Sorry, I did not specify, the article states exactly what I found, disable fast reconnect on ACS. Been working great this entire school year.
Martin D. Flagg Network Engineer/Administrator Hiram College -----Original Message----- From: Lee Badman [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 21, 2006 11:23 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Another RADIUS Question (802.1x) OK Martin- share the love. What was your corrective action? As for the Windows hotfix- it made a huge difference in functionality (I just implemented it). But... - Microsoft needs to be contacted and they have to send it to you. - They say it's not well-tested and to be used with caution So... not sure of the production-quality value. But in test, certainly seems to have fixed at least two machines using the Windows client (not yest tested with the vendor client utilities). Lee >>> [EMAIL PROTECTED] 3/21/2006 11:17 AM >>> I had this problem months ago when I upgraded to 3.2. I finally found the solution by trial and error with no help from Cisco, took about a week of troubleshooting. Martin D. Flagg Network Engineer/Administrator Hiram College -----Original Message----- From: Lee Badman [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 21, 2006 10:41 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Another RADIUS Question (802.1x) Hi Archana, Long time- hope all is well with you. Just got info from Cisco that I will share with the group, but haven't tried to do anything with it yet: >Regarding your concern, I did a research about this specific situation and found new information in >this case. >In this moment I let you know that we could be affecting by the >following bug: CSCef50870 >To check the details of the DDTS I just mentioned please refer to the following link: >http://www.cisco.com/cgi-bin/Support/Bugtool/onebug.pl?bugid=CSCef50870 >&Submit=Search >In this specific situation the action plan will be apply the hotfix of Microsoft KB885453 and verify >the behavior of the authentication process. We'll see if it makes a difference... Lee >>> [EMAIL PROTECTED] 3/21/2006 10:09 AM >>> Lee, We use Cisco 1200s, Free Radius, LDAP (authz), Kerberos(authc), PEAP, WPA. We have this scenario in a pilot environment. We have not seen the symptom you describe. On the other hand I have observed an occasional "validating identity" if a user is on the network for a very long time causing the connection to hang ( a few hours), but this has been sporadic and I'm still trying to see if there is a pattern to it. Please share your results if you do learn something from your debug process and we will do the same! Thanks, Archana Lee Badman wrote: >Using Cisco 1130, ACS, Acs remote agent on a server in AD environment, PEAP, WPA. > >Finding that Mac clients are a breeze to setup, very reliable performance under OS X 10.4.5 with the above described framework. > >On Windows XP clients, getting a curious affect- if the wireless connection is "cold"- like first of the day, or off for several hours- the initial connection is rather peppy, works like a champ- user auth, good keys setup, stable and solid connection. > >But, when you disconnect and then try to come back in get loooooong periods of "waiting for network to be ready", "attempting to authenticate" and or "validating identity". Ultimately, this session goes nowhere. But turn off radio or remove card and wait hours, all is well again and the next "initial" connection flies right through. > >Am starting the debug process, but wondering if this has already been experienced by someone that might be able to enlighten me? > >Thanks- and Happy St. Patty's Day! > >Lee > >Lee Badman >Network Engineer >CWNA, CWSP >Information Technology and Services >(Formerly Computing and Media Services) Syracuse University >(315) 443-3003 >[EMAIL PROTECTED] > >********** >Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. > > > ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
