auth server rejected the auth request problem

[Keith_Li]

Dear All,

             Would like to ask we encountered below issue, just wonder any configuration can be modify in meraki dashboard side rather than in radius side ? any help would be appreicated 

Failed connection to SSID WiFi - internal on access point Office-5 during authentication because the auth server rejected the auth request.

CHANNEL

56

BAND

5

GHz

SNR

50

dB

RADIUS SERVER

188.3.8.201

802.11 REASON (CODE 23)

802.1X RADIUS failed

Roamed from access point Office-7 then unexpectedly deauthenticated because the auth server rejected the auth request, but the client had a successful connection to SSID WiFI - internal for 4 minutes on access point Office-1.

CHANNEL

64

BAND

5

GHz

SNR

32

dB

TIME TO CONNECT

470

ms

RADIUS SERVER

188.3.8.201

802.11 REASON (CODE 23)

802.1X RADIUS failed

Disconnected from SSID HKWiFi - internal from access point Office-2.

CHANNEL

144

BAND

5

GHz

SNR

34

dB

802.11 REASON (CODE 2)

Invalid authentication

Keith

[alemabrahao]

Check the Radius server logs and check if the secret is correct.

[Keith_Li]

i checked in meraki radius authenticated test, its show all AP passed for authentication test, as our customer is using NPS, i think i need to check in NPS log

[PhilipDAth]

Filter the security event log on the NPS server for events with the IDs 6272 and 6273.  6272=success, and 6273 =failure.

Look at what it says it denied access.

[Keith_Li]

may i ask below is related with NPS server also ? 

[Keith_Li]

checked that the problem machine wireless lan is using 802.11ax, so the 802.11w should be supported on the machine, just wonder why i still receving the auth failure ? 

[Wendy25]

Getting the exact same issue in our environment on 5GHZ.  It's intermittent and connectivity gets lost for about 10 seconds.  Updated drivers on Dell laptop with no success.  Using ISE for authentication and no clues spotted in the logs that help.