Sitemap

Amicuk Programming Answers

ACS 5.1 Failure: 5411 EAP session timed out -- Wired 802.1X, machine-authentication

-0001-11-30   Views:75

Advertisement

Hi guys, I have a strange error here and I`m really disappointed. We currently try to do "Wired-802.1X" with our Windows XP SP3 Clients with EAP-TLS and "machine-only" authentication. We use ACS5.1 to authenticate the clients. At about

Hi guys,
I have a strange error here and I`m really disappointed.
We currently try to do "Wired-802.1X" with our Windows XP SP3 Clients with EAP-TLS and "machine-only" authentication.
We use ACS5.1 to authenticate the clients. At about 50% of the clients authentication works fine.
At the other clients we can see a strange error at the ACS.
At the Reports page --> "Authentications - RADIUS - Today" we see that a client is trying to authenticate, but this fails with the Failure Code: 5411 EAP session timed out.
Logged At RADIUS
Status NAS
Failure Details Username MAC/IP
Address Access Service Authentication
Method Network Device NAS IP Address NAS Port ID CTS
Security Group ACS Instance Failure  Reason
Sep 2,10 3:37:46.916 PM
Wired_802.1X_EAP-TLS
EAP-TLS
svacs01
5411 EAP session timed out
Steps
11001  Received RADIUS Access-Request
11017  RADIUS created a new session
Evaluating Service Selection Policy
15004  Matched rule
15012  Selected Access Service - Wired_802.1X_EAP-TLS
11507  Extracted EAP-Response/Identity
12500  Prepared EAP-Request proposing EAP-TLS with challenge
11006  Returned RADIUS Access-Challenge
5411  EAP session timed out
At the switch I used "Authentication Open" to get the client working and capture traffic with wireshark.
Switch --> Request Identity --> Client
Switch <-- Response Identity <-- Client
Switch --> Request EAP-TLS --> Client
Switch --> Request EAP-TLS --> Client
Switch --> Request EAP-TLS --> Client
Switch --> Request Identity --> Client
Switch --> Request Identity --> Client
Switch --> Request Identity --> Client
What is missing ist the Switch <-- Response EAP-TLS <-- Client
Any ideas what is going wrong ? Maybe someone had this error before ?
Any suggestions how to debug this ?
Thank you very much for your help!
Mathias

The replay answer
Advertisement
Hi @all,
I have this issue too. It occurs in our wireless environment. The problem for me is that I don't know which client (or clients) causes the error. The error occur many times per day.
Logged At RADIUS
Status NAS
Failure Details Username MAC/IP
Address Access Service Authentication
Method Network Device NAS IP Address NAS Port ID CTS
Security Group ACS Instance Failure  Reason
Sep 7,10 11:50:36.143 PM
dot1x wireless
PEAP
bfnetacs01
5411 EAP session timed out
Kind regards,
Michael

Go to See the other 9 answers

ACS 5.1 Failure: 5411 EAP session timed out -- Wired 802.1X, machine-authentication

Category:DefaultRelease time:-0001-11-30Views:130

Hi guys, I have a strange error here and I`m really disappointed. We currently try to do "Wired-802.1X" with our Windows XP SP3 Clients with EAP-TLS and "machine-only" authentication. We use ACS5.1 to authenticate the clients. At about[More]

ACS 1121 error 5411 EAP session timed out w/Peap Wireless logins

Category:DefaultRelease time:-0001-11-30Views:130

I am having issues that came up in the last month where all of my wireless client devices (using 4400 WLC and AC 1121 Appliance w/Active Directory integration) using PEAP MSCHAP2 are being prompted multiple times one after another for their userid/pa[More]

Problem in ACS5.1 : "EAP session timed out", "RADIUS Request dropped "

Category:DefaultRelease time:-0001-11-30Views:130

Hi . Part of my access points do not want to authenticate wi-fi users (through Radius server and Microsoft AD) . The scheme is: wi-fi PC-access point -ACS server 5.1 (Radius)-Microsoft AD After I  configured some AP, next logs we can see : EAP sessio[More]

PEAP & ACS & machine authentication

Category:DefaultRelease time:-0001-11-30Views:130

OK, here's the issue : Customer site - 1130 series LWAPP AP's, WLC 4400 series with 4.2 release, WCS with 4.2 release. ACS SE 4.0 and a second ACS SE with 4.1 Windows XP clients using WZC, all settings for connecting to WLAN are set, and everything w[More]

ACS 5.3, EAP-TLS Machine Authentication with Active Directory

Category:DefaultRelease time:2015-10-11Views:130

I have ACS 5.3. I am testing EAP-TLS Machine Authentication using Active Directory as an external Identity Store. II was testing and everything was going fine until I did some failure testing. My problem: I deleted my computer account out of Active D[More]

ISE v1.2 - Endpoint abandoned EAP session and started new

Category:DefaultRelease time:-0001-11-30Views:130

Hi. I have lots of clients that are not able to log on to both wired and wireless networks, and they always fails with these errors. 5411 Supplicant stopped responding to ISE 5440 Endpoint abandoned EAP session and started new This is with certificat[More]

ISE-5443 RADIUS request dropped due to reaching EAP sessions limit

Category:DefaultRelease time:-0001-11-30Views:130

Hi Guys, I am getting the below error message from two PSNs (out of 4) & resulting 95% failed authentications on ISE "5443 RADIUS request dropped due to reaching EAP sessions limit" Could not find any documents/reference & trying to get[More]

I am trying to buy songs on itunes and half way through the terms and conditions come up, I accept them and press return and then I get a 'session timed out' notice and the sale hasn't gone through - tried loads of times / updating software, any answers?

Category:DefaultRelease time:2015-10-11Views:130

I am trying to buy songs on itunes and half way through the terms and conditions come up, I accept them and press return and then I get a 'session timed out' notice and the sale hasn't gone through - tried loads of times / updating software, any answ[More]

Error "Session Timed Out" When saving  webi report as PDF

Category:DefaultRelease time:2015-10-11Views:130

Hi, I am getting below error when saving  report as PDF The Session Timed Out.The document *.wid has been auto saved  in the Favorites~WebIntelligence Folder..Click Restore to retrieve it. (ERROR : WIJ600001). I get above error in PROD  but works fin[More]

I have a Windows 7 Computer.  When I go into itunes store, it comes up, and I can navigate in it, but a box keeps appearing saying accessing itunes store.  I then get a session timed out, so can't purchase anything.

Category:DefaultRelease time:2015-10-11Views:130

I own a Windows 7 computer.  I can get into itunes okay, and I can get into the itunes store okay.  After I am in the store, a box keeps appearing that says "Accessing itunes store".  It goes on and off.  I am able to navigate when the box is no[More]

Application Server Session timed out (-11) (lack of debug in internal ITS)

Category:DefaultRelease time:2015-10-11Views:130

Dear Sirs, I get the error message below, when I try to run a IAC through internal ITS. The IAC worked for a while (<30 minutes), and then suddenly this error appeared. I can see that this error message has been asked about previously, but then in co[More]

Hot
Hi all, I have the following problem I have a Win 2003 domain (A) and a trust established with another Win 2003 domain (B). Domain A is the one with the CiscoSecure software. We have many trusts with other domains (mostly Win 2000) and have configure [More]
Hi all, I'm trying to install OS X 10.5.6 into my iMac which is apparently running OS X 10.4 and not 10.4.11 as I previosuly thought. The iMac reads the disc fine but when I try to reboot using the CD as the start up disc to continue the installation [More]
We want to roll out apple tv's to our screens throughout our stores for showing slide shows, ads etc, as well as in our board rooms on our projectors for easy airplay output options for our mobile devices.  It makes it very difficult and less secure [More]
Hello All, We recently inherited an OWB project without any documentation. Can anyone tell how best to EXTRACT the business rules within the Design Center Client? Is it even possible to get this info from within the tool? We are trying to put down so [More]
I'm self-taught, so be bare with me. I research and do my best to implement what I understand. Asking on everything I don't. Which is where you guys come in, haha. I originally had my menu bar positioned by putting a certain amount of <br /> tags ab [More]
I just reinstalled iTunes for Windows Vista after the MSVCR80.dll was not found. After reinstalling iTunes, the first time I tried to sync my iPhone 4 using iTunes, I got this message: YSLoader.exe has stopped working Problem signature:   Problem Eve [More]
Hi! I've got a problem with conneting to a MySql database... the exception says: java.lang.ClassNotFoundException: org.gjt.mm.mysql.Driver Source for connection: String driverName = "org.gjt.mm.mysql.Driver"; // MySQL MM JDBC driver Class.forNam [More]
I cannot put win 8 on my imac mid 2011 with boot camp. Getting an error \boot\bcd\  and I also see an efi drive when i hold the alt option button down. I had win 7 on a partition with boot camp and it is now reformatted.Please try below solutions to [More]
In the past while my version of Safari has been progressively crashing more and more often. I've not detected a pattern of what type of sites "tick" it off the most but in any case graphic and multimedia intensive sites seem to be better candida [More]
hi friends as i am new to swings and Jtable pls help me if u can. in the code copied below when i start putting value into the Double column of JTable a ( .0 ) is appended at the end which is undesirable it should be like that only when the value is [More]