Re: ReasonCode=97 with netgear and intel

From: Ralf Laemmermeyer (rlaemmermeyer_at_sram.com)
Date: 11/25/04 

Date: Thu, 25 Nov 2004 11:26:32 +0100

Thanks a lot for this information, I will try it.

regards

Ralf

"Sam Salhi [MSFT]" <samers@online.microsoft.com> schrieb im Newsbeitrag
news:OTvEufk0EHA.480@TK2MSFTNGP10.phx.gbl...
> Try to obtain the latest firmware for the access points. I recall that
> Cisco had a bug in these and 802.1x wired switches, there was supposed to
> be a fix in October
>
> --
> =============================================
> This posting is provided "AS IS" with no warranties, and confers no
> rights
>
> Join us on Nov 29th 1:00 to 2:00 PM PST, for an online webchat on "Using
> and troubleshooting RADIUS using IAS"
> This chat will help you resolve all of your RADIUS/IAS issues. You can ask
> about RADIUS, IAS, 802.1x, Active directory configuration and Certificate
> services, related to IAS and RADIUS
> Follow this link to join the chat
> http://www.microsoft.com/communities/chats/default.mspx#04_Nov29_IAS_RADIUS
> =============================================
>
> "Ralf Laemmermeyer" <rlaemmermeyer@sram.com> wrote in message
> news:%23OVgdsW0EHA.2824@TK2MSFTNGP09.phx.gbl...
>> We are using the following hardware/software:
>>
>> -Cisco 1200 series (1231G) AP
>> -Cisco 1100 series (1121) AP's
>> -Windows 2000 server standard with IAS loaded
>> -Users are running windows 2k sp4, windows xp sp2 and windows xp sp1 with
>> the wpa patch.
>> -Notebooks are from HP/Compaq and Dell
>>
>> the most notebooks works very well except machines with the Intel
>> PRO/Wireless 2100B built in card and the netgear wag511
>>
>> first i get succesfull authentication for the machine and the user
>>
>> User DDuck was granted access.
>> Fully-Qualified-User-Name = DOMAIN\DDuck
>> NAS-IP-Address = 10.6.11.97
>> NAS-Identifier = AP-GerWLAN-KR
>> Client-Friendly-Name = GerWLAN-KR
>> Client-IP-Address = 10.6.11.97
>> NAS-Port-Type = 19
>> NAS-Port = 311
>> Policy-Name = WirelessUsers
>> Authentication-Type = EAP
>> EAP-Type = Protected EAP (PEAP)
>>
>> User host/PC2522.domain.com was granted access.
>> Fully-Qualified-User-Name = DOMAIN\PC2522$
>> NAS-IP-Address = 10.6.11.97
>> NAS-Identifier = AP-GerWLAN-KR
>> Client-Friendly-Name = GerWLAN-KR
>> Client-IP-Address = 10.6.11.97
>> NAS-Port-Type = 19
>> NAS-Port = 309
>> Policy-Name = WirelessComputerAccess
>> Authentication-Type = EAP
>> EAP-Type = Protected EAP (PEAP)
>>
>> .. after a 0,5 minute i get during a time period of 1,5 minute 6 times
>> the following error message
>>
>> Access request for user DDuck was discarded.
>> Fully-Qualified-User-Name = <undetermined>
>> NAS-IP-Address = 10.6.11.97
>> NAS-Identifier = AP-GerWLAN-KR
>> Called-Station-Identifier = 000f.908b.7af0
>> Calling-Station-Identifier = 000f.b50c.e690
>> Client-Friendly-Name = GerWLAN-KR
>> Client-IP-Address = 10.6.11.97
>> NAS-Port-Type = 19
>> NAS-Port = 415
>> Reason-Code = 97
>> Reason = The authentication request was dropped because it contained an
>> unexpected packet.
>>
>> then the procedure starts from beginning access no access ....
>> sometimes i get additionally the error message:
>>
>> Access request for user DOMAIN\DDuck was discarded.
>> Fully-Qualified-User-Name = <undetermined>
>> NAS-IP-Address = 10.6.11.97
>> NAS-Identifier = AP-GerWLAN-KR
>> Called-Station-Identifier = 000f.8f23.c8d0
>> Calling-Station-Identifier = 000f.b50c.e690
>> Client-Friendly-Name = GerWLAN-KR
>> Client-IP-Address = 10.6.11.97
>> NAS-Port-Type = 19
>> NAS-Port = 312
>> Reason-Code = 1
>> Reason = An internal error occurred. Check the event log for additional
>> information on what might have caused this error.
>>
>> on two machines with intel cards i was able to fix that through removing
>> the client utility install the newest driver and xpsp2
>> but is that behaviour only caused by the clients? on w2k machines i need
>> the client utility!
>>
>> thanks in advance
>>
>> Ralf
>>
>
>