Filter
Top Products
The Failed Attempts active.csv page appears.
The Authen−Failure−Code (Authentication) error messages are usually easy to understand.
In this example, the Cisco 7920 tried to authenticate before the user name fred was entered into the
user database on the Cisco Secure ACS. You might also get this message if the Cisco 7920 is
configured with an incorrect user name.
Another common error message is CS MSCHAP password invalid, which indicated that the
user entered the wrong password.
5.
Check for IP Configuration Problems
Incorrect IP Address on the Cisco Aironet 1200 AP for the Cisco Secure ACSVerify that the Cisco
Aironet 1200 AP configuration has the correct IP address for the Cisco Secure ACS. Log in to the Cisco
Aironet 1200 AP, and choose Setup > Security > Authentication Server to verify the IP address
configuration.
IP Connectivity ProblemVerify that the Cisco Secure ACS can ping the Cisco Aironet 1200 AP. If it can
not, then you will need to resolve any IP connectivity issues before LEAP will work. Look for default
gateway issues on the Cisco Aironet 1200 AP. Log in to the 1200 AP, and choose Setup > Express Setup to
verify the current IP configuration. On the Cisco Secure ACS, issue the ipconfig /all command from a
command prompt.
Native VLAN ProblemThe Cisco Aironet 1200 AP sends all authentication traffic on the native VLAN.
Verify that the 1200 AP is using the correct native VLAN to send traffic to the Cisco Secure ACS. Log in to
the Cisco Aironet 1200 AP, and choose Setup > VLAN. Issue the show interface fastethernet 2/3
switchport to verify that the 1200 AP port is configured for the correct native VLAN.
2924XL# show interface fastethernet 2/3 switchport
Name: Fa2/3
Switchport: Enabled
Administrative mode: trunk
Operational Mode: trunk
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: dot1q
Negotiation of Trunking: Disabled
Access Mode VLAN: 0 ((Inactive))
Trunking Native Mode VLAN: 1 (default)
Trunking VLANs Enabled: ALL
Trunking VLANs Active: 1−10
Pruning VLANs Enabled: 2−1001
Priority for untagged frames: 0
Override vlan tag priority: FALSE
Voice VLAN: none
Appliance trust: none
Inter−VLAN Routing ProblemIf the Cisco Secure ACS is on a different VLAN, then you must have