[cisco-voip] 7925G and EAP-FAST connection failed

[Jason Aarons (US)]

Everything works great with a Lenovo T61 laptop running EAP-FAST using the IBM Access Connections client.



However a new out of box 7925G SCCP 1.3(3) phone shows "! connection failed" onscreen.



Here is what the RADIUS log on Cisco Secure ACS 5.1 shows. TAC verified ACS is setup properly. Next step is call into 7925G team.



11001  Received RADIUS Access-Request

11017  RADIUS created a new session

Evaluating Service Selection Policy

15004  Matched rule

15012  Selected Access Service - 7925s

11507  Extracted EAP-Response/Identity

12100  Prepared EAP-Request proposing EAP-FAST with challenge

11006  Returned RADIUS Access-Challenge

11001  Received RADIUS Access-Request

11018  RADIUS is re-using an existing session

12102  Extracted EAP-Response containing EAP-FAST challenge-response and accepting EAP-FAST as negotiated 12800  Extracted first TLS record; TLS handshake started.

12805  Extracted TLS ClientHello message.

12806  Prepared TLS ServerHello message.

12808  Prepared TLS ServerKeyExchange message.

12810  Prepared TLS ServerDone message.

12105  Prepared EAP-Request with another EAP-FAST challenge

11006  Returned RADIUS Access-Challenge

5411  EAP session timed out


Jason Aarons
Consultant
904-338-3245 Mobile
Dimension Data




-----------------------------------------
Disclaimer: 

This e-mail communication and any attachments may contain
confidential and privileged information and is for use by the
designated addressee(s) named above only.  If you are not the
intended addressee, you are hereby notified that you have received
this communication in error and that any use or reproduction of
this email or its contents is strictly prohibited and may be
unlawful.  If you have received this communication in error, please
notify us immediately by replying to this message and deleting it
from your computer. Thank you.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20100413/1cb1a651/attachment.html>