topic Unable to authenticate every morning (spesific time) in Wireless Questions and Best Practices

Unable to authenticate every morning (spesific time)

andi_achridhan_ — Mon, 27 Aug 2018 05:23:34 GMT

Hi Experts..
I have 86 Access Point that have same problem every morning, most client cant login authentication and connect until 10am while some other (only 1 per 8 client) can login before that time

Im using 3 Active Directory for AAA Servers

I had try to ping each Access Point ip's reply
ping AAA server ip from Network Connectivity reply
try Test Authentication/Accounting Servers login for each AD and success

this is weird because this issue only before 10am everyday and solve itself without changing any configuration

how to check and solve this issue..

here events what I got

Re: Unable to authenticate every morning (spesific time)

hyosang_choi — Mon, 27 Aug 2018 06:35:39 GMT

In wired port side aaa server or controller, try to capture a packet dump.

Re: Unable to authenticate every morning (spesific time)

lou_kalis — Mon, 27 Aug 2018 13:40:34 GMT

Any firewall rules with scheduling policies?

Re: Unable to authenticate every morning (spesific time)

andi_achridhan_ — Tue, 28 Aug 2018 01:39:50 GMT

how to capture the packet dump?

Re: Unable to authenticate every morning (spesific time)

andi_achridhan_ — Tue, 28 Aug 2018 01:48:57 GMT

yes.. but the filewall only drop traffic 9PM to 1AM
today I got same issue.. it's 8:45AM here and most client can't login

alarm starting to show..

update : now it's 9:19am.. 337/458 clients Authorize.. seem today they can login faster than before

Re: Unable to authenticate every morning (spesific time)

hyosang_choi — Tue, 28 Aug 2018 02:45:19 GMT

Use wireshark though mirroring.

Re: Unable to authenticate every morning (spesific time)

hyosang_choi — Tue, 28 Aug 2018 02:47:20 GMT

If so, it may problem of firewall side.

Check a policy for udp packet forwarding.

ex. you can disable a policy for udp flooding.

Re: Unable to authenticate every morning (spesific time)

andi_achridhan_ — Tue, 04 Sep 2018 06:19:27 GMT

So should I allow udp flooding to solve this issue or the opposite