nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

client authentication issues

unknown

I have a couple of clients not able to connect to a wireless network from the Ruckus. They can connect to other networks fine, and other laptops connect to the network fine.
Setup is: Ruckus ZoneDirector1106 with 9.10.1.0 build 59 with two AP's.
The problem clients have different operating systems.
If I duplicate the network and change the authentication from 802.1x-eap to 'open' the clients can connect.

Please assist.

Find more posts tagged with

Accepted answers

All comments

unknown

We want to authenticate using EAP.

unknown

what are this couple of clients, operating system? what RadiusServer do you use?

unknown

Some Windows 10 some Windows 7.
I'm using the local database, we do not have a server.

unknown

Windows 10 is using TLS 1.2 per default. I'm not sure wether the ZD can use this TLS-Version. Maybe you should open a ticket to get a clue out of that.

unknown

I have a couple windows 10 machines that can connect without issues.

unknown

There was a Update for Windows 10 at the end of november which has changed the default TLS-Version. Maybe some of your clients don't have this update, so there won't be a problem. As already said, I'm not pretty sure about that, it's just a suggestion.

Did you try to connect with several users on the same machine?

unknown

Thanks for the suggestion. That was my thinking also, but I couldn't find any update that seemed to make a difference. Updates are run automatically, and if they were released in November I doubt that they would still not have run, but I will confirm this.
I did try to connect with several different users on the same machine. All those users can connect fine on my machine on the same connection.

unknown

Okay, did you try to connect with different users on a non-connecting machine also?

Have you already tried to Update your controllers Firmware and tested that again?

unknown

Yes, yes and yes. 🙂 9.10.1.0 build 59 is the latest firmware as far as I can tell.

unknown

you can't do 802.1X with local database you can perform this Type of tunnel with a Radius Server, i guess, then if really you think that it is a 802.1X that you perform try to installate CA certificate on the clients machines and observe

unknown

I am using 802.1x EAP. Where would I get the certificate?

Image_ images_messages_5f91c42c135b77e24799f38a_139a60b94a68ba439c4d865f668cf9f8_RackMultipart201512303447nu5ze-0110913f-4021-48fd-9e52-ee38729ea1e1-146163091.PNG1451468434

Image_ images_messages_5f91c42c135b77e24799f38a_139a60b94a68ba439c4d865f668cf9f8_RackMultipart201512303447nu5ze-0110913f-4021-48fd-9e52-ee38729ea1e1-146163091.PNG1451468434

unknown

i see, it is possible in fact, then upload CA certficate from your zone Director and install on the clients, and try Image_ images_messages_5f91c42c135b77e24799f5f5_daad5054883755b0478d7eb9318f8d31_RackMultipart2015123013855o9db-04d55bc2-ee52-43b5-a695-0589a8ec08ee-1456964780.jpg1451469825

Image_ images_messages_5f91c42c135b77e24799f5f5_daad5054883755b0478d7eb9318f8d31_RackMultipart2015123013855o9db-04d55bc2-ee52-43b5-a695-0589a8ec08ee-1456964780.jpg1451469825

unknown

I'll give that a go and revert. I'm at that client again on Tuesday.

unknown

ok okk no problem

unknown

When I back up the CA certificate it is exported as a .tar.gz file. How do I go about installing that on a Windows client?