Problem description:
We have a WiFi infrastructure managed by AC6005 who then authenticates dot1x users vs a microsoft radius server. When we try to connect to SSID (WiFi) using smartphone Samsung J3 does not work but if he use other terminal (Iphone, Huawei etc.) it works without any problem.<?xml:namespace prefix = "o" ns = "urn:schemas-microsoft-com:office:office" />
Alarm information:
<AC6005>display station online-fail-record sta-mac xxxx-yyyy-zzzz
Rf/WLAN: Radio ID/WLAN ID
------------------------------------------------------------------------------
STA MAC AP ID Ap name Rf/WLAN Last record time
Reason
------------------------------------------------------------------------------
xxxx-yyyy-zzzz 43 AP-21 0/1 2018-06-25/23:17:01 DST
Authenticate fail
xxxx-yyyy-zzzz 44 AP-22 0/1 2018-06-25/22:07:05 DST
Authenticate fail
------------------------------------------------------------------------------
Total stations: 1 Total records: 2
Handling process:
After analyzing the current configuration and the trace test we have notice that the Terminal (Smartphone) cannot process packets that are send by Radius Server.
Root cause:
Some terminals cannot process large packets. To solve this problem we need to change the packet size between the Radius Server and Terminals to a smaller value
Solution:
Set packet size between the Radius Server and Terminals to a smaller value using radius-attribute set command
[AC6605-radius] radius-attribute set Framed-Mtu 1000
Suggestion:
The radius-attribute set command can modify only the RADIUS attributes in the authentication or accounting request packets sent from the device to the RADIUS server. To view the RADIUS attribute settings in the RADIUS authentication or accounting request packets, run the display radius-attribute command.
