We had that problem with 350x series AP ~ 18 months ago. I'll have to dig out the exact version number number but it was on the 8.3/8.5 train.
There was a memory leak in the AP. Clients were not moving from authentication to the AP through the association phase on the controller. (these terms seem backwards to me backwards -- authentication is finding the AP, association is the 802.1x/radius part) The AP was not forwarding the association PDU to the controller (so the radius servers never got to see request let alone send a rejection). Rebooting the AP at the time /might/ fix the problem, but if a large number of clients immediately connected to the newly rebooted AP it ran out memory and became semi-operational again. I'd check the AP rather than the controller logs to see what it's reporting. /RjL -----Original Message----- From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> On Behalf Of Paul Smith Sent: Friday, June 26, 2020 10:45 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] WLC 8.10.121 Deferred We were running 8.10.121 on our 5520 and began having authentication issues. It is weird because radius isn't even seeing the attempts (or weren't logging rejections). The behavior persists even using local authentication. Eventually we can get the clients to connect, but it takes a number of attempts. It's very frustrating. Cisco had us upgrade to 8.10.122, but the problem still persists. We would roll back, but we have 9130's on the campus now and we need 8.10.122 to manage them. Such a headache right now. Paul Smith Network Administrator Marian University psmi...@marian.edu 317.955.6069 ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
