On a UTM120 in our branch office WPA2-Enterprise with Radius is not usable for Windows 7 clients on the attached AP50. UTM version 9.105-9.
The Radius server is located in the same LAN as the AP50 attached to the LAN port of the UTM120. Connecting a Ubuntu or Knoppix client works, even with enabled server certificate check on the client when the AD domain CA certificate is downloaded to the client before connecting. The same Windows 7 clients can authenticate to a different non-Astaro AP (EAP600) via Radius without problems.
I'm suspecting the same error as described here, where the Radius server is sending to many certificated to the clients: https://supportforums.cisco.com/thread/2106512
Has anyone here seen the same error?
Error message on the Radius server:
Client Machine:
Security ID: NULL SID
Account Name: -
Fully Qualified Account Name: -
OS-Version: -
Called Station Identifier: 00-XX-XX-XX-XX-XX:COMPANY
Calling Station Identifier: 84-XX-XX-XX-XX-XX
NAS:
NAS IPv4 Address: -
NAS IPv6 Address: -
NAS Identifier: COMPANY-SSID
NAS Port-Type: Wireless - IEEE 802.11
NAS Port: 1
RADIUS Client:
Client Friendly Name: COMPANY-utm-hostname
Client IP Address: 172.19.0.1
Authentication Details:
Connection Request Policy Name: COMPANY Secure Wireless Connections
Network Policy Name: COMPANY Secure Wireless Connections
Authentication Provider: Windows
Authentication Server: DC01.COMPANY.COM
Authentication Type: PEAP
EAP Type: -
Account Session Identifier: -
Logging Results: Accounting information was written to the local log file.
Reason Code: 266
Reason: The message received was unexpected or badly formatted.
wireless.log during connection attempt on the UTM:
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan0: STA 84:3a:XX:XX:XX:XX IEEE 802.1X: received EAPOL-Start from STA
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan0: STA 84:3a:XX:XX:XX:XX WPA: event 5 notification
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan0: STA 84:3a:XX:XX:XX:XX IEEE 802.1X: aborting authentication
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan0: STA 84:3a:XX:XX:XX:XX IEEE 802.1X: unauthorizing port
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan0: STA 84:3a:XX:XX:XX:XX WPA: event 3 notification
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan0: STA 84:3a:XX:XX:XX:XX MLME: MLME-DEAUTHENTICATE.indication(84:3a:XX:XX:XX:XX, 23)
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan0: STA 84:3a:XX:XX:XX:XX MLME: MLME-DELETEKEYS.request(84:3a:XX:XX:XX:XX)
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX IEEE 802.11: authentication OK (open system)
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX MLME: MLME-AUTHENTICATE.indication(84:3a:XX:XX:XX:XX, OPEN_SYSTEM)
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX MLME: MLME-DELETEKEYS.request(84:3a:XX:XX:XX:XX)
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX IEEE 802.11: authenticated
2013:09:12-03:33:51 COMPANY-utm-hostname awelogger[27801]: id="4103" severity="info" sys="System" sub="WiFi" name="STA authentication" ssid="COMPANY" ssid_id="WLAN0.1" bssid="00:1a:8c:XX:XX:XX" sta="84:3a:XX:XX:XX:XX" status_code="0"
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX IEEE 802.11: association OK (aid 1)
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX IEEE 802.11: association OK (aid 1)
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX IEEE 802.11: associated (aid 1)
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX MLME: MLME-ASSOCIATE.indication(84:3a:XX:XX:XX:XX)
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX MLME: MLME-DELETEKEYS.request(84:3a:XX:XX:XX:XX)
2013:09:12-03:33:51 COMPANY-utm-hostname awelogger[27801]: id="4104" severity="info" sys="System" sub="WiFi" name="STA association" ssid="COMPANY" ssid_id="WLAN0.1" bssid="00:1a:8c:XX:XX:XX" sta="84:3a:XX:XX:XX:XX" status_code="0"
2013:09:12-03:33:51 COMPANY-utm-hostname awelogger[27801]: id="4104" severity="info" sys="System" sub="WiFi" name="STA association" ssid="COMPANY" ssid_id="WLAN0.1" bssid="00:1a:8c:XX:XX:XX" sta="84:3a:XX:XX:XX:XX" status_code="0"
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX WPA: event 1 notification
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX IEEE 802.1X: start authentication
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX WPA: start authentication
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX IEEE 802.1X: unauthorizing port
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX IEEE 802.1X: Sending EAP Packet (identifier 103)
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX IEEE 802.11: associated (aid 1)
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX MLME: MLME-ASSOCIATE.indication(84:3a:XX:XX:XX:XX)
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX MLME: MLME-DELETEKEYS.request(84:3a:XX:XX:XX:XX)
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX WPA: event 1 notification
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX WPA: event 4 notification
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX IEEE 802.1X: received EAPOL-Start from STA
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX WPA: event 5 notification
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX IEEE 802.1X: aborting authentication
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX IEEE 802.1X: Sending EAP Packet (identifier 198)
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX IEEE 802.1X: received EAP packet (code=2 id=103 len=22) from STA: EAP Response-Identity (1)
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX IEEE 802.1X: received EAP packet (code=2 id=198 len=22) from STA: EAP Response-Identity (1)
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX IEEE 802.1X: STA identity 'COMPANY\testuser'
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: RADIUS Sending RADIUS message to authentication server
2013:09:12-03:33:51 COMPANY-utm-hostname hostapd: wlan8: RADIUS Next RADIUS client retransmit in 3 seconds
2013:09:12-03:33:54 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX RADIUS: Resending RADIUS message (id=0)
2013:09:12-03:33:54 COMPANY-utm-hostname hostapd: wlan8: RADIUS Next RADIUS client retransmit in 6 seconds
2013:09:12-03:33:54 COMPANY-utm-hostname hostapd: wlan0: STA 84:3a:XX:XX:XX:XX RADIUS: Resending RADIUS message (id=6)
2013:09:12-03:33:54 COMPANY-utm-hostname hostapd: wlan0: RADIUS Next RADIUS client retransmit in 24 seconds
2013:09:12-03:33:56 COMPANY-utm-hostname hostapd: wlan0: STA 84:3a:XX:XX:XX:XX IEEE 802.11: deauthenticated due to local deauth request
2013:09:12-03:33:56 COMPANY-utm-hostname hostapd: wlan0: STA 84:3a:XX:XX:XX:XX RADIUS: Removing pending RADIUS authentication message for removed client
2013:09:12-03:34:00 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX RADIUS: Resending RADIUS message (id=0)
2013:09:12-03:34:00 COMPANY-utm-hostname hostapd: wlan8: RADIUS Next RADIUS client retransmit in 12 seconds
2013:09:12-03:34:09 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX IEEE 802.1X: received EAPOL-Start from STA
2013:09:12-03:34:09 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX WPA: event 5 notification
2013:09:12-03:34:09 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX IEEE 802.1X: aborting authentication
2013:09:12-03:34:09 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX IEEE 802.1X: unauthorizing port
2013:09:12-03:34:09 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX WPA: event 3 notification
2013:09:12-03:34:09 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX MLME: MLME-DEAUTHENTICATE.indication(84:3a:XX:XX:XX:XX, 23)
2013:09:12-03:34:09 COMPANY-utm-hostname hostapd: wlan8: STA 84:3a:XX:XX:XX:XX MLME: MLME-DELETEKEYS.request(84:3a:XX:XX:XX:XX)
This thread was automatically locked due to age.
