PEAP(EAP-MSCHAPv2) Using ISE and AD

Hi,

I'm working on "PEAP(EAP-MSCHAPv2) Using ISE and AD" lab but I can't complete it. IP Phone authenticates without any problems but for Win7 I got error message:

 

"No response received during 120 seconds on last EAP message sent to the client: 5411 No response received during 120 seconds on last EAP message sent to client"

 

"SW1#
%AUTHMGR-5-START: Starting 'mab' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000B001CF651
%MAB-5-FAIL: Authentication failed for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000B001CF651
%AUTHMGR-7-RESULT: Authentication result 'no-response' from 'mab' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000B001CF651
%AUTHMGR-7-FAILOVER: Failing over from 'mab' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000B001CF651
%AUTHMGR-5-START: Starting 'dot1x' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000B001CF651
SW1#
%AUTHMGR-5-START: Starting 'mab' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000C001ED4FD
%MAB-5-FAIL: Authentication failed for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000C001ED4FD
%AUTHMGR-7-RESULT: Authentication result 'no-response' from 'mab' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000C001ED4FD
%AUTHMGR-7-FAILOVER: Failing over from 'mab' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000C001ED4FD
%AUTHMGR-5-START: Starting 'dot1x' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000C001ED4FD

"

I see the problem occuers after "Radius Access Challenge" message:

 

image

 

Did someone have similar problem with this lab ?

Thanks

Hubert

 

Comments

  • I'm just doing those labs right now, and I didn't have a problem on that one.
    Did you go in and type the user/pass into the saved credentials area?

    I didn't get it to work with the Cisco Anyconnect, only with windows supplicant.  For some reason the any connect would never ask for the user/pass.
    -Dan



    On Sep 30, 2013, at 8:13 PM, HubertW <[email protected]> wrote:

    Hi,

    I'm working on "PEAP(EAP-MSCHAPv2) Using ISE and AD" lab but I can't complete it. IP Phone authenticates without any problems but for Win7 I got error message:

     

    "No response received during 120 seconds on last EAP message sent to the client: 5411 No response received during 120 seconds on last EAP message sent to client"

     

    "SW1#
    %AUTHMGR-5-START: Starting 'mab' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000B001CF651
    %MAB-5-FAIL: Authentication failed for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000B001CF651
    %AUTHMGR-7-RESULT: Authentication result 'no-response' from 'mab' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000B001CF651
    %AUTHMGR-7-FAILOVER: Failing over from 'mab' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000B001CF651
    %AUTHMGR-5-START: Starting 'dot1x' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000B001CF651
    SW1#
    %AUTHMGR-5-START: Starting 'mab' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000C001ED4FD
    %MAB-5-FAIL: Authentication failed for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000C001ED4FD
    %AUTHMGR-7-RESULT: Authentication result 'no-response' from 'mab' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000C001ED4FD
    %AUTHMGR-7-FAILOVER: Failing over from 'mab' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000C001ED4FD
    %AUTHMGR-5-START: Starting 'dot1x' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000C001ED4FD

    "

    I see the problem occuers after "Radius Access Challenge" message:

     

     

    Did someone have similar problem with this lab ?

    Thanks

    Hubert

     



    INE - The Industry Leader in CCIE Preparation
    http://www.INE.com

    Subscription information may be found at:
    http://www.ieoc.com/forums/ForumSubscriptions.aspx

  • some time rebouncing the port or rebooting the pc can solve it. check for any other red lines or post snapshot from live authentication page.

  • Ok, I will check it tomorrow once again. I loaded a next lab now

    @artagel - yes I provided correct username/pass; for AnyConnect credentials I was asked after 10-20 sec

     

    Thanks

    Hubert

  • Did you force Anyconnect to use only your 802.1x
    Profile? Cause otherwise it jumps to the default one
    Called wired.
    Regards,
    Cristian.

    Sent from my iPhone

    On Sep 30, 2013, at 14:20, artagel <[email protected]> wrote:

    I'm just doing those labs right now, and I didn't have a problem on that one.
    Did you go in and type the user/pass into the saved credentials area?

    I didn't get it to work with the Cisco Anyconnect, only with windows supplicant.  For some reason the any connect would never ask for the user/pass.
    -Dan



    On Sep 30, 2013, at 8:13 PM, HubertW <[email protected]> wrote:

    Hi,

    I'm working on "PEAP(EAP-MSCHAPv2) Using ISE and AD" lab but I can't complete it. IP Phone authenticates without any problems but for Win7 I got error message:

     

    "No response received during 120 seconds on last EAP message sent to the client: 5411 No response received during 120 seconds on last EAP message sent to client"

     

    "SW1#
    %AUTHMGR-5-START: Starting 'mab' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000B001CF651
    %MAB-5-FAIL: Authentication failed for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000B001CF651
    %AUTHMGR-7-RESULT: Authentication result 'no-response' from 'mab' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000B001CF651
    %AUTHMGR-7-FAILOVER: Failing over from 'mab' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000B001CF651
    %AUTHMGR-5-START: Starting 'dot1x' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000B001CF651
    SW1#
    %AUTHMGR-5-START: Starting 'mab' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000C001ED4FD
    %MAB-5-FAIL: Authentication failed for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000C001ED4FD
    %AUTHMGR-7-RESULT: Authentication result 'no-response' from 'mab' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000C001ED4FD
    %AUTHMGR-7-FAILOVER: Failing over from 'mab' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000C001ED4FD
    %AUTHMGR-5-START: Starting 'dot1x' for client (48f8.b32b.24a3) on Interface Fa1/0/5 AuditSessionID 000000000000000C001ED4FD

    "

    I see the problem occuers after "Radius Access Challenge" message:

     

     

    Did someone have similar problem with this lab ?

    Thanks

    Hubert

     



    INE - The Industry Leader in CCIE Preparation
    http://www.INE.com

    Subscription information may be found at:
    http://www.ieoc.com/forums/ForumSubscriptions.aspx




    INE - The Industry Leader in CCIE Preparation

    http://www.INE.com



    Subscription information may be found at:

    http://www.ieoc.com/forums/ForumSubscriptions.aspx
  • Or disable/enable the USB NIC from test-PC-a.

    Sent from my iPhone

    On Sep 30, 2013, at 14:27, Phoenix <[email protected]> wrote:

    some time rebouncing the port or rebooting the issue can solve it. check for any other red lines or post snapshot from live authentication page.




    INE - The Industry Leader in CCIE Preparation

    http://www.INE.com



    Subscription information may be found at:

    http://www.ieoc.com/forums/ForumSubscriptions.aspx
Sign In or Register to comment.