802.1X Authentication too slow

[prmarques]

Hello all,

I'm new around here, but I follow these forums for a long time and I would like to thank you all for the great job you've been doing here.

What brings me here is an issue regarding 802.1X authentication.

Our scenario involves a server with PCM+ 2.3 with IDM 2.2, 2 other servers that are Domain Controllers and IAS servers, and a Procurve 5406zl layer 3 switch as switch core.

On the client computers we have the wired auto config service enabled and authentication 802.1X enabled.

Authentication is working well appart from a "big" small problem.

We have some computers taking as long as 15 mins to authenticate. I mean 15 mins from the CTRL+ALT+DEL screen till the effective desktop screen showing.

I can't pinpoint a cause to the OS on the clients, because we have Windows 7 and Windows XP with same symptom.

If we make the login with ethernet cable disconnected it is fast, but with cable connected takes very long.

Can anyone enlighten me on this matter?

Thanks

[Javed Padinhakara]

Per Microsoft KB's, looks like there's some known issues with IAS servers:

http://support.microsoft.com/default.aspx?scid=kb;en-us;883659

http://support.microsoft.com/kb/884862


Hope that gives some lead to the problem you are facing!

Keep posted.
Javed

[prmarques]

I checked all the shared information, but unfortunatelly i could not solve my problems.

Seems like the problems are centered now on computers running Windows 7.

Can anyone confirm if there are known issues related with PCM 2.3 with IDM 2.2 and Windows 7 machines?

Thanks

[Javed Padinhakara]

win 7 is not amongst the supported platforms for PCM 2.3

ProCurve Management software is supported on the following Operating Systems:
â   MS Windows 2003 Server
â   MS Windows XP Pro (Service Pack 2 or better)ProCurve Management software is supported on the following Operating Systems:
â   MS Windows 2003 Server
â   MS Windows XP Pro (Service Pack 2 or better)

Ref :
http://cdn.procurve.com/training/Manuals/PCM23-Release-Notes-1207.pdf

[prmarques]

Thanks for the reply, but unfortunatelly this does not solve my problem.

I gather that Win7 is not supported under PCM2.3, but the thing is that I also have WinXP machines with same symptom.

And that's why this is confusing me.

Any help is appreciated.

[cenk sasmaztin]

I have done hundresds of time's 802.1x config with procurve ,but I did not see slow authentication

please send me sh run print and tell me about your IAS server config

[Marco Albertini]

Hi,
i got similar problem with some XP boxes and i solved with this:

KB957931 - "A Windows XP-based, Windows Vista-based, or Windows Server 2008-based computer does not respond to 802.1X authentication requests for 20 minutes after a failed authentication"