Wireless Networks Thread, Ruckus - Laptop repeatedly fails authentication when joining WLAN in Technical; I do love my Ruckus wireless and has always worked beautifully so i just let it be.
The other day ...
2nd October 2013, 03:43 PM #1
Ruckus - Laptop repeatedly fails authentication when joining WLAN
I do love my Ruckus wireless and has always worked beautifully so i just let it be.
The other day it was brought to my attention that our Netbooks aren't connecting. Now i quite often get the "no logon servers available blah blah" error but this time it's all of them, not just one or two.
They all authenticate via certificate deployed via GPO, sat on their own WLAN.
Looking in the logs, the netbook i was testing has the entries:
2013/10/02 14:13:40 High User fails authentication too many times in a row when joining WLAN[HPS Wireless] at AP[AP13]. User is temporarily blocked from the system for [30 seconds].
2013/10/02 14:13:06 Low host/NETBOOK-061.harborne.pri User[host/NETBOOK-061.harborne.pri] disconnects from WLAN[HPS Wireless] at AP[AP13]
2013/10/02 14:12:48 Low host/NETBOOK-061.harborne.pri User[host/NETBOOK-061.harborne.pri] disconnects from WLAN[HPS Wireless] at AP[AP13]
One thing i have noticed is that its Uptime is *cough*480d 20h 27m*cough* (where the hell does the time go!?!) so a reboot might not be a bad idea.
Any other suggests of what to have a look at?
IDG Tech News
2nd October 2013, 07:19 PM #2
*bump* is this a server issue and not a Ruckus issue?
2nd October 2013, 08:37 PM #3
Have you tried another type of laptop or device on this wireless network?
Are all the drivers up to date?
2nd October 2013, 08:53 PM #4
Are the certificates on the NPS server and clients still valid?
All of the chain, so Enterprise root, NPS server, client cert.
2nd October 2013, 08:55 PM #5
Check your dhcp has enough free IP addresses, I had a similar issue this week and released my stupid mistake when I looked at DHCP and saw that my range was missing a number, once it was fixed and DHCP restarted ruckus picked up the changes and it sorted itself out.
Originally Posted by Little-Miss
2nd October 2013, 09:39 PM #6
You won't get a DHCP address until the full 802.1x authentication is complete, so it can't be that. It states in the log that authentication is failing.
What radius solution are you using ? Can you see anything in the radius server logs to indicate timeouts being reached ? I would suspect delayed authentication frames, probably due to WiFi issues. Does this device manage to get on the network successfully when connecting to an alternative AP ?
The best thing to do is a frame capture on both the wifi and wired side of the network and to view a full 802.1X EAP exchange, then you can identify which frames are lost and therefore where the problem is.
I realise that's not easy for you to organse but try and do your best to test this.
Post back any other relevant info.
Last edited by neilmac; 2nd October 2013 at 10:01 PM.
3rd October 2013, 10:24 AM #7
Ok, so far: A reboot of my Controller didnt work. Netbooks can happily connect to the other Open Auth connections.
DHCP is fine.
Now...at this point I hold my hands up and say I'm still new to the certificate side of things. I guess they've always been part of the process when things were set up by others.
Funnily enough, there are certificates that expired on Sunday, the day before this all kicked off. They're for my 2008 server. Under the Intermidate Certification Autorities folder there are two identical looking certs sat in the Cert Revocation list.....this im guessing is an issue?
I feel so ill, i'm only here and not in bed because i want these netbooks working...
3rd October 2013, 11:05 AM #8
The more i skip through things like Event Viewer, the more the certificate thing is starting to look likely. How does one renew and already expired certificate?
Is this the process i should take? Ruckus - Laptop repeatedly fails authentication when joining WLAN
Last edited by Little-Miss; 3rd October 2013 at 11:31 AM.
3rd October 2013, 11:23 AM #9
What EAP type are you using, and what's the radius server ?
3rd October 2013, 02:38 PM #10
Radius is curricsvr2. 802.1x
I've renewed the cert on curricsvr2 but the netbooks are still not authenticating, have i missed a bit?
3rd October 2013, 02:39 PM #11
If you renewed cert, have you plugged the netbooks into cables to get the new cert?
3rd October 2013, 02:53 PM #12
See, i thought i was daft to consider this. I have had one wired in but it made no difference. Is there a way to force it down?
Though if i go to certmrg.msc i can see it in there....
3rd October 2013, 02:55 PM #13
Doing a gpupdate /force should pull it down, if you're deploying it through GPOs normally. As it'll be on the normal GPO tick refresh etc. Then it'll probably need full restart (but may not)
3rd October 2013, 02:56 PM #14
yeah, thats what ive done...
3rd October 2013, 03:03 PM #15
That should do it But the other option would be "certutil -pulse" which would initiate the autoenrollment, but not sure if that'll do anything more if the other isn't working anyway.
By maniac in forum Hardware
Last Post: 12th January 2010, 10:45 AM
By darrenu in forum Office Software
Last Post: 27th January 2009, 01:02 PM
Last Post: 30th June 2008, 12:41 PM
By elsiegee40 in forum Hardware
Last Post: 27th June 2008, 03:05 AM
By FN-GM in forum Hardware
Last Post: 14th January 2008, 10:05 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)