EAP Timers Best Practice

MuhammadHasan
Comes here often

EAP Timers Best Practice

Hi Meraki Community,

 

I just want to ask about EAP timer settings and the best and most recommended Practice. Currently, we have below settings and Users are experiencing wireless issues as these timers are crossing values. Please suggest.

 

MuhammadHasan_1-1719204272220.png

 

 

MuhammadHasan_0-1719204189516.png

 

5 Replies 5
rhbirkelund
Kind of a big deal

I don't have the answer, as this is something I've been researching myself. But I've found this, which I've been leaning myself towards.

https://community.cisco.com/t5/wireless-mobility-knowledge-base/eap-timers-on-wireless-lan-controlle...

LinkedIn ::: https://blog.rhbirkelund.dk/

Like what you see? - Give a Kudo ## Did it answer your question? - Mark it as a Solution 🙂

All code examples are provided as is. Responsibility for Code execution lies solely your own.
alemabrahao
Kind of a big deal
Kind of a big deal

In fact, there is no best practice, in some cases adjustments are necessary (very rarely), but in practice what is configured by default is always used.

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
PhilipDAth
Kind of a big deal
Kind of a big deal

I might have to adjust these once in every 1000 installs.  Your deployment is not likely to need these changed.

 

Is the RTT for your RADIUS server under 2s?  If so - you don't need to touch anything.

 

"Currently, we have below settings and Users are experiencing wireless issues as these timers are crossing values"

 

What is the specific issue you are facing?

RaphaelL
Kind of a big deal
Kind of a big deal

Meraki defaults are just fine but the thing that I dislike is that the default doesn't match the timers from the "Aironet/Catalyst" world. I like to have things setup the same everywhere...

Alejandro_F
Meraki Employee
Meraki Employee

The default EAP timers works fine generally speaking. It depends on your topology, where is your RADIUS connected, on premise or in the Cloud? If the answer is Cloud or across a VPN tunnel, it would be good to check the round trip time and increase the timeouts a lit bit. 
Nevertheless your wireless health connection is Excellent, the clients having the connection problems might be not RADIUS timers related. A single client attempting to connect located far from any AP might cause the dashboard health timers to increase.

If you found this post helpful, please give it kudos. If my answer solved your problem, click "accept as solution" so that others can benefit from it.
Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels