none
Problem with Windows XP tablet and IAS

    Question

  • Hi there,

    using like +30 WinXP old tablets; they connect via Wireless (WLC) and then authenticate against a IAS Radius.

    Everything works fine but sometimes a random tablet stops working and it fails the auth process all the time. The only way to solve this issue is to connect this tablet via ethernet, let it authenticate, and the connect again to the wireless network.

    Client NIC

    Modelo: Intel (R) Wireless WiFi Link 4965AG
    Versión controlador: 11.5.0.32

    Failing:

    10.84.94.11,host/UME0703.csub.scs.es,03/09/2012,14:21:25,IAS,SERVSWF2,4128,WLC5500-1,31,00-1f-3b-0b-80-cd,30,00-27-0d-09-32-00:Hosbellsf,5,13,4,10.84.94.11,32,WLC5500-01,26,0x00003763010600000001,6,2,12,1300,61,19,64,13,65,6,81,402,4108,10.84.94.11,4116,9,4155,1,4154,Use Windows authentication for all users,4129,DCSUB\UME0703$,4149,802.1.x,25,311 1 10.84.50.22 02/03/2012 15:00:55 1881853,4127,11,4130,csub.scs.es/Computers Unidos/Portatiles/Tablets/UME0703,4136,1,4142,0


    10.84.94.11,host/UME0703.csub.scs.es,03/09/2012,14:21:25,IAS,SERVSWF2,4128,WLC5500-1,25,311 1 10.84.50.22 02/03/2012 15:00:55 1881853,4127,11,4130,csub.scs.es/Computers Unidos/Portatiles/Tablets/UME0703,4149,802.1.x,4129,DCSUB\UME0703$,4154,Use Windows authentication for all users,4155,1,4116,9,4108,10.84.94.11,4136,3,4142,262

    Working:

    10.84.94.11,host/UME0905.csub.scs.es,03/09/2012,14:21:59,IAS,SERVSWF2,4128,WLC5500-1,31,00-1f-3b-21-1c-6b,30,00-27-0d-09-43-20:Hosbellsf,5,13,4,10.84.94.11,32,WLC5500-01,26,0x00003763010600000001,6,2,12,1300,61,19,64,13,65,6,81,402,4108,10.84.94.11,4116,9,4155,1,4154,Use Windows authentication for all users,4129,DCSUB\UME0905$,4149,802.1.x,25,311 1 10.84.50.22 02/03/2012 15:00:55 1881870,4132,Secured password (EAP-MSCHAP v2),4127,11,4130,csub.scs.es/Computers Unidos/Portatiles/Tablets/UME0905,4136,1,4142,0


    10.84.94.11,host/UME0905.csub.scs.es,03/09/2012,14:21:59,IAS,SERVSWF2,4128,WLC5500-1,25,311 1 10.84.50.22 02/03/2012 15:00:55 1881870,4132,Secured password (EAP-MSCHAP v2),4127,11,8100,0,4120,0x0144435355,4130,csub.scs.es/Computers Unidos/Portatiles/Tablets/UME0905,64,13,81,vlan702,4108,10.84.94.11,4116,9,65,6,4155,1,4154,Use Windows authentication for all users,4129,DCSUB\UME0905$,4149,802.1.x,7,1,6,2

    Any idea of what could be happening?

    Thanks a lot!

    Tuesday, March 27, 2012 4:14 PM

All replies

  • Hi Mitheor,

    Thanks for posting here.

    So it seems the wireless authentication will success when using EAP-MSCHAP v2 as the authentication method , so could you general describe the entries (authentication method ..etc)we specified in the wireless profile on these tables and also the policies we defined in IAS?

    Meanwhile, did we also get any error/warring message relate with this authentication issue form client which might include reason code or event ID.

    802.1X-authenticated network connectivity problems
    http://technet.microsoft.com/en-us/library/cc773359(WS.10).aspx#BKMK_QL_OneX

    Troubleshooting IEEE 802.11 Wireless Access with Microsoft Windows
    http://technet.microsoft.com/en-us/library/bb457017.aspx

    Configuring Wireless Settings Using Windows Server 2003 Group Policy
    http://technet.microsoft.com/en-us/library/bb878079.aspx

    Regards,

    Tiger Li

    TechNet Subscriber Support in forum
    If you have any feedback on our support, please contact  tnmff@microsoft.com.


    Tiger Li

    TechNet Community Support

    Wednesday, March 28, 2012 3:47 AM
  • Hi again and thanks for the answer,

    screenshots of client side config:

    Tablets does not use certificates, the authenticate instead using EAP-MSCHAP v2.

    If you need for me to translate any of those lines just let me know.

    In the tablet there is no error, just trying to connect endlessly.

    I´m checking the windows traces but i´m not seeying nothing useful  :$   Probably my fault because i´m not used to browse this files.

    Wednesday, March 28, 2012 2:42 PM
  • Hi Mitheor,

    Thanks for update.

    So please first collect these information from both wireless client and IAS/RADIUS server with following the introductions in the article I posted and upload here(SkyDrive maybe and we can post the URL here ). Once we get these data, it should be more easier for us to narrow it down:

    Troubleshooting IEEE 802.11 Wireless Access with Microsoft Windows
    http://technet.microsoft.com/en-us/library/bb457017.aspx

    We had also some potential known issues when we do 802.1x authentication on Windows XP clients which has been fixed by corresponding hotfixes, the detail information could be acquired from the blog post below:

    Possible problems seen after upgrading Windows XP clients to SP3 in an environment that uses wired 802.1x
    http://blogs.technet.com/b/networking/archive/2009/12/16/possible-problems-seen-after-upgrading-windows-xp-clients-to-sp3-in-an-environment-that-uses-wired-802-1x.aspx

    Otherwise I think we might get misconfiguration caused that and hope the collected data will help.

    Regards,

    Tiger Li

    TechNet Subscriber Support in forum
    If you have any feedback on our support, please contact  tnmff@microsoft.com.


    Tiger Li

    TechNet Community Support

    Thursday, March 29, 2012 3:07 AM
  • Hi Mitheor,

    If there is any update on this issue, please feel free to let us know.

    Regards,

    Tiger Li

    TechNet Subscriber Support in forum
    If you have any feedback on our support, please contact  tnmff@microsoft.com.


    Tiger Li

    TechNet Community Support

    Monday, April 02, 2012 8:37 AM