Ruckus Wireless

New Post

client authentication issues

Question
Updated 4 years ago

I have a couple of clients not able to connect to a wireless network from the Ruckus. They can connect to other networks fine, and other laptops connect to the network fine.
Setup is: Ruckus ZoneDirector1106 with 9.10.1.0 build 59 with two AP's.
The problem clients have different operating systems.
If I duplicate the network and change the authentication from 802.1x-eap to 'open' the clients can connect.

Please assist.

9 Posts
0 Reply Likes
frustrated

Posted 4 years ago

1
3

9 Posts
0 Reply Likes

We want to authenticate using EAP.

Comment

Jean-Fabrice Adouby

10 Posts
1 Reply Like

what are this couple of clients, operating system? what RadiusServer do you use?

Comment

9 Posts
0 Reply Likes

Some Windows 10 some Windows 7.
I'm using the local database, we do not have a server.

Comment

14 Posts
1 Reply Like

Windows 10 is using TLS 1.2 per default. I'm not sure wether the ZD can use this TLS-Version. Maybe you should open a ticket to get a clue out of that.

Comment

9 Posts
0 Reply Likes

I have a couple windows 10 machines that can connect without issues.

Comment

14 Posts
1 Reply Like

There was a Update for Windows 10 at the end of november which has changed the default TLS-Version. Maybe some of your clients don't have this update, so there won't be a problem. As already said, I'm not pretty sure about that, it's just a suggestion.

Did you try to connect with several users on the same machine?

Comment

9 Posts
0 Reply Likes

Thanks for the suggestion. That was my thinking also, but I couldn't find any update that seemed to make a difference. Updates are run automatically, and if they were released in November I doubt that they would still not have run, but I will confirm this.
I did try to connect with several different users on the same machine. All those users can connect fine on my machine on the same connection.

Comment

14 Posts
1 Reply Like

Okay, did you try to connect with different users on a non-connecting machine also?

Have you already tried to Update your controllers Firmware and tested that again?

Comment

9 Posts
0 Reply Likes

Yes, yes and yes. :-) 9.10.1.0 build 59 is the latest firmware as far as I can tell.

Comment

Jean-Fabrice Adouby

10 Posts
1 Reply Like

you can't do 802.1X with local database you can perform this Type of tunnel with a Radius Server, i guess, then if really you think that it is a 802.1X that you perform try to installate CA certificate on the clients machines and observe

Comment

9 Posts
0 Reply Likes

I am using 802.1x EAP. Where would I get the certificate?

Image https//d2r1vs3d9006apcloudfrontnet/s3_images/1337723/RackMultipart20151230-3447-nu5zev-EAP_inlinePNG1451468434

Image https//d2r1vs3d9006apcloudfrontnet/s3_images/1337723/RackMultipart20151230-3447-nu5zev-EAP_inlinePNG1451468434

Comment

Jean-Fabrice Adouby

10 Posts
1 Reply Like

i see, it is possible in fact, then upload CA certficate from your zone Director and install on the clients, and try Image https//d2r1vs3d9006apcloudfrontnet/s3_images/1337728/RackMultipart20151230-13855-o9dbju-Sans_titre_inlinejpg1451469825

Image https//d2r1vs3d9006apcloudfrontnet/s3_images/1337728/RackMultipart20151230-13855-o9dbju-Sans_titre_inlinejpg1451469825

Comment

9 Posts
0 Reply Likes

I'll give that a go and revert. I'm at that client again on Tuesday.

Comment

Jean-Fabrice Adouby

10 Posts
1 Reply Like

ok okk no problem

Comment

9 Posts
0 Reply Likes

When I back up the CA certificate it is exported as a .tar.gz file. How do I go about installing that on a Windows client?

Comment

1
3