Symptom
Wireless Client authentications are failing as the C9800 is unable to send RADIUS traffic to the RADIUS server when accounting is enabled. The problem can happen in any or all of the WNCDs
Conditions
Must have AAA accounting enabled for wireless client sessions
Seen more often when there are accounting request timeouts and retransmits due to a slow server
Workaround
If none or some of the WNCDs are in the problematic state:
- Disabling Accounting (only if this won't have significant impact to the customer)
Once ALL WNCDs are in a problematic state:
- Reload WLC
Further Problem Description
How to Identify:
1) Execute "show aaa servers" and look for "Platform State from WNCD (X) : current DEAD" for all of the working servers (where "X" is the WNCD number).
2) If all RADIUS servers are marked DEAD for all the WNCDs, then client authentications will fail 100% of the time.
3) If all RADIUS servers are marked DEAD for a specific WNCD, then that specific WNCD cannot be used further for any client authentications.
4) If a single RADIUS server is marked DEAD for any or all of the WNCD, this doesn't indicate hitting the bug. (Provided that there is more that a single RADIUS server configured).)
In summary: If any WNCD has reached the problematic state, then all RADIUS servers will be marked DEAD for that WNCD.
