Most of the Android clients cannot authentication successfully with 802.1X while iPhone and laptop are working fine.

Most of the Android clients cannot authentication successfully with 802.1X while iPhone and laptop are working fine.

Controller version：V1R1C00SPC300

terminal：Samsung S7 && Android 7.0

AC6605 V2R6C20

            The Agile Controller Radius authentication log prompts "Authentication timeout".

           The client error as below:

Do capture on access switch and agile controller.

In the log details, "View Packet Processing Flow" shows that the authentication times out when the TLS protocol is negotiated.

              In the protocol negotiation stage with the Controller, the set of algorithms sent by the terminal to the Controller includes TLS_DHE_RSA_WITH_AES_256_CBC_SHA;

when the controller selects this algorithm for authentication in the subsequent authentication stage, the terminal does not respond.

It is matched with the warning:  http://support.huawei.com/enterprise/en/bulletins-product/NEWS1000009089

Upgrade agile controller version from Agile Controller-Campus from V100R001C00SPC300 to Version V100R003C30SPC100