Unable to authenticate every morning (spesific time)

  • 1
  • Question
  • Updated 2 months ago
  • (Edited)
Hi Experts..
I have 86 Access Point that have same problem every morning, most client cant login authentication and connect until 10am while some other (only 1 per 8 client) can login before that time

Im using 3 Active Directory for AAA Servers

I had try to ping each Access Point ip's reply
ping AAA server ip from Network Connectivity reply
try Test Authentication/Accounting Servers login for each AD and success

this is weird because this issue only before 10am everyday and solve itself without changing any configuration

how to check and solve this issue..

here events what I got


Photo of Andi Achridhan Amdari

Andi Achridhan Amdari

  • 4 Posts
  • 0 Reply Likes
  • confused

Posted 3 months ago

  • 1
Photo of Jeronimo

Jeronimo

  • 264 Posts
  • 28 Reply Likes
In wired port side aaa server or controller, try to capture a packet dump.
Photo of Andi Achridhan Amdari

Andi Achridhan Amdari

  • 4 Posts
  • 0 Reply Likes
how to capture the packet dump?
Photo of Jeronimo

Jeronimo

  • 264 Posts
  • 28 Reply Likes
Use wireshark though mirroring.
Photo of Lou Kalis

Lou Kalis

  • 17 Posts
  • 2 Reply Likes
Any firewall rules with scheduling policies?  
Photo of Andi Achridhan Amdari

Andi Achridhan Amdari

  • 4 Posts
  • 0 Reply Likes
yes.. but the filewall only drop traffic 9PM to 1AM
today I got same issue.. it's 8:45AM here and most client can't login



alarm starting to show..

update : now it's 9:19am.. 337/458 clients Authorize.. seem today they can login faster than before
(Edited)
Photo of Jeronimo

Jeronimo

  • 264 Posts
  • 28 Reply Likes
If so, it may  problem of firewall side.

Check a policy for udp packet forwarding.

ex. you can disable a policy for udp flooding.
Photo of Andi Achridhan Amdari

Andi Achridhan Amdari

  • 4 Posts
  • 0 Reply Likes
So should I allow udp flooding to solve this issue or the opposite