Sitemap

Amicuk Programming Answers

ACS 5.1 Failure: 5411 EAP session timed out -- Wired 802.1X, machine-authentication

-0001-11-30   Views:71

Advertisement

Hi guys, I have a strange error here and I`m really disappointed. We currently try to do "Wired-802.1X" with our Windows XP SP3 Clients with EAP-TLS and "machine-only" authentication. We use ACS5.1 to authenticate the clients. At about

Hi guys,
I have a strange error here and I`m really disappointed.
We currently try to do "Wired-802.1X" with our Windows XP SP3 Clients with EAP-TLS and "machine-only" authentication.
We use ACS5.1 to authenticate the clients. At about 50% of the clients authentication works fine.
At the other clients we can see a strange error at the ACS.
At the Reports page --> "Authentications - RADIUS - Today" we see that a client is trying to authenticate, but this fails with the Failure Code: 5411 EAP session timed out.
Logged At RADIUS
Status NAS
Failure Details Username MAC/IP
Address Access Service Authentication
Method Network Device NAS IP Address NAS Port ID CTS
Security Group ACS Instance Failure  Reason
Sep 2,10 3:37:46.916 PM
Wired_802.1X_EAP-TLS
EAP-TLS
svacs01
5411 EAP session timed out
Steps
11001  Received RADIUS Access-Request
11017  RADIUS created a new session
Evaluating Service Selection Policy
15004  Matched rule
15012  Selected Access Service - Wired_802.1X_EAP-TLS
11507  Extracted EAP-Response/Identity
12500  Prepared EAP-Request proposing EAP-TLS with challenge
11006  Returned RADIUS Access-Challenge
5411  EAP session timed out
At the switch I used "Authentication Open" to get the client working and capture traffic with wireshark.
Switch --> Request Identity --> Client
Switch <-- Response Identity <-- Client
Switch --> Request EAP-TLS --> Client
Switch --> Request EAP-TLS --> Client
Switch --> Request EAP-TLS --> Client
Switch --> Request Identity --> Client
Switch --> Request Identity --> Client
Switch --> Request Identity --> Client
What is missing ist the Switch <-- Response EAP-TLS <-- Client
Any ideas what is going wrong ? Maybe someone had this error before ?
Any suggestions how to debug this ?
Thank you very much for your help!
Mathias

The replay answer
Advertisement
Hi @all,
I have this issue too. It occurs in our wireless environment. The problem for me is that I don't know which client (or clients) causes the error. The error occur many times per day.
Logged At RADIUS
Status NAS
Failure Details Username MAC/IP
Address Access Service Authentication
Method Network Device NAS IP Address NAS Port ID CTS
Security Group ACS Instance Failure  Reason
Sep 7,10 11:50:36.143 PM
dot1x wireless
PEAP
bfnetacs01
5411 EAP session timed out
Kind regards,
Michael

Go to See the other 9 answers

ACS 5.1 Failure: 5411 EAP session timed out -- Wired 802.1X, machine-authentication

Category:DefaultRelease time:-0001-11-30Views:130

Hi guys, I have a strange error here and I`m really disappointed. We currently try to do "Wired-802.1X" with our Windows XP SP3 Clients with EAP-TLS and "machine-only" authentication. We use ACS5.1 to authenticate the clients. At about[More]

ACS 1121 error 5411 EAP session timed out w/Peap Wireless logins

Category:DefaultRelease time:-0001-11-30Views:130

I am having issues that came up in the last month where all of my wireless client devices (using 4400 WLC and AC 1121 Appliance w/Active Directory integration) using PEAP MSCHAP2 are being prompted multiple times one after another for their userid/pa[More]

Problem in ACS5.1 : "EAP session timed out", "RADIUS Request dropped "

Category:DefaultRelease time:-0001-11-30Views:130

Hi . Part of my access points do not want to authenticate wi-fi users (through Radius server and Microsoft AD) . The scheme is: wi-fi PC-access point -ACS server 5.1 (Radius)-Microsoft AD After I  configured some AP, next logs we can see : EAP sessio[More]

PEAP & ACS & machine authentication

Category:DefaultRelease time:-0001-11-30Views:130

OK, here's the issue : Customer site - 1130 series LWAPP AP's, WLC 4400 series with 4.2 release, WCS with 4.2 release. ACS SE 4.0 and a second ACS SE with 4.1 Windows XP clients using WZC, all settings for connecting to WLAN are set, and everything w[More]

ACS 5.3, EAP-TLS Machine Authentication with Active Directory

Category:DefaultRelease time:2015-10-11Views:130

I have ACS 5.3. I am testing EAP-TLS Machine Authentication using Active Directory as an external Identity Store. II was testing and everything was going fine until I did some failure testing. My problem: I deleted my computer account out of Active D[More]

ISE v1.2 - Endpoint abandoned EAP session and started new

Category:DefaultRelease time:-0001-11-30Views:130

Hi. I have lots of clients that are not able to log on to both wired and wireless networks, and they always fails with these errors. 5411 Supplicant stopped responding to ISE 5440 Endpoint abandoned EAP session and started new This is with certificat[More]

ISE-5443 RADIUS request dropped due to reaching EAP sessions limit

Category:DefaultRelease time:-0001-11-30Views:130

Hi Guys, I am getting the below error message from two PSNs (out of 4) & resulting 95% failed authentications on ISE "5443 RADIUS request dropped due to reaching EAP sessions limit" Could not find any documents/reference & trying to get[More]

I am trying to buy songs on itunes and half way through the terms and conditions come up, I accept them and press return and then I get a 'session timed out' notice and the sale hasn't gone through - tried loads of times / updating software, any answers?

Category:DefaultRelease time:2015-10-11Views:130

I am trying to buy songs on itunes and half way through the terms and conditions come up, I accept them and press return and then I get a 'session timed out' notice and the sale hasn't gone through - tried loads of times / updating software, any answ[More]

Error "Session Timed Out" When saving  webi report as PDF

Category:DefaultRelease time:2015-10-11Views:130

Hi, I am getting below error when saving  report as PDF The Session Timed Out.The document *.wid has been auto saved  in the Favorites~WebIntelligence Folder..Click Restore to retrieve it. (ERROR : WIJ600001). I get above error in PROD  but works fin[More]

I have a Windows 7 Computer.  When I go into itunes store, it comes up, and I can navigate in it, but a box keeps appearing saying accessing itunes store.  I then get a session timed out, so can't purchase anything.

Category:DefaultRelease time:2015-10-11Views:130

I own a Windows 7 computer.  I can get into itunes okay, and I can get into the itunes store okay.  After I am in the store, a box keeps appearing that says "Accessing itunes store".  It goes on and off.  I am able to navigate when the box is no[More]

Application Server Session timed out (-11) (lack of debug in internal ITS)

Category:DefaultRelease time:2015-10-11Views:130

Dear Sirs, I get the error message below, when I try to run a IAC through internal ITS. The IAC worked for a while (<30 minutes), and then suddenly this error appeared. I can see that this error message has been asked about previously, but then in co[More]

Hot
As requested.   Will repeat description of my problem and add one other annoying intrusion.  The Whirling Ball has started to appear (have been working on a newsletter in Pages)  Solution so far is to quit Pages and reopen, not very elegant. My Mac i [More]
Hi all, I'm having issues syncing between MobileMe and my Macbook Pro. It used to work perfectly, but I haven't been able to get it to sync since early August. All the changes I make between my iPhone and MobileMe work fine, but they just wont update [More]
FT has lost much of its fidelity. It gates out all the noise, which I'm sure is supposed to be better, but now it's more like like a cell phone call. Sure the warmth of sound is better, but it cuts off breaths and sighs. All the things that make it s [More]
ok, I wrote before about the issues I'm having with FINDER. I have since realised that if I am on my Finder/Desktop window showing the desktop - it keeps restarting itself every 10-15 seconds. If I have a window open (such as looking in Folder Conten [More]
Hello, I have been using Time Machine to back up my MacBook Pro to an external hard disc.  Now my MacBook has broken and I'm in Ghana with no access to repairs in the foreseeable future.  Can I retrieve the backed-up files from my Mac to a PC?  If so [More]
Hi Experts , I am using ldb pnpce, for my report ,and i created my own report category with selection paramaters action type and payroll area now the problem is when i am giving the action type as Z0 ,the data to be extracted is not getting filtered [More]
Whenever I open a document in Microsoft Word 2004 for Mac, this message pops up: "There is not enough memory or disk space to run the converter 'EPS Import." I have checked the hard drive and 180+ GB are free. At times, the Spelling and Grammar [More]
I have the first IPAD and all of a sudden I cannot charge my IPAD through a electrical outlet.  I can only re-charge it through my laptop.  Anyone know why and can this be fixed?Will it charge using the iPhone charger. It's only 5W, so it will charge [More]
in the 'configure virtual form for table' part in the tutorial entitled performing inserts, updates and deletes, it's wriiten 'select the user interface elements in the table component, right click and choose Configure Virtual Forms'. but i can't fin [More]
All: Is there a mechanism to manage root passwords across hundreds of Solaris 10 systems? The policy requirement would be UNIQUE ROOT PASSWORDS... Thanks Sekhar NagasundaramHi, Your friend ssh is the answer here :) We do exactly this in the office, c [More]