Problem with Windows XP tablet and IAS
Hi there,
using like +30 WinXP old tablets; they connect via Wireless (WLC) and then authenticate against a IAS Radius.
Everything works fine but sometimes a random tablet stops working and it fails the auth process all the time. The only way to solve this issue is to connect this tablet via ethernet, let it authenticate, and the connect again to the wireless network.
Client NIC
Modelo: Intel (R) Wireless WiFi Link 4965AG
Versin controlador: 11.5.0.32
Failing:
10.84.94.11,host/UME0703.csub.scs.es,03/09/2012,14:21:25,IAS,SERVSWF2,4128,WLC5500-1,31,00-1f-3b-0b-80-cd,30,00-27-0d-09-32-00:Hosbellsf,5,13,4,10.84.94.11,32,WLC5500-01,26,0x00003763010600000001,6,2,12,1300,61,19,64,13,65,6,81,402,4108,10.84.94.11,4116,9,4155,1,4154,Use
Windows authentication for all users,4129,DCSUB\UME0703$,4149,802.1.x,25,311 1 10.84.50.22 02/03/2012 15:00:55 1881853,4127,11,4130,csub.scs.es/Computers Unidos/Portatiles/Tablets/UME0703,4136,1,4142,0
10.84.94.11,host/UME0703.csub.scs.es,03/09/2012,14:21:25,IAS,SERVSWF2,4128,WLC5500-1,25,311 1 10.84.50.22 02/03/2012 15:00:55 1881853,4127,11,4130,csub.scs.es/Computers Unidos/Portatiles/Tablets/UME0703,4149,802.1.x,4129,DCSUB\UME0703$,4154,Use Windows authentication
for all users,4155,1,4116,9,4108,10.84.94.11,4136,3,4142,262
Working:
10.84.94.11,host/UME0905.csub.scs.es,03/09/2012,14:21:59,IAS,SERVSWF2,4128,WLC5500-1,31,00-1f-3b-21-1c-6b,30,00-27-0d-09-43-20:Hosbellsf,5,13,4,10.84.94.11,32,WLC5500-01,26,0x00003763010600000001,6,2,12,1300,61,19,64,13,65,6,81,402,4108,10.84.94.11,4116,9,4155,1,4154,Use
Windows authentication for all users,4129,DCSUB\UME0905$,4149,802.1.x,25,311 1 10.84.50.22 02/03/2012 15:00:55 1881870,4132,Secured password (EAP-MSCHAP v2),4127,11,4130,csub.scs.es/Computers Unidos/Portatiles/Tablets/UME0905,4136,1,4142,0
10.84.94.11,host/UME0905.csub.scs.es,03/09/2012,14:21:59,IAS,SERVSWF2,4128,WLC5500-1,25,311 1 10.84.50.22 02/03/2012 15:00:55 1881870,4132,Secured password (EAP-MSCHAP v2),4127,11,8100,0,4120,0x0144435355,4130,csub.scs.es/Computers Unidos/Portatiles/Tablets/UME0905,64,13,81,vlan702,4108,10.84.94.11,4116,9,65,6,4155,1,4154,Use
Windows authentication for all users,4129,DCSUB\UME0905$,4149,802.1.x,7,1,6,2
Any idea of what could be happening?
Thanks a lot!
March 27th, 2012 12:14pm
Hi Mitheor,
Thanks for posting here.
So it seems the wireless authentication will success when using EAP-MSCHAP v2 as the authentication method , so could you general describe the entries (authentication method ..etc)we specified in the wireless profile on these tables and also the policies
we defined in IAS?
Meanwhile, did we also get any error/warring message relate with this authentication issue form client which might include reason code or event ID.
802.1X-authenticated network connectivity problems
http://technet.microsoft.com/en-us/library/cc773359(WS.10).aspx#BKMK_QL_OneX
Troubleshooting IEEE 802.11 Wireless Access with Microsoft Windows
http://technet.microsoft.com/en-us/library/bb457017.aspx
Configuring Wireless Settings Using Windows Server 2003 Group Policy
http://technet.microsoft.com/en-us/library/bb878079.aspx
Regards,
Tiger Li
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact
tnmff@microsoft.com.Tiger Li
TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
March 27th, 2012 11:47pm
Hi again and thanks for the answer,
screenshots of client side config:
Tablets does not use certificates, the authenticate instead using EAP-MSCHAP v2.
If you need for me to translate any of those lines just let me know.
In the tablet there is no error, just trying to connect endlessly.
Im checking the windows traces but im not seeying nothing useful :$ Probably my fault because im not used to browse this files.
March 28th, 2012 10:42am
Hi Mitheor,
Thanks for update.
So please first collect these information from both wireless client and IAS/RADIUS server with following the introductions in the article I posted and upload here(SkyDrive maybe and we can post the URL here ). Once we get these data, it should be more easier
for us to narrow it down:
Troubleshooting IEEE 802.11 Wireless Access with Microsoft Windows
http://technet.microsoft.com/en-us/library/bb457017.aspx
We had also some potential known issues when we do 802.1x authentication on Windows XP clients which has been fixed by corresponding hotfixes, the detail information could be acquired from the blog post below:
Possible problems seen after upgrading Windows XP clients to SP3 in an environment that uses wired 802.1x
http://blogs.technet.com/b/networking/archive/2009/12/16/possible-problems-seen-after-upgrading-windows-xp-clients-to-sp3-in-an-environment-that-uses-wired-802-1x.aspx
Otherwise I think we might get misconfiguration caused that and hope the collected data will help.
Regards,
Tiger Li
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact
tnmff@microsoft.com.
Tiger Li
TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
March 28th, 2012 11:07pm
Hi Mitheor,
If there is any update on this issue, please feel free to let us know.
Regards,
Tiger Li
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact
tnmff@microsoft.com.
Tiger Li
TechNet Community Support
April 2nd, 2012 4:37am