Agile Controller Wlan dot1x authenticate fail by certificate expired

Created: Aug 17, 2018 07:21:13Latest reply: Aug 17, 2018 07:24:56 836 1 0 0 0

Fault Type	Authentication and Authorization >> Certificate >> Certificate expired
Issue Description	Customer feedback the certificate expired, Customer removed and install new, but also not working.
Alarm Information	N/A
Handling Process	Step 1: Check the RADIUS authentication logs, we can see that the authentication fail cause by authentication timeout (as shown in the following figure). In the detailed log information, after controller sends the last challenge packet, Controller does not receive any response. Step 2 :Capture packet on the Agile Controller. It is same with web logs that the controller sends the last packet and never receives the response. In the packet, we can see that the current radius certificate is valid until 18-07-02, the customer's certification business was normal yesterday, and the authentication failure at today. Step 3:Test verification: Change the system time of the terminal PC to 07-01, and the authentication returns to normal. It is more accurate that the authentication timeout is caused by the expiration of the radius certificate. Step 4:After re-imported the RADIUS certificate to Agile Controller server, the service is restored.
Root Cause	Agile controller server radius certificate expired cause the server identity verify fail and authentication timeout.
Solution	Re-imported the RADIUS certificate to Agile Controller server