UniFi issues Possible Radius Issues

[JNEWells]

Hi All,

 

Wondering if anyone has ever experienced similar problems.

 

We have having issues with the student UNIFI WiFi network which have recently developed . Students are reporting that they lose traffic, experience extreme speed slow downs and sometimes have problems connecting to the network. We have a separate WIFI Network for staff and this is performing OK. Radius auth for both networks is being performed via a scattering of Synology NAS boxes, but also we have a Windows accounting server installed too.

 

The Student Synology NAS boxes are often coming up with this error:

EAP Error No matching State for user

 

The Wifi networks are on two separate VLANS but the radius is on the core LAN, the errors are always reporting on the Core LAN. We use PFsense as the Firewall and all seems to be OK. I have not managed to get to the bottom of the issue or even confirm if our Radius errors are related to the WIFI drop outs.

 

Googling the no matching state error, there is not a lot of info on it, apart from it saying there is something else wrong with the network, but I am at a loss to what it can be.

 

Has anyone had a similar issue?

Edited May 10, 2023 by ZeroHour

[robyholmes]

I've had reports of authentication issues as well in recent days. We authenticate via the Smoothwall Radius with accounting as well. Can't see any problems on the face of it. Hoping a Smoothwall restart might resolve it.

[DrCheese]

I've had reports of authentication issues as well in recent days. We authenticate via the Smoothwall Radius with accounting as well. Can't see any problems on the face of it. Hoping a Smoothwall restart might resolve it.

 

If you are using Smoothwall as the authentication source you'll need to do this to fix this issue with unifi APs

 

http://www.edugeek.net/forums/wireless-networks/231999-unifi-ac-pro-problems.html#post1988561

[robyholmes]

If you are using Smoothwall as the authentication source you'll need to do this to fix this issue with unifi APs

 

http://www.edugeek.net/forums/wireless-networks/231999-unifi-ac-pro-problems.html#post1988561

 

Thank you!

[DrCheese]

Thank you!

 

You're welcome - as I put in that post I'm surprised that Smoothwall don't have a GUI option to expose this yet. The other solution they mentioned was allowing a Windows machine to do the authentication & just send the accounting packets to Smoothwall - I didn't want to do this as the BYOD network needs to be kept for BYOD stuff only.

[robyholmes]

Yes same here. The odd thing is its been working fine until the last few days without this having to be applied.

 

Mind you, I've not applied it yet of course, so don't know if it'll fix it for not.

[Netwacky87]

Yes same here. The odd thing is its been working fine until the last few days without this having to be applied.

 

Mind you, I've not applied it yet of course, so don't know if it'll fix it for not.

 

I found it to be better with this fix, kindly provided by @DrCheese but I think there is more going on...We still see issues with connectivity using UniFi & Smoothwall

[JNEWells]

unfortunately, this is not out issue. We have a PFsense Firewall and not Smoothwall.

[robyholmes]

How are people finding this issue currently? I'm getting reports it's died down a lot. I wonder if Unifi have released an update to resolve it (We have auto updates on).

[Netwacky87]

How are people finding this issue currently? I'm getting reports it's died down a lot. I wonder if Unifi have released an update to resolve it (We have auto updates on).

 

I haven't heard anything for a while...I will ask around tomorrow but fingers crossed.

[aac]

Did anyone ever get to the bottom of this. We get reports every now and again of it being extremely slow but when we test it all looks good. We have a Sophos Firewall...

[JNEWells]

I managed to resolve the Radius issue. We use Synology boxes to authenticate users - the one that was set up was not able to cope with the amount of requests it was getting - so I moved the Radius auth to a more powerful box which fixed the Radius errors. However, we are still getting poor throughput from time to time. I think its possible that we still have some legacy access points that can only cope with 2x2 which could be dragging the entire system down. We are in the process of swapping out these older units for 4x4-rated access points to see if that improves things. I will keep you posted.

[DGardiner]

Hi All,

 

Wondering if anyone has ever experienced similar problems.

 

We have having issues with the student UNIFI WiFi network which have recently developed . Students are reporting that they lose traffic, experience extreme speed slow downs and sometimes have problems connecting to the network. We have a separate WIFI Network for staff and this is performing OK. Radius auth for both networks is being performed via a scattering of Synology NAS boxes, but also we have a Windows accounting server installed too.

 

The Student Synology NAS boxes are often coming up with this error:

EAP Error No matching State for user

 

The Wifi networks are on two separate VLANS but the radius is on the core LAN, the errors are always reporting on the Core LAN. We use PFsense as the Firewall and all seems to be OK. I have not managed to get to the bottom of the issue or even confirm if our Radius errors are related to the WIFI drop outs.

 

Googling the no matching state error, there is not a lot of info on it, apart from it saying there is something else wrong with the network, but I am at a loss to what it can be.

 

Has anyone had a similar issue?

unifi switches? the most recent firmware is bad, roll it back to the previous

[JNEWells]

unifi switches? the most recent firmware is bad, roll it back to the previous

 

No, we are running on Aruba