topic Re: client authentication issues in ZoneDirector

client authentication issues

jean_opperman — Tue, 29 Dec 2015 13:33:33 GMT

I have a couple of clients not able to connect to a wireless network from the Ruckus. They can connect to other networks fine, and other laptops connect to the network fine.
Setup is: Ruckus ZoneDirector1106 with 9.10.1.0 build 59 with two AP's.
The problem clients have different operating systems.
If I duplicate the network and change the authentication from 802.1x-eap to 'open' the clients can connect.

Please assist.

Re: client authentication issues

jean_opperman — Tue, 29 Dec 2015 13:34:48 GMT

We want to authenticate using EAP.

Re: client authentication issues

jean_fabrice_ad — Tue, 29 Dec 2015 15:05:57 GMT

what are this couple of clients, operating system? what RadiusServer do you use?

Re: client authentication issues

jean_opperman — Wed, 30 Dec 2015 06:06:50 GMT

Some Windows 10 some Windows 7.
I'm using the local database, we do not have a server.

Re: client authentication issues

simon_b_hrer_73 — Wed, 30 Dec 2015 07:03:22 GMT

Windows 10 is using TLS 1.2 per default. I'm not sure wether the ZD can use this TLS-Version. Maybe you should open a ticket to get a clue out of that.

Re: client authentication issues

jean_opperman — Wed, 30 Dec 2015 07:06:38 GMT

I have a couple windows 10 machines that can connect without issues.

Re: client authentication issues

simon_b_hrer_73 — Wed, 30 Dec 2015 07:10:31 GMT

There was a Update for Windows 10 at the end of november which has changed the default TLS-Version. Maybe some of your clients don't have this update, so there won't be a problem. As already said, I'm not pretty sure about that, it's just a suggestion.

Did you try to connect with several users on the same machine?

Re: client authentication issues

jean_opperman — Wed, 30 Dec 2015 07:14:48 GMT

Thanks for the suggestion. That was my thinking also, but I couldn't find any update that seemed to make a difference. Updates are run automatically, and if they were released in November I doubt that they would still not have run, but I will confirm this.
I did try to connect with several different users on the same machine. All those users can connect fine on my machine on the same connection.

Re: client authentication issues

simon_b_hrer_73 — Wed, 30 Dec 2015 07:26:00 GMT

Okay, did you try to connect with different users on a non-connecting machine also?

Have you already tried to Update your controllers Firmware and tested that again?

Re: client authentication issues

jean_opperman — Wed, 30 Dec 2015 07:31:36 GMT

Yes, yes and yes. 🙂 9.10.1.0 build 59 is the latest firmware as far as I can tell.

Re: client authentication issues

jean_fabrice_ad — Wed, 30 Dec 2015 08:13:10 GMT

you can't do 802.1X with local database you can perform this Type of tunnel with a Radius Server, i guess, then if really you think that it is a 802.1X that you perform try to installate CA certificate on the clients machines and observe

Re: client authentication issues

jean_opperman — Wed, 30 Dec 2015 09:40:46 GMT

I am using 802.1x EAP. Where would I get the certificate?

Re: client authentication issues

jean_fabrice_ad — Wed, 30 Dec 2015 10:04:59 GMT

i see, it is possible in fact, then upload CA certficate from your zone Director and install on the clients, and try

Re: client authentication issues

jean_opperman — Wed, 30 Dec 2015 10:22:52 GMT

I'll give that a go and revert. I'm at that client again on Tuesday.

Re: client authentication issues

jean_fabrice_ad — Wed, 30 Dec 2015 11:35:41 GMT

ok okk no problem

Re: client authentication issues

jean_opperman — Tue, 12 Jan 2016 14:17:29 GMT

When I back up the CA certificate it is exported as a .tar.gz file. How do I go about installing that on a Windows client?