
OPERATIONAL DEFECT DATABASE
...

...
Wireless Client authentications are failing as the C9800 is unable to send RADIUS traffic to the RADIUS server when accounting is enabled. The problem can happen in any or all of the WNCDs
Must have AAA accounting enabled for wireless client sessions Seen more often when there are accounting request timeouts and retransmits due to a slow server
If none or some of the WNCDs are in the problematic state: - Disabling Accounting (only if this won't have significant impact to the customer) Once ALL WNCDs are in a problematic state: - Reload WLC
How to Identify: 1) Execute "show aaa servers" and look for "Platform State from WNCD (X) : current DEAD" for all of the working servers (where "X" is the WNCD number). 2) If all RADIUS servers are marked DEAD for all the WNCDs, then client authentications will fail 100% of the time. 3) If all RADIUS servers are marked DEAD for a specific WNCD, then that specific WNCD cannot be used further for any client authentications. 4) If a single RADIUS server is marked DEAD for any or all of the WNCD, this doesn't indicate hitting the bug. (Provided that there is more that a single RADIUS server configured).) In summary: If any WNCD has reached the problematic state, then all RADIUS servers will be marked DEAD for that WNCD.
Click on a version to see all relevant bugs
Cisco Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.