DHCP problem with radius clients

[CBeckerDK]

Hi all

I have a DHCP problem with my FortiAP setup.

When clients connects to an SSID with Radius authentication, the client never gets an IP Address.
In the FortiAP log I see the DHCP Discover and DHCP Offer, but not a DHCP Request and DHCP Ack.
If the same clients connect to one of our SSID with WPA2 authentication on the same FortiAP, then there is no problem and the clients gets an IP Address.

If I then move the same FortiAP to a different patch in the wall, but still connected to the same switchport (Aruba), then everything works and the clients gets an IP Address, and I see the DCHCP Request and DHCP Ack in the log.

The only thing that is changed is the network cable from the office to the patchpanel in the serverroom.
I have tried several patches in the office, some works and some don't.

Bonus info. The Radius SSID uses DHCP Relay from a Windows Server, one uses same DHCP Relay as the Radius SSID, and another WPA2 SSID uses the Fortigate as DHCP Server, so I do not think it is a DHCP Relay Server issue.

Does anyone have an idea what could be wrong, I have never heard that a network cable can make a difference in this matter.

Thanks for any suggestions.
Cheers Claus

#FortiAP 231G #Fortigate

[AEK]

Hi Claus

Try sniff the traffic on the client host (wireshark) and see if in both scenarios the received DHCP Offer is the same, and if the client sends the DHCP Request.