Thanks for your suggestion Phil, That's exactly what I did. I started from a fresh FreeRadius setup and reconfigured the controller from scratch. I back up every working step and when I fix something, I revert to the previous copy and make only the required changes, and back up again. I have an OpenWRT router authenticating against my FreeRadius server with no issues what so ever. When trying to connect using the Cisco access controller 9 times out of 10 I get a "Can't connect to this network" error. With OpenWRT, it's working 100%. I tried different configurations on the wireless controller with no luck. I followed the documentation, used the same options as the working SSID which uses the NPS, even tried toggling one option at a time. Both the WLC and the radius server are on the same subnet. I would really appreciate it if you could share your configuration so I can check. Thanks again -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+mshami=tagorg.com@lists.freeradius.org] On Behalf Of Phil Mayers Sent: Tuesday, April 21, 2015 5:17 PM To: freeradius-users@lists.freeradius.org Subject: Re: 802.1x with Cisco wireless controller On 21/04/15 14:46, Mohammad H. Al Shami wrote:
Thanks Matthew,
My access controller is running version 7.3.101.0. Can you share your configuration files or at least point me to a place where I can look? My setup works once then fails for some time, works once then fails for even more time. Clients can't join the wireless network so it's not an issue if me looking at the log.
You're not being clear here. We use Cisco WLC. There's no special magic - just set them up according to the docs and they'll do radius auth. I'm not sure what: """ Clients can't join the wireless network so it's not an issue if me looking at the log. """ ...means. I suggest you blow away your WLC and radius configs and start from scratch. Start simple - put a single controller and radius server on the same subnet, configure basic WPA-Enterprise on the controller, start with the FreeRADIUS default configs and a single test user, work from there. Make small changes at each step, and check the configs into version control after each change is working. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html