA 5510 version 8.2(1) with a IAS server RADIUS for strong authentication.
I have configured a double authentication for my client to access SSL portal:
First authentication: AD serverSecondary authentication: IAS for my token SAFENET ALADDIN The server IAS is declared on a W2K3 and it's standard.
The problem I have is that after more than 24hours of unutilization, when i try to log in, my authentication failed the first time and then the other tries work fine as long as I use it in a period of 24hours.
I first thought about the timeout so i tried to put a "timeout" of 15seconds for AD and IAS servers and a "retry intervall" of 3 seconds, it doesn't change much.
Is there a tool/option in the ASA to check connectivity with the radius every 1h for example.
View 4 Replies
View Related
Jan 8, 2013
Having an issue where a user will plug a PC into a switch. The switch does a MAB authenticaiton and the MAC is not located in the ACS server. It logs the failed attempt, but when the PC is removed from the switch, the failed attempts keep getting logged until the port is bounced. Any way to keep the attemps from happening after the PC is removed? If not, any way to make it stop without bouncing the port?
running ACS version 5.2.0.26
switch port config:
interface GigabitEthernet1/0/2
sw access vlan 2 sw mode access
authentication control-direction in
authenticaion host-mode multi-auth
authentication port-control auto
mab
spanning-tree portfast
View 2 Replies
View Related
Jan 29, 2012
I have configured Radius authentication on Windows 2008 server (NPS) The following configuration is working perfectly on Cisco Switch 3560. [code]But, the same configuration is not working on Cisco Catlyst Switch 6509 (C3560-IPBASEK9-M), Version 12.2(46)SE, RELEASE SOFTWARE (fc2)/
View 2 Replies
View Related
Jul 22, 2012
I have have a XPS L502X. I decided to make a clean installation based on Windows 7 Ultimate.My problem is when I instal the driver for the "Dell Wireless HSPA 5540" it fails with then warning:
"Authentication failed. The .... driver cannot be installed on this computer...."
How to install driver for this ?
View 13 Replies
View Related
Mar 15, 2010
I've been configured my device 6506-9 with TACACS+ server authentication: [code]
but when I tried to access the device only uses authentication local but not uses TACACs (with username/password defined) it can be an error in configuration? in the other devices of network this works properly, only it's wrong in Cat6506-E
View 6 Replies
View Related
Feb 13, 2013
I am trying to configure a Cisco 1042 autonomous AP and have ran into some problems. I require 2 broadcasted SSIDs that use WPA v2. When I only have 1 of the SSIDs enabled, I can authenticate with no problems. When I have both SSIDs enabled, I can connect to one of the networks, but not the other. I have verified the PSK multiple times, but the logs still show dot11-7-auth_failed. If I remove the working SSID and make no changes to the SSID for which authentication previously fails, everything works fine. Upon adding the other SSID back, I run into the same authentication issue.
View 3 Replies
View Related
May 29, 2011
My 7 inch netbook authenticates to a wifi network with short network key but cannot authenticate to one with a very long key. I am using Win CE 6. The encryption method is AES, the authentication method is WPA-PSK. The short password key is 9 digits consisting only of numbers and letters. The long key consists of 35 digits, with spaces, capital letters, numbers and an exclamation mark.
View 2 Replies
View Related
Oct 31, 2010
I replaced an ACS certificate that had been installed as follows:
1. Generate CSR file and private key file, then send CSR to GeoTrust (Key length: 2048 and Digest to sign with SHA1)
2. GeoTrust send me a certificate. Issued by "GeoTrust SSL CA".
3. Install the certificate on the ACS. Restart ACS service.
4. ACS Certification authority setup. Issued by "VeriSign Class 2 Public Primary Certification Authority - G3"
5. Edit certificate trust list and select "VeriSign Class 2 Public Primary Certification Authority - G3" as trusted.
6. Enable EAP-TLS, then restarted the ACS service. The problem is when i try to enable EAP i get the error msg:Failed to initialize PEAP or EAP-TLS authentication protocol because CA certificate is not installed. Install the CA certificate using "ACS Certification Authority Setup" page.I searched on cisco and it said to disable the CSA, but in fact there is no CSA installed on this server.
OS: Win 2003 sp2Cisco ACS: Release 4.2(0) Build 124
View 4 Replies
View Related
Jul 6, 2012
While the home PC and my brother's laptop can connect to the wireless internet, my sister's laptop has never been able to. The antivirus software installed is Avast! and there is also a Windows Defender. It can connect no problem using an ethernet cable.
View 3 Replies
View Related
Jun 15, 2011
I use IE7.0
192.168.1.1
user name : admin
password : admin
Error is saying "401 Authorization required" Browser not authentication-capable or authentication failed.
View 9 Replies
View Related
Jul 12, 2011
I have a problem with an AP1131-AG access point.When I update the CLI it does not update on the GUI and vice versa. The access point is connected to a 3560 switch and there is no WLAN controller involved.
View 8 Replies
View Related
May 11, 2012
We have a site with 4 access point, where two are are showing up in CNA, version 5.7(6), as "Unsupported device" the two others are working fine.
The unsupported devices are:
AIR-AP1131G-E-K9
Cisco IOS Software, C1130 Software (C1130-K9W7-M), Version 12.4(10b)JDA3, RELEASE SOFTWARE (fc1)
The supported devices are:
AIR-AP1131AG-E-K9
Cisco IOS Software, C1130 Software (C1130-K9W7-M), Version 12.3(8)JEA, RELEASE SOFTWARE (fc2)
getting CNA recognize these access points?
View 7 Replies
View Related
Feb 20, 2013
I have a brand new lightweight AP that keeps rebooting every 2-3 minutes.
View 1 Replies
View Related
Jun 15, 2011
IPods and IPads to connect to stand alone AP1131? My scenario is as follows:
There is a section of a campus that is covered by 14 stand alone AP1131 were I experience the problem. The security parameters are: 802.1x, wpa enterprise, tkip
The other section is under WLC also AP1131 but in this case in WLANs/Scurity/Leyer 2 I checked boxes:
WPA Policy, WPA Encryption TKIP
WPA2 Policy, WPA2 Encryption AES
Auth Key Mgmt 802.1x
Wonder if the fact that I chose WPA2, AES makes a difference with stand alone mode? Anyways I tried configuring AES in stand alone APs and it didn't make a difference since I could not connect either.
View 9 Replies
View Related
Jan 19, 2012
I am having Cisco 3845 series router with c3900-universalk9-mz.SPA.151-4.M2.bin IOS . I want to install new Licence on it for DATA. When i am trying to install licence on it i am facing the error "% Error: License installation failed with error: XML parsing failed".
View 4 Replies
View Related
Apr 11, 2012
UTMajoracquisition failed to run in LMS 4.0.1..
Troubleshooting done
1) Started the UTMajorAcuisition process manually using pdexec: It again fails to run
2) Renamed to ut.properties.orig to ut.properties and tried to restart the process .. IT again fails to run.
View 0 Replies
View Related
Mar 16, 2013
I have a cisco 887 router and I have tested on two different DSL line. The first line it worked fine with while the other noe is not. both line on same exchange and establishing the ppp session with same BRAS. The debug seems that there Establishing phase failed, but my question here is how our BRAS will faied the establishing from on line while from other landline is working fine.
=============================================================
CISCO ROUTER Configuration
=======================
interface ATM0/1/0no ip addressno ip mroute-cacheno atm ilmi-keepalivedsl operating-mode autopvc 8/35encapsulation aal5mux ppp dialerdialer pool-member !interface Dialer1ip address negotiatedip nat outsideip virtual-reassemblyencapsulation pppdialer pool 1ppp chap hostname companyxppp chap password abcda123ppp pap sent-username companyx password abcda123
===========================================
when I did ppp negotiation debug the below messages i got:
============================================
Mar 16 13:19:18.103: Vi2 PPP: Phase is DOWN
Mar 16 13:19:19.103: PPP: Alloc Context [85DEC77C]
Mar 16 13:19:19.103: ppp28 PPP: Phase is ESTABLISHING
Mar 16 13:19:19.103: Vi2 PPP: Using dialer call direction
Mar 16 13:19:19.103: Vi2 PPP: Treating connection as a callout
Mar 16 13:19:19.103: Vi2 PPP: Session handle[700001C] Session id[28]
[code]....
View 4 Replies
View Related
Aug 6, 2012
I can't inventory a 4507R + E / SUP7E Version 15.1.1 SG with the last version of LMS 4.2.1. Next, the extract of IC_Server.log.
[code]....
View 6 Replies
View Related
Sep 25, 2011
I have installed Ciscoworks LMS 3.2 0n windows server 2003 enterprise edition. I have issue with Campus Manager while accessing any thing in Campus Manager it is giving following error.
"Error in loading properties from the server" "Can not contact to ANI server" Status of ANIServer process is Failed to run
I tried to reinitialize Campus Manager Database still it is showing same issue.
Installed Campus manager version 5.2.1 check attached file for ANI log
View 5 Replies
View Related
Aug 31, 2012
[code]....
Red error what is the reason? Only appears in the window 2003 server.
View 5 Replies
View Related
Sep 18, 2011
I have issue with the ANI Server process, which fails to start. The LMS version is 3.2. It's recently installed, with just one device added to the database so far. I've read some similar cases in the forum, but I'm starting a new thread since it could be a different issue which causes the problem.Please, find attached ani.log, ANIServer.log, the output of the pdshow command and ANIServer.properties files. I doubt that the last one might be corrupted for some reason.
View 4 Replies
View Related
