Response from the RADIUS server

Hello

I added a controller to the ACS, as an AAA client then set the ACS in the WLC, but I can't be able to authenticate the users of ACS only local users on the WLC how can I get on it? help please.

The 'bad request to NAS' usually indicates incorrect shared secret parameters. Please

check or reconfigure the secret shared on the controller and the ACS for this SIN, do not copy and paste.

Tags: Cisco Security

Similar Questions

  • NB200-h-13 - no response from the DNS server and gateway

    Hello

    I have netbook NB200-h-13 with XP SP3. Its impossible to connect to wireless internet and the error messages are
    HE DIDN'T THERE WAS NO RESPONSE FROM THE DNS SERVER
    HE DIDN'T THERE WAS NO RESPONSE FROM THE DEFAULT GATEWAY

    The connection with the ethernet cable is ok with the adpter reltek that also adpter atheros ar9285 WiFi is activation, working properly and the modem router signal is strong.

    Hi abk55,

    What program you receive this error message?
    Have you tried another browser, for example Firefox or Opera?

    I guess it has something to do with your wireless network card or WLAN parameters if the LAN cable is working properly. So you should try to update the WLAN driver on the Toshiba site.
    Also, try to disable the filtering of MAC addresses and use another encryption.

  • Incorrect response from the SOCKS server deploy when debug_token.bar

    I created the debug_token.bar

    and try to deploy it to the device. (Device Manager blackberry can recognize the device)

    I called

    / Motion Developer/SDK/Research\ In\ / BlackBerry\ 10 WebWorks\ SDK\ 1.0.4.5/dependencies/tools/bin/blackberry-deploy - installDebugToken /Users/myname/debug_token.bar 169.254.0.1 - password mydevicepassword

    After 2 or 3 minutes, it reported:

    Error: Unable to connect: incorrect response to the SOCKS server. Check the settings of IP address for the target. Try to ping the target.

    I ping peripheral ip to 169.254.0.1

    He responsed:

    Ping 169.254.0.1
    PING 169.254.0.1 (169.254.0.1): 56 data bytes
    64 bytes from 169.254.0.1: icmp_seq = 0 ttl = 255 time = 2.406 ms
    64 bytes from 169.254.0.1: icmp_seq = 1 ttl = 255 time = 0.881 ms
    64 bytes from 169.254.0.1: icmp_seq = 2 ttl = 255 time = 0.803 ms
    64 bytes from 169.254.0.1: icmp_seq = 3 ttl = 255 time = 0,869 ms
    64 bytes from 169.254.0.1: icmp_seq = 4 ttl = 255 time = ms 1,080
    64 bytes from 169.254.0.1: icmp_seq = 5 ttl = 255 time = 0,848 ms
    64 bytes from 169.254.0.1: icmp_seq = 6 ttl = 255 time = 0,823 ms
    64 bytes from 169.254.0.1: icmp_seq = 7 ttl = 255 time = 1,175 ms
    64 bytes from 169.254.0.1: icmp_seq = 8 ttl = 255 time = 0,893 ms
    64 bytes from 169.254.0.1: icmp_seq = 9 ttl = 255 time = 1,130 ms
    64 bytes from 169.254.0.1: icmp_seq = 10 ttl = 255 time = 0,860 ms
    64 bytes from 169.254.0.1: icmp_seq = 11 ttl = 255 time = 0,819 ms

    even though I checked ndk ide, the device has been connected

    He likes without any problem, but cannot deploy token

    Welcome to any comment

    Have you tried to deploy from the NDK since it is able to connect?  It could be using the connection, prevents your order manually run to connect.

  • Cisco 1812 no contact to the Radius Server

    Hi guys,.

    IM pretty new to cisco and plays with an 1812 products... I am trying set up an easy VPN server, with the support of ray and I can see that I did everything right, but there is a problem, because the router do not contact the RADIUS server and the RADIUS server has been tested ok.

    Anyone who can see what I'm missing? Worked with this problem for 3 days now.

    Here is my CONF.

    Current configuration: 9170 bytes

    !

    ! Last modification of the configuration to 13:44:49 UTC Tuesday, October 12, 2010

    !

    version 15.1

    horodateurs service debug datetime msec

    Log service timestamps datetime msec

    no password encryption service

    !

    router host name

    !

    boot-start-marker

    boot-end-marker

    !

    !

    no set record in buffered memory

    !

    AAA new-model

    !

    !

    AAA server radius sdm-vpn-server-group 1 group

    auth-port 1645 90.0.0.245 Server acct-port 1646

    !

    AAA authentication login default local

    AAA authentication login sdm_vpn_xauth_ml_1-passwd-expiry group sdm-vpn-server-group 1

    AAA authorization exec default local

    AAA authorization sdm_vpn_group_ml_1 LAN

    !

    !

    !

    !

    !

    AAA - the id of the joint session

    !

    Crypto pki token removal timeout default 0

    !

    Crypto pki trustpoint TP-self-signed-250973313

    enrollment selfsigned

    name of the object cn = IOS - Self - signed - certificate - 250973313

    revocation checking no

    !

    !

    TP-self-signed-250973313 crypto pki certificate chain

    certificate self-signed 01

    308201A 5 A0030201 02020101 3082023C 300 D 0609 2A 864886 F70D0101 04050030

    2 040355 04031325 494F532D 53656 C 66 2 AND 536967 6E65642D 43657274 30312E30

    69666963 32353039 37333331 33301E17 313031 30313230 39343333 0D 6174652D

    395A170D 2E302C06 1325494F 03540403 32303031 30313030 30303030 5A 303031

    532D 5365 6C662D53 69676E65 4365 72746966 69636174 652 3235 30393733 642D

    06092A 86 4886F70D 01010105 33313330 819F300D 00308189 02818100 0003818D

    BCF94FB0 77240E92 B703CE70 556D5D22 A57823E5 DD4CD4C4 12D639DE 5E97DB2D

    81FBB304 9FA677A6 CAD84F96 9734081B F8F8FAAE 000B02FB AEF7C7B1 73AFA44B

    7D27E112 8991F03B 3D4FD484 34E2EA9F BD426F73 48778F2A AD35AAD6 EC00805D

    249B 8702 D545AEEA 40670DFD 3E6BEC29 EE48A0C6 CB7694FD 722D1A62 3A499CC5

    02030100 01A 36630 03551 D 13 64300F06 0101FF04 05300301 01FF3011 0603551D

    11040A 30 08820652 6F757465 72301F06 23 04183016 801462CB F6BD12F6 03551D

    080C8A89 F9FBBDCE 9751528A FFFD301D 0603551D 0E041604 1462CBF6 BD12F608

    0C8A89F9 FBBDCE97 51528AFF FD300D06 092 HAS 8648 01040500 03818100 86F70D01

    ACA87977 CF 55225 6 9147E57E 8B5A8CA8 46348CAF 801D11C6 9DA57C69 14FA5076

    6844F0CC 4CBEB541 136A483A 69F7B7F0 E44474E8 14DC2E80 CC04F840 B 3531, 884

    F08A492D 8C3902C0 725EE93D AC83A29F 799AAE0F 5795484B B3D02F84 911DB135

    5 189766 C30DA111 6B9B4E46 E999DA5B 202 21B0B9D4 HAS 6900 07A93D8D 41C7FD21

    quit smoking

    dot11 syslog

    IP source-route

    !

    !

    !

    !

    !

    IP cef

    No ipv6 cef

    !

    Authenticated MultiLink bundle-name Panel

    !

    !

    !

    license udi pid CISCO1812/K9 sn FCZ10232108

    username admin privilege 15 secret 5 P677 $1$ $ Rggfdgt8MeD8letZDL08d.

    !

    !

    !

    type of class-card inspect correspondence sdm-nat-smtp-1

    game group-access 101

    smtp Protocol game

    type of class-card inspect entire game SDM_AH

    match the name of group-access SDM_AH

    type of class-card inspect all sdm-cls-insp-traffic game

    match Protocol cuseeme

    dns protocol game

    ftp protocol game

    h323 Protocol game

    https protocol game

    match icmp Protocol

    match the imap Protocol

    pop3 Protocol game

    netshow Protocol game

    Protocol shell game

    match Protocol realmedia

    match rtsp Protocol

    smtp Protocol game

    sql-net Protocol game

    streamworks Protocol game

    tftp Protocol game

    vdolive Protocol game

    tcp protocol match

    udp Protocol game

    inspect the class-map match sdm-insp-traffic type

    corresponds to the class-map sdm-cls-insp-traffic

    type of class-card inspect all SDM-voice-enabled game

    h323 Protocol game

    Skinny Protocol game

    sip protocol game

    type of class-card inspect entire game SDM_IP

    match the name of group-access SDM_IP

    type of class-card inspect entire game SDM_ESP

    match the name of group-access SDM_ESP

    type of class-card inspect entire game SDM_EASY_VPN_SERVER_TRAFFIC

    match Protocol isakmp

    match Protocol ipsec-msft

    corresponds to the SDM_AH class-map

    corresponds to the SDM_ESP class-map

    type of class-card inspect the correspondence SDM_EASY_VPN_SERVER_PT

    corresponds to the SDM_EASY_VPN_SERVER_TRAFFIC class-map

    type of class-card inspect all match sdm-cls-icmp-access

    match icmp Protocol

    tcp protocol match

    udp Protocol game

    type of class-card inspect correspondence sdm-invalid-src

    game group-access 100

    type of class-card inspect correspondence sdm-icmp-access

    corresponds to the class-map sdm-cls-icmp-access

    type of class-card inspect correspondence sdm-Protocol-http

    http protocol game

    !

    !

    type of policy-card inspect sdm-permits-icmpreply

    class type inspect sdm-icmp-access

    inspect

    class class by default

    Pass

    type of policy-card inspect sdm-pol-NATOutsideToInside-1

    class type inspect sdm-nat-smtp-1

    inspect

    class class by default

    drop

    type of policy-map inspect sdm - inspect

    class type inspect sdm-invalid-src

    Drop newspaper

    class type inspect sdm-insp-traffic

    inspect

    class type inspect sdm-Protocol-http

    inspect

    class type inspect SDM-voice-enabled

    inspect

    class class by default

    Pass

    type of policy-card inspect sdm-enabled

    class type inspect SDM_EASY_VPN_SERVER_PT

    Pass

    class class by default

    drop

    type of policy-card inspect sdm-license-ip

    class type inspect SDM_IP

    Pass

    class class by default

    Drop newspaper

    !

    security of the area outside the area

    safety zone-to-zone

    ezvpn-safe area of zone

    safety zone-pair sdm-zp-self-out source destination outside zone auto

    type of service-strategy inspect sdm-permits-icmpreply

    source of sdm-zp-out-auto security area outside zone destination auto pair

    type of service-strategy inspect sdm-enabled

    safety zone-pair sdm-zp-in-out source in the area of destination outside the area

    type of service-strategy inspect sdm - inspect

    sdm-zp-NATOutsideToInside-1 zone-pair security source outside the area of destination in the area

    type of service-strategy inspect sdm-pol-NATOutsideToInside-1

    in the destination box source sdm-zp-in-ezvpn1 ezvpn-pairs area security

    type of service-strategy inspect sdm-license-ip

    source of sdm-zp-out-ezpn1 of security area outside zone ezvpn-zone time pair of destination

    type of service-strategy inspect sdm-license-ip

    safety zone-pair sdm-zp-ezvpn-out1-source ezvpn-zone of destination outside the area

    type of service-strategy inspect sdm-license-ip

    safety zone-pair source sdm-zp-ezvpn-in1 ezvpn-area destination in the area

    type of service-strategy inspect sdm-license-ip

    !

    !

    crypto ISAKMP policy 1

    BA 3des

    preshared authentication

    Group 2

    !

    Configuration group Sindby crypto isakmp client

    key TheSommerOf03

    90.0.0.240 DNS 8.8.8.8

    win 90.0.0.240

    SBYNET field

    pool SDM_POOL_2

    Max-users 15

    netmask 255.255.255.0

    ISAKMP crypto sdm-ike-profile-1 profile

    identity Sindby group match

    client authentication list sdm_vpn_xauth_ml_1

    ISAKMP authorization list sdm_vpn_group_ml_1

    client configuration address respond

    virtual-model 1

    !

    !

    Crypto ipsec transform-set esp-SHA-ESP-3DES-3des esp-sha-hmac

    Crypto ipsec transform-set ESP-3DES-SHA1 esp-3des esp-sha-hmac

    Crypto ipsec transform-set esp-SHA2-ESP-3DES-3des esp-sha-hmac

    Crypto ipsec transform-set esp-3des SHA3-ESP-3DES esp-sha-hmac

    Crypto ipsec transform-set esp-3des SHA4-ESP-3DES esp-sha-hmac

    Crypto ipsec transform-set esp-3des SHA5-ESP-3DES esp-sha-hmac

    Crypto ipsec transform-set esp-3des SHA6-ESP-3DES esp-sha-hmac

    Crypto ipsec transform-set esp-3des SHA7-ESP-3DES esp-sha-hmac

    Crypto ipsec transform-set esp-3des SHA8-ESP-3DES esp-sha-hmac

    Crypto ipsec transform-set esp-3des SHA9-ESP-3DES esp-sha-hmac

    Crypto ipsec transform-set esp-3des SHA10-ESP-3DES esp-sha-hmac

    !

    Profile of crypto ipsec SDM_Profile1

    game of transformation-ESP-3DES-SHA10

    isakmp-profile sdm-ike-profile-1 game

    !

    !

    !

    !

    !

    !

    interface BRI0

    no ip address

    encapsulation hdlc

    Shutdown

    !

    interface FastEthernet0

    Description $FW_OUTSIDE$

    IP address 93.166.xxx.xxx 255.255.255.248

    NAT outside IP

    IP virtual-reassembly in

    outside the area of security of Member's area

    automatic duplex

    automatic speed

    !

    interface FastEthernet1

    no ip address

    Shutdown

    automatic duplex

    automatic speed

    !

    interface FastEthernet2

    !

    interface FastEthernet3

    !

    interface FastEthernet4

    !

    interface FastEthernet5

    !

    FastEthernet6 interface

    !

    interface FastEthernet7

    !

    interface FastEthernet8

    !

    interface FastEthernet9

    !

    type of interface virtual-Template1 tunnel

    IP unnumbered FastEthernet0

    ezvpn-safe area of Member's area

    ipv4 ipsec tunnel mode

    Tunnel SDM_Profile1 ipsec protection profile

    !

    interface Vlan1

    Description $FW_INSIDE$

    IP 90.0.0.190 255.255.255.0

    IP nat inside

    IP virtual-reassembly in

    Security members in the box area

    !

    local IP SDM_POOL_1 90.0.0.25 pool 90.0.0.29

    local IP SDM_POOL_2 90.0.0.75 pool 90.0.0.90

    IP forward-Protocol ND

    IP http server

    local IP http authentication

    IP http secure server

    IP http timeout policy inactive 600 life 86400 request 10000

    !

    !

    IP nat inside source static tcp 192.168.1.200 25 interface FastEthernet0 25

    the IP nat inside source 1 interface FastEthernet0 overload list

    IP route 0.0.0.0 0.0.0.0 93.166.xxx.xxx

    !

    SDM_AH extended IP access list

    Remark SDM_ACL = 1 category

    allow a whole ahp

    SDM_ESP extended IP access list

    Remark SDM_ACL = 1 category

    allow an esp

    SDM_IP extended IP access list

    Remark SDM_ACL = 1 category

    allow an ip

    !

    exploitation forest esm config

    access-list 1 permit 90.0.0.0 0.0.0.255

    Access-list 100 = 128 SDM_ACL category note

    access-list 100 permit ip 255.255.255.255 host everything

    access-list 100 permit ip 127.0.0.0 0.255.255.255 everything

    access-list 100 permit ip 93.166.xxx.xxx 0.0.0.7 everything

    Remark SDM_ACL category of access list 101 = 0

    IP access-list 101 permit any host 192.168.1.200

    !

    !

    !

    !

    !

    !

    RADIUS-server host 90.0.0.245 auth-port 1645 acct-port 1646

    !

    control plan

    !

    !

    Line con 0

    line to 0

    line vty 0 4

    transport input telnet ssh

    !

    end

    Hello

    Looks like you're missing the key from the radius server configuration "RADIUS-server host 90.0.0.245 auth-port 1645 1646 key your_keyacct-port»

    Thank you

    Wen

  • An error has occurred has not got a response from the software update server (update.local). What should I do to update my laptop?

    An error has occurred has not got a response from the software update server (update.local). What should I do to update my laptop?

    It is one of the many problems that occur on my mac.

    Update of OS X El Capitan 10.11.4?

    1. backup Mac.

    2. install 10.11.4 combo update.

    https://support.Apple.com/kb/DL1869?viewlocale=en_US & local = en_US

  • Satellite Pro P100: Wlan with no response from the server proxy C-27

    I have a laptop model Satellete Pro P100 and tries to connect to a wireless router.
    I was able to connect to it over the past four months.

    Last week, I connected to a wired network and now he refuses to re - connect to my home wireless network. He acknowledges that I am connected but connectivity doctor says "there is no response from the server proxy (c-27).

    A friend in the House is able to connect to the internet with their computer without problem.
    I have tried everything I know, but need help please. Thank you

    Hello

    Have you checked in the properties of Wlan settings and the TCP/IP properties?
    Please check if the options: IP automatically get an address and get server address DNS are automatically set correctly.

  • Mailbox unavailable. The response from the server is: 5.7.1 error: content rejected

    I have an application that sends emails when running. Off late a user when he tries to send a mail it receives the following error message...

    "System.Net.Mail.SmtpException: unavailable mailbox." "The response from the server is: 5.7.1 error: content rejected '...

    Note that this happens when he tries to send mail to itself and not otherwise. Can someone here on which could mean the error? Thanks in advance... :))

    Error code is generated in the back-end.

    'System.Net.Mail.

    to System.Net.Mail.

    to System.Net.Mail.

    to System.Net.Mail.

    to System.Net.ClosableStream.

    to System.Net.Mail.MailWriter.

    to System.Net.Mail.SmtpClient.

    Hi guys,.

    Thanks for the reply!

    I contacted my sources by taking care of the servers and realized that the user was an id in which the address of the server was not set up with our servers in domain. He used to connect to our servers using the VPN client. This is why he could not send mails to id field not (in this case itself).

  • No response received from the Symantec Server during activation.

    OT: Network network adapter Ethernet NIC wireless networking device
    I just bought Norton 360 5.0 and I can't activate it by Symantec.  An error saying "No response received from the Symantec Server" I have no internet connection, but do not understand why this happens?  This computer is Windows 7 Home Premium.  It is connected to Linksys wireless - G wireless adapt, but as I said I am able to get on the internet like MSN, Facebook, etc.

    Hi LaraAngold,

    I suggest you try the following steps:
    https://solutions.Symantec.com/sdccommon/ASP/symcu_defcontent_view.asp?ssfromlink=true&sprt_cid=c64ef7a8-111C-47d7-88ef-b8e50c5cbd0f&docid=20071025144354EN

    If the above steps fail, you will need to post your question in the following forums.
    http://community.Norton.com/

  • Cannot send an email "response from the server: Message contains spam...»

    One of my email accounts cannot send an email... And the message came

    "Response from the server: Message contains spam or virus or the sender is blocked: field32_1e2afb1a2cd02.

    It is said to select another off from server...

    I did something wrong, or is there a setting I need to change?

    Thank you

    Yes it has been fixed, thanks

  • No response from the server when you try to publish the page.

    My site was working fine last night but this morning that it does not load and im getting an error "no response from the server" when I try to publish it.

    www.joshuasisneyphotography.com

    I don't have much experience with that kind of stuff. Please help me. I don't know what I have to do. My internet connection seems to work very well and like I said the site was fine a few hours ago.

    Hello

    Please try to delete the temporary files for Muse and then try to publish the site again.

    Here's a post on the forum related on how to clear temporary files: http://forums.adobe.com/message/5086018#5086018

    Hope this helps you publish the site.

    Rgeards,

    Fox

  • receive the same response from the server - glued

    Hello

    I write a simple client/server application. I'm a little stuck on the same response from the server. Instead of sending and receiving plain text, I chose to wrap messages in the command objects (containing a statement and a list of values). He worked for a while, until I realized that I continue to create new objects for each request and response to and from the server. I thought that it's a waste, so I created a reset method (commands command) to update the same object instance instead of creating new command objects. And since I get the same response from the server.

    I've debugged client and the server, and I see that it is as if the server does not read a new order, but he is stuck on the last (which is the first).

    It's the class ServerThread run() method:
    @Override
        public void run() {
            try {
                out = new ObjectOutputStream(socket.getOutputStream());
                in = new ObjectInputStream(socket.getInputStream());
                Command fromClient = null, toClient = null;
                Protocol p = new Protocol();
                
                try {
                    //Reading input from Client
                    while ((fromClient = (Command) in.readObject()) != null) {
                        toClient = p.processInput(fromClient);
                        out.writeObject(toClient);
                        
                    }
                } catch (EOFException e) {
                    //Swallow this exception
                } catch (ClassNotFoundException e) {
                    e.printStackTrace();
                }
    
                out.close();
                in.close();
                socket.close();
                
            } catch (SocketException e) {
                //Swallow this exception
            } catch (IOException e) {
                e.printStackTrace();
            } finally {
            }
        }
    It's the processInput (...) method of the class of Protocol:
    public Command processInput(Command fromClient) {
    
    
            if (fromClient.getCommand() == Commands.REQ_GREET_ME) {
                currentCommand.reset(Commands.REPLY);
                currentCommand.addValue(new Value("Welcome to the Aardenon server."));
    
            } else if (fromClient.getCommand() == Commands.REQ_PLAYER_COUNT) {
                currentCommand.reset(Commands.REPLY);
                currentCommand.addValue(new Value("There are " + AcceptorThread.threadCount() + " players online."));
    
            } else if {
                //Some other commands...
            }
            return currentCommand;
            
        }
    It's the method of hand (...) (shortcut) to the customer class:
    public static void main(String[] args) {
    
            ClientUI clientUI = new ClientUI();
            clientUI.printWelcome();
    
            Socket socket = null;
            ObjectOutputStream out = null;
            ObjectInputStream in = null;
            BufferedReader stdIn = null;
    
            try {
                socket = new Socket("localhost", PORT);
                if (socket != null) {
                    clientUI.printConEstablished();
    
                    out = new ObjectOutputStream(socket.getOutputStream());
                    in = new ObjectInputStream(socket.getInputStream());
                    stdIn = new BufferedReader(new InputStreamReader(System.in));
    
                    Command currentCommand;
                    CommandCreator commandCreator = new CommandCreator();
                    Command toServer = new Command(), fromServer;
                    String fromUser;
    
                    try {
                        
                        toServer.reset(Commands.REQ_GREET_ME);
                        out.writeObject(toServer);
                    
                        fromServer = (Command) in.readObject();
                        if (fromServer != null) System.out.println(fromServer.getValue(0).get());
    
                        toServer.reset(Commands.REQ_PLAYER_COUNT);
                        out.writeObject(toServer);
    
                        fromServer = (Command)in.readObject();
                        if (fromServer != null) System.out.println(fromServer.getValue(0).get());
    
                        //Here some more conversation based on user input...
                        
                        //Handle exceptions  and finally...
    I hope that the code is self-explanatory.

    PR.

    Try to play with ObjectOutputStream.reset (). My understanding is that the same object to write to the stream of data twice causes some kind of optimisation whereby the second time that only a reference to the first serialized object is written. Reset() can cause the object to rewrite it completely in its new State.

    PS: Creating objects is cheap these days. Don't feel that you were running a premature optimization? I'm not saying you do, just be wary of him! You can already see a negative effect of it: more fragile code and more complicate.

  • No error response from the server when the file transfer

    Hi, I just changed my Web site a server based on windows to linux. I was not in trouble, and now I can't get my files to load on the server. I contacted the server provider who has tested the things to their end and say that the problem is with dreamweaver. This is the message I get...

    n response o server when the transfer of file... reconnection.

    It is said that it is to put the file, and then I get this message again...

    no response from the server during the transfer. 2 attempts.  Retry or cancel?

    If I hit Cancel, then he starts to put the file and it will sometimes, sometimes not.

    Now, if I managed to pass the file, when I post it on the web and click on the link it says the file is damaged or corrupted.

    Someone has any idea how to solve this problem? I'm new to web design and dreamweaver and I thought that maybe the problem is related to the definition of my site, but I don't see that there is a problem. I noticed that before I changed the definition of site for the linux server I could easily preview my pages in the browser without having to post it on the site. Now when I try to preview my page it says that I have to put on the site to view. Which could be related?

    I work on a Mac and you have not installed a firewall.

    Any help is very appreciated!

    Thank you!

    In the Site settings (Advanced Mode) it is an option when configuring the remote for passive mode FTP connection.  Try to check that box and see if you are able to connect.

  • Cisco Catalyst 2960-S switch configured for 802. 1 x sends a query to access the Radius Server Radius

    Setup

    Cisco Catalyst 2960-S running 15.0.2 - SE8

    Under Centos freeRadius 6.4 RADIUS server

    Client (supplicant) running Windows 7

    When Windows client is connected to the port (port 12 in my setup) with authentication of 802. 1 x active switch, show of Wireshark that catalyst sends ask EAP and the client responds with EAP response. But it made not the request to the Radius server. The RADIUS test utility 'aaa RADIUS testuser password new-code test group' works.
    Here is my config running. Any advice would be greatly appreciated.
    #show running mySwitch-
    mySwitch #show running-config
    Building configuration...

    Current configuration: 2094 bytes
    !
    version 12.2
    no service button
    horodateurs service debug datetime msec
    Log service timestamps datetime msec
    no password encryption service
    !
    hostname myswitch
    !
    boot-start-marker
    boot-end-marker
    !
    activate the password secret 5 $1$ Z1z6$ kqvVYRQdVRZ0h8aDTV5DR0 enable password!
    !
    !
    AAA new-model
    !
    !
    AAA dot1x group group radius aaa accounting dot1x default start-stop radius authentication group!
    !
    !
    AAA - the id of the joint session
    1 supply ws-c2960s-24ts-l switch
    !
    !
    !
    !
    !
    control-dot1x system-auth
    pvst spanning-tree mode
    spanning tree extend id-system
    !
    !
    !
    !
    internal allocation policy of VLAN no ascendant interface FastEthernet0 no stop ip address!
    GigabitEthernet1/0/1 interface
    !
    interface GigabitEthernet1/0/2
    !
    interface GigabitEthernet1/0/3
    !
    interface GigabitEthernet1/0/4
    !
    interface GigabitEthernet1/0/5
    !
    interface GigabitEthernet1/0/6
    !
    interface GigabitEthernet1/0/7
    !
    interface GigabitEthernet1/0/8
    !
    interface GigabitEthernet1/0/9
    !
    interface GigabitEthernet1/0/10
    !
    interface GigabitEthernet1/0/11
    !
    interface GigabitEthernet1/0/12
    switchport mode access
    Auto control of the port of authentication
    dot1x EAP authenticator
    !
    interface GigabitEthernet1/0/13
    !
    interface GigabitEthernet1/0/14
    !
    interface GigabitEthernet1/0/15
    !
    interface GigabitEthernet1/0/16
    !
    interface GigabitEthernet1/0/17
    !
    interface GigabitEthernet1/0/18
    !
    interface GigabitEthernet1/0/19
    !
    interface GigabitEthernet1/0/20
    !
    interface GigabitEthernet1/0/21
    !
    interface GigabitEthernet1/0/22
    !
    interface GigabitEthernet1/0/23
    !
    interface GigabitEthernet1/0/24
    !
    interface GigabitEthernet1/0/25
    !
    interface GigabitEthernet1/0/26
    !
    interface GigabitEthernet1/0/27
    !
    interface GigabitEthernet1/0/28
    !
    interface Vlan1
    IP 10.1.2.12 255.255.255.0
    !
    IP http server
    IP http secure server
    activate the IP sla response alerts
    recording of debug trap
    10.1.2.1 host connection tcp port 514 RADIUS-server host 10.1.2.1 transport auth-port 1812 acct-port 1646 timeout 3 retransmit testing123 key 3.
    Line con 0
    line vty 0 4
    password password
    line vty 5 15
    password password
    !
    end

    interface GigabitEthernet1/0/16
    !
    interface GigabitEthernet1/0/17
    !
    interface GigabitEthernet1/0/18
    !
    interface GigabitEthernet1/0/19
    !
    interface GigabitEthernet1/0/20

    Have you run wireshark on the server because the request to switch? If so you make sure that there is a response from the server? For Windows network POLICY Server (I've never tried Centos), you must ensure that the request is related to a policy which then authenticates, or denies access. Usually, it is a matter of such attributes and the seller.

    Regarding the configuration, it seems a bit out of the AAA. Try to remove the:

    line "aaa dot1x group service radius authentication" and this by using instead:

    "aaa dot1x default radius authentication group". After the dot1x word you are supposed to provide a list of the authentication or the default Word if you do not want to use a list.

  • Test of the RADIUS server options

    Hello

    Does anyone have experience in the radius server availability tests? I have what the switch is used to test the availability of the radius server and what measures he will take after the detection of server are dead? Setup is done with ISE 1.4.

    Hello

    Because how switch contact RADIUS and how to configure the switch for dead timers, I will redirect you on the Cisco documentation which is very simple and complete as well.

    http://www.Cisco.com/c/en/us/products/collateral/iOS-NX-OS-software/iDEN...

    All parameters to mark a server as dead and how long it will be considered as dead are tweak-able. Setting dynamically some servers as dead if no responses may result in better performance of RADIUS response.

    Thank you

    PS: Please don't forget to rate and score as correct answer if this answered your question.

  • error message when try to sync the iPhone, "invalid response from the device?

    What can I do when I receive this error message when you try to sync to my iPhone 5 s - "invalid response from the device?

    -What are your 5 updating to 10.0.2 iOS iPhone? If this is the case, you must have the latest version of iTunes on your computer, which is required for Mac OS X 10.9.5 12.5.1, or above. To meet these specifications will be receiving this error.

Maybe you are looking for

  • Stop TB of creating folders on the server

    TB31.4 on W8.1 creates folders within TB & on the webmail server, and I couldn't stop it. I uninstalled / reinstalled TB due to other problems, created a new profile and added IMAP settings. Once connected, TB creates a box of RECEPTION and sometimes

  • Implementation of development / test SQL Sever DB

    Hello I want to copy my production sql server database on another computer. In this way I would be in a separate environment of production total and I can run test restorations and maybe even set up a cloning every night. What I read online her seems

  • Resource VISA does not list options

    I have a .VI which works very well on my computer windows 7. When I move the arduino on my computer windows 8, the VISA resource for the icon of init Arduino does not recognize the COM ports. This option is refresh. It shows on my devices like Arduin

  • How to disable the vibrations on the keyboard on a 7000

    I would like to know. How can I disable my keyboard vibration. AT 7000. its irritating a lot

  • HP officejet 4620: fax without a landphone

    I have a hp officejet 4620 and I don't have a phone of the Earth. How to send a fax?