Sporadic radius login problems

[LakesideLion]

Has anyone have this occur with them?

We're seeing sporadic radius login failures happening with different APs and clients.

Client failed 802.1X authentication to the RADIUS server.auth_mode='wpa3-802.1x' vlan_id='1103' radius_proto='ipv4' radius_ip='172.16.1.18' reason='radius_login_failure' radio='1' vap='6' channel='44' rssi='23'

How does this sometimes happen?  This is preventing some from authenticating.

[alemabrahao]

What TLS version is your Raius server using? It appears to be a problem related to the TLS version.

[LakesideLion]

We're using NPS as the radius server.   It looks like 1.0, 1.1 and 1.2 are all enabled.

[PhilipDAth]

I notice you are using WPA3 (wpa3-802.1x).  I have not found WPA3 mature enough to deploy into production environments.  I would drop back to WPA2 and wait 12 more months.

Windows itself has WPA3 issues.  Microsoft is scheduled to release the fix for that in April 2024.