1. check if SSID where host connects is member of Forced Registration group and Role Based Access
Ports that participate in forced registration when unregistered hosts connect.
-The desired VLANs are configured in the WLC/SWITCH.
-The desired VLANs are listed in the WLC 's model configuration in Topology.
-The desired VLANs have the required VLAN IDs specified as their access value.
-VLAN switching enabled is selected under the element tab in the WLC's model configuration.
-Radius authentication is enabled in the WLC 's model configuration
-The credentials are correct (under WLC's model configuration credentials tab, click validate credentials).
• If SNMP credentials fail, please check credentials.
• If CLI credentials fail, please check credentials.
If the above steps are correct then please enable the radius debugs in Network>Radius to High.
Enter in FNAC cli:
campusmgrdebug -name RadiusManager true
campusmgrdebug -name RadiusAccess true
campusmgrdebug -name PolicyHelper true
campusmgrdebug -name BridgeManager true
Tests the issue with one host by connecting to SSID and provide the MAC address of the test host.
When finished attach the FNAC system logs as described here:
A problem well-defined is a problem half solved.