Mac-based Auth Problem with 3500yl with K.15.09.0012

[bllvwh-wue]

Hello,

we are using mac and web based authentication on the 3500yl with a freeradius server. I upgraded to the latest software (K.15.09.0012) last week and no auth querys for macs are reaching the radius server. It was working fine with K.15.08.0013 using the same config.

radius.log had the following entries with K.15.08.0013:

Tue Mar 12 18:19:22 2013 : Auth: Login OK: [000e7fd841ca] (from client rhein port 19 cli 00-0e-7f-d8-41-ca via TLS tunnel)

Tue Mar 12 17:43:57 2013 : Auth: Login OK: [neubgab] (from client rhein port 19 cli 00-1e-8c-83-bf-f1 via TLS tunnel)

with K.15.09.0012 only these entries are shown up:

Tue Mar 12 17:43:57 2013 : Auth: Login OK: [neubgab] (from client rhein port 19 cli 00-1e-8c-83-bf-f1 via TLS tunnel)

No changes had been made on the radius server. Any hints, why the switch stops trying mac based auth?

Thank you a lot,

Markus

[Chrisd131313]

Hi Markus,

It sounds like a bug's been introduced in K.15.09.0012. I would suggest trying K.15.09.0004 (certified) and see if it MAC auth is working as expected - If you have the luxury of being able to test it again. If this doesn't work I would suggest  a rollback to K.15.08.0013.

Looking through the release notes for all revisions up to K.15.10.0003 I do not see any Bug Fixes relating to MAC auth listed, so I fear it is a bug introduced in a revision after K.15.08.0013. If you have the luxury of a lab environment, maybe its worth testing the early availability (K.15.10.0003) release as well.

HTH.

[bllvwh-wue]

Hi Chris,

thanks a lot for your answer. Unfortunately we do not have a lab for testing, but would be great. :)

I am using K15.08.013 right now and it is working as expected. Maybe I can try the certified release as you sugggested next week. Wondering that no one else has this problem, mac-based auth should be a widely used feature ...

Have a great weekend,

Markus