Agile Controller Wlan dot1x authenticate fail by certificate expired

Created Aug 17, 2018 15:21:13Latest reply Aug 17, 2018 15:24:56 473 1 0 0
 Fault Type Authentication and Authorization >> Certificate >> Certificate expired
 Issue Description

Customer feedback the certificate expired, Customer removed and install new, but also not working.

 Alarm Information

N/A

 Handling Process
Step 1: Check the RADIUS authentication logs, we can see that the authentication fail cause by authentication timeout (as shown in the following figure). In the detailed log information, after controller sends the last challenge packet, Controller does not receive any response.
f5ad92b3cba64d8fbd9f1334062d7a53

2902568589ae4ac4a30d7995b63b277b

Step 2 :Capture packet on the Agile Controller. It is same with web logs that the controller sends the last packet and never receives the response. In the packet,
we can see that the current radius certificate is valid until 18-07-02, the customer's certification business was normal yesterday, and the authentication failure at today.

75dd7a2a62914f14bf403ee037d575f8
Step 3:Test verification: Change the system time of the terminal PC to 07-01, and the authentication returns to normal. It is more accurate that the authentication timeout is caused by the expiration of the radius certificate.
Step 4:After re-imported the RADIUS certificate to Agile Controller server, the service is restored.
735a7299951e487d8d65222e1c7bba15


 Root Cause

Agile controller server radius certificate expired cause the server identity verify fail and authentication timeout.

 Solution

Re-imported the RADIUS certificate to Agile Controller server

735a7299951e487d8d65222e1c7bba15
  • x
  • convention:

Finn92  Novice   Created Aug 17, 2018 15:24:56 Helpful(0) Helpful(0)

wow , amazing
  • x
  • convention:

Responses

Reply
You need to log in to reply to the post Login | Register

Notice:To ensure the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but not limited to politically sensitive content, content concerning pornography, gambling, drug abuse and trafficking, content that may disclose or infringe upon others' intellectual properties, including commercial secrets, trade marks, copyrights, and patents, and personal privacy. Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see“ Privacy Policy.”
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Fast reply Scroll to top