AP not authenticating PEAP with AES via 802.1x?

[jlazzaro]

3Com 8750 AP, trying to authenticate using WPA with AES encryption. Authentication method is PEAP w/ EAP-MSCHAP v2 through a Radius server. Everything on the radius side seems to be working, but I still cannot authenticate. Near the bottom of the log it says Sent challenge response for user CENAD\e1imxjlx to client 3COM 8750, but it seems to end there. Is the AP not sending a response back or what? Any comments to help jog my memory are appreciated...

05/10/2006 09:08:46 -----------------------------------------------------------
05/10/2006 09:08:46 Authentication Request
05/10/2006 09:08:46 Received from: ip=155.78.75.14 port=1120
05/10/2006 09:08:46
05/10/2006 09:08:46 Raw Packet :
05/10/2006 09:08:46 000: 01470092 79157915 79157915 79157915 |.G..y.y.y.y.y.y.|
05/10/2006 09:08:46 010: 79157915 04069b4e 4b0e3d06 00000013 |y.y....NK.=.....|
05/10/2006 09:08:46 020: 05060000 00010c06 00000578 01104345 |...........x..CE|
05/10/2006 09:08:46 030: 4e41445c 6531696d 786a6c78 1f0e3030 |NAD\e1imxjlx..00|
05/10/2006 09:08:46 040: 30643838 35363065 62341e0e 30303134 |0d88560eb4..0014|
05/10/2006 09:08:46 050: 37633037 64303964 20133343 6f6d2041 |7c07d09d .3Com A|
05/10/2006 09:08:46 060: 63636573 7320506f 696e744f 15020100 |ccess PointO....|
05/10/2006 09:08:46 070: 13014345 4e41445c 6531696d 786a6c78 |..CENAD\e1imxjlx|
05/10/2006 09:08:46 080: 501249c4 14c21f76 7e1be9a9 5a3aa0e5 |P.I....v~...Z:..|
05/10/2006 09:08:46 090: 38ac |8. |
05/10/2006 09:08:46
05/10/2006 09:08:46 -----------------------------------------------------------
05/10/2006 09:08:46 E:\build\sbrnt\SBR\xradius\radauthd.c radAuthHandleRequest() 2696 Entering
05/10/2006 09:08:46 Looking up shared secret
05/10/2006 09:08:46 Looking for RAS client 155.78.75.14 in DB
05/10/2006 09:08:46 Matched 155.78.75.14 to RAS client 3COM 8750
05/10/2006 09:08:46 Parsing request
05/10/2006 09:08:46 Initializing cache entry
05/10/2006 09:08:46 Doing inventory check on request
05/10/2006 09:08:46 Getting info on requesting client
05/10/2006 09:08:46 NAS-IP-Address in request: 155.78.75.14
05/10/2006 09:08:46 -----------------------------------------------------------
05/10/2006 09:08:46 Authentication Request
05/10/2006 09:08:46 Received From: ip=155.78.75.14 port=1120
05/10/2006 09:08:46 Packet : Code = 0x1 ID = 0x47
05/10/2006 09:08:46 Client Name = 3COM 8750 Dictionary Name = Radius.dct
05/10/2006 09:08:46 Vector =
05/10/2006 09:08:46 000: 79157915 79157915 79157915 79157915 |y.y.y.y.y.y.y.y.|
05/10/2006 09:08:46 Parsed Packet =
05/10/2006 09:08:46 NAS-IP-Address : IPAddress = 155.78.75.14
05/10/2006 09:08:46 NAS-Port-Type : Integer Value = 19
05/10/2006 09:08:46 NAS-Port : Integer Value = 1
05/10/2006 09:08:46 Framed-MTU : Integer Value = 1400
05/10/2006 09:08:46 User-Name : String Value = CENAD\e1imxjlx
05/10/2006 09:08:46 Calling-Station-Id : String Value = 000d88560eb4
05/10/2006 09:08:46 Called-Station-Id : String Value = 00147c07d09d
05/10/2006 09:08:46 NAS-Identifier : String Value = 3Com Access Point
05/10/2006 09:08:46 EAP-Message : Value =
05/10/2006 09:08:46 000: 02010013 0143454e 41445c65 31696d78 |.....CENAD\e1imx|
05/10/2006 09:08:46 010: 6a6c78 |jlx |
05/10/2006 09:08:46 -----------------------------------------------------------
05/10/2006 09:08:46 Determining if request is for a tunnel
05/10/2006 09:08:46 Determining if this radius should act as a proxy
05/10/2006 09:08:46 Determining user class
05/10/2006 09:08:46 Auto EAP protocol 26 selected as pre-processor of Windows Domain Group authentication method for user CENAD\e1imxjlx
05/10/2006 09:08:46 Authenticating user CENAD\e1imxjlx with automatic EAP helper method EAP-MS-CHAP-V2
05/10/2006 09:08:46 EAP MS-CHAP-V2 sub-protocol processing started for username CENAD\e1imxjlx
05/10/2006 09:08:46 EAP MS-CHAP-V2 sub-protocol issuing challenge
05/10/2006 09:08:46 Sent challenge response for user CENAD\e1imxjlx to client 3COM 8750
05/10/2006 09:08:46 -----------------------------------------------------------
05/10/2006 09:08:46 Authentication Response
05/10/2006 09:08:46 Packet : Code = 0xb ID = 0x47
05/10/2006 09:08:46 Vector =
05/10/2006 09:08:46 000: 25a2262a 6f9fd6fe e8fc00a7 35522025 |%.&*o.......5R %|
05/10/2006 09:08:46 State : String Value = SBR-CH 94|1
05/10/2006 09:08:46 EAP-Message : Value =
05/10/2006 09:08:46 000: 0102002d 1a010200 2810632c 50b7c5f4 |...-....(.c,P...|
05/10/2006 09:08:46 010: e1db1400 1421d679 13305374 65656c2d |.....!.y.0Steel-|
05/10/2006 09:08:46 020: 42656c74 65642052 61646975 73 |Belted Radius |
05/10/2006 09:08:46 Session-Timeout : Integer Value = 120
05/10/2006 09:08:46 -----------------------------------------------------------
05/10/2006 09:08:46 -----------------------------------------------------------
05/10/2006 09:08:46 Authentication Response
05/10/2006 09:08:46 Sent to: ip=155.78.75.14 port=1120
05/10/2006 09:08:46
05/10/2006 09:08:46 Raw Packet :
05/10/2006 09:08:46 000: 0b470069 25a2262a 6f9fd6fe e8fc00a7 |.G.i%.&*o.......|
05/10/2006 09:08:46 010: 35522025 180e5342 522d4348 2039347c |5R %..SBR-CH 94||
05/10/2006 09:08:46 020: 31004f2f 0102002d 1a010200 2810632c |1.O/...-....(.c,|
05/10/2006 09:08:46 030: 50b7c5f4 e1db1400 1421d679 13305374 |P........!.y.0St|
05/10/2006 09:08:46 040: 65656c2d 42656c74 65642052 61646975 |eel-Belted Radiu|
05/10/2006 09:08:46 050: 731b0600 00007850 123dd723 85939cbb |s.....xP.=.#....|
05/10/2006 09:08:46 060: 4618a4a1 62819b31 f3 |F...b..1. |
05/10/2006 09:08:46
05/10/2006 09:08:46 -----------------------------------------------------------
05/10/2006 09:08:46 Packet containing 105 bytes successfully sent
05/10/2006 09:08:46 E:\build\sbrnt\SBR\xradius\radauthd.c radAuthHandleRequest() 3380 Exiting

 

[nweaver]

what is the client card? Does the client card support WPA2 and PEAP/MSChap?

 

[jlazzaro]

Tried on multiple clients that all support those protocols. Even tried it on a laptop that had a 3Com card/software that was designed to be used with this AP.