client authentication issues

  • 1
  • Question
  • Updated 2 years ago
I have a couple of clients not able to connect to a wireless network from the Ruckus. They can connect to other networks fine, and other laptops connect to the network fine.
Setup is: Ruckus ZoneDirector1106 with 9.10.1.0 build 59 with two AP's.
The problem clients have different operating systems.
If I duplicate the network and change the authentication from 802.1x-eap to 'open' the clients can connect.

Please assist. 
Photo of Jean Opperman

Jean Opperman

  • 9 Posts
  • 0 Reply Likes
  • frustrated

Posted 2 years ago

  • 1
Photo of Jean Opperman

Jean Opperman

  • 9 Posts
  • 0 Reply Likes
We want to authenticate using EAP.
Photo of Jean-Fabrice Adouby

Jean-Fabrice Adouby

  • 10 Posts
  • 1 Reply Like
what are this couple of clients, operating system?  what RadiusServer do you use?
Photo of Jean Opperman

Jean Opperman

  • 9 Posts
  • 0 Reply Likes
Some Windows 10 some Windows 7.
I'm using the local database, we do not have a server.
Photo of Simon Bührer

Simon Bührer

  • 13 Posts
  • 0 Reply Likes
Windows 10 is using TLS 1.2 per default. I'm not sure wether the ZD can use this TLS-Version. Maybe you should open a ticket to get a clue out of that.
Photo of Jean Opperman

Jean Opperman

  • 9 Posts
  • 0 Reply Likes
I have a couple windows 10 machines that can connect without issues.
Photo of Simon Bührer

Simon Bührer

  • 13 Posts
  • 0 Reply Likes
There was a Update for Windows 10 at the end of november which has changed the default TLS-Version. Maybe some of your clients don't have this update, so there won't be a problem. As already said, I'm not pretty sure about that, it's just a suggestion.

Did you try to connect with several users on the same machine?
Photo of Jean Opperman

Jean Opperman

  • 9 Posts
  • 0 Reply Likes
Thanks for the suggestion. That was my thinking also, but I couldn't find any update that seemed to make a difference. Updates are run automatically, and if they were released in November I doubt that they would still not have run, but I will confirm this.
I did try to connect with several different users on the same machine. All those users can connect fine on my machine on the same connection.
Photo of Simon Bührer

Simon Bührer

  • 13 Posts
  • 0 Reply Likes
Okay, did you try to connect with different users on a non-connecting machine also?

Have you already tried to Update your controllers Firmware and tested that again?
Photo of Jean Opperman

Jean Opperman

  • 9 Posts
  • 0 Reply Likes
Yes, yes and yes. :-) 9.10.1.0 build 59 is the latest firmware as far as I can tell.
Photo of Jean-Fabrice Adouby

Jean-Fabrice Adouby

  • 10 Posts
  • 1 Reply Like
you can't do 802.1X with local database you can perform this Type of tunnel with a Radius Server, i guess, then if really you think that it is a 802.1X that you perform try to installate CA certificate on the clients machines and observe 
Photo of Jean Opperman

Jean Opperman

  • 9 Posts
  • 0 Reply Likes
I am using 802.1x EAP. Where would I get the certificate?

Photo of Jean-Fabrice Adouby

Jean-Fabrice Adouby

  • 10 Posts
  • 1 Reply Like
i see, it is possible in fact, then upload CA certficate from your zone Director and install on the clients, and try
Photo of Jean Opperman

Jean Opperman

  • 9 Posts
  • 0 Reply Likes
I'll give that a go and revert. I'm at that client again on Tuesday.
Photo of Jean-Fabrice Adouby

Jean-Fabrice Adouby

  • 10 Posts
  • 1 Reply Like
ok okk no problem
Photo of Jean Opperman

Jean Opperman

  • 9 Posts
  • 0 Reply Likes
When I back up the CA certificate it is exported as a .tar.gz file. How do I go about installing that on a Windows client?