Security

 View Only

  • 1.  Error Code: 9002 RADIUS Client did not complete EAP transaction

    Posted Oct 04, 2023 06:43 AM

    Hi.

    I have two Radius Clearpass servers and huge number of timeouts:

    Error Code:
    9002
    Error Category:
    RADIUS protocol
    Error Message:
    Request timed out
     Alerts for this Request 
    RADIUS Client did not complete EAP transaction
    What could this be caused by?
    In logs we can see these errors:
    2023-10-04 12:06:56,790 [Th 248 Req 22535931 SessId R0013b27c-05-651d3940] INFO RadiusServer.Radius - rlm_eap_peap: Initiate
    2023-10-04 12:06:56,790 [Th 248 Req 22535931 SessId R0013b27c-05-651d3940] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 47:88:5414f3f79298:ANUAJACpADv73lcBX2eM/3+hlyXkHZieP0S9mg==
    2023-10-04 12:06:56,852 [Th 253 Req 22535932 SessId R0013b27c-05-651d3940] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "BX-802.1x-WBAP" - 49:440:5414f3f79298
    2023-10-04 12:06:56,853 [Th 253 Req 22535932 SessId R0013b27c-05-651d3940] INFO RadiusServer.Radius - TLS_accept:error in SSLv3 read client key exchange A
    2023-10-04 12:06:56,853 [Th 253 Req 22535932 SessId R0013b27c-05-651d3940] INFO RadiusServer.Radius - TLS_accept:error in SSLv3 read client key exchange A
    2023-10-04 12:06:56,853 [Th 253 Req 22535932 SessId R0013b27c-05-651d3940] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 49:1124:5414f3f79298:ACYAYwCxAAb83lcBd5xebnMGPKZ1CxS+eB99kA==
    2023-10-04 12:07:48,876 [main SessId R0013b27c-05-651d3940] ERROR RadiusServer.Radius - reqst_clean_list: Deleting request sessid - R0013b27c-05-651d3940, state - ACYAYwCxAAb83lcBd5xebnMGPKZ1CxS+eB99kA=
    2023-10-04 12:07:48,876 [main SessId R0013b27c-05-651d3940] ERROR RadiusServer.Radius - reqst_clean_list: Packet 47:252:88:5414f3f79298 recv 1696414016.785892 - resp 1696414016.790918
    2023-10-04 12:07:48,876 [main SessId R0013b27c-05-651d3940] ERROR RadiusServer.Radius - reqst_clean_list: Packet 49:440:1124:5414f3f79298 recv 1696414016.851903 - resp 1696414016.853393
    2023-10-04 12:07:48,876 [main SessId R0013b27c-05-651d3940] INFO RadiusServer.Radius - rlm_policy: Starting Policy Evaluation.
    2023-10-04 12:07:48,877 [RequestHandler-1-0x7f19f29f4700 r=psauto-1690209519-4260800 h=239 r=R0013b27c-05-651d3940] INFO Common.EndpointTable - Returning EndpointSPtr for macAddr 5414f3f79298
    2023-10-04 12:07:48,878 [RequestHandler-1-0x7f19f29f4700 r=psauto-1690209519-4260800 h=239 r=R0013b27c-05-651d3940] INFO Common.TagDefinitionCacheTable - No InstanceTagDefCacheMap found for instance id = 3265 entity id = 29

    The whole logs are here:

    Request log details for session: R0013b27c-05-651d3940
    Time Message
    2023-10-04 12:06:56,786 [Th 248 Req 22535931 SessId R0013b27c-05-651d3940] INFO RadiusServer.Radius - rlm_service: Starting Service Categorization - 47:252:5414f3f79298
    2023-10-04 12:06:56,788 [RequestHandler-1-0x7f19f29f4700 r=psauto-1690209519-4260660 h=223 r=R0013b27c-05-651d3940] INFO Core.ServiceReqHandler - Service classification result = BX-802.1x-WBAP
    2023-10-04 12:06:56,789 [Th 248 Req 22535931 SessId R0013b27c-05-651d3940] INFO RadiusServer.Radius - Service Categorization time = 3 ms
    2023-10-04 12:06:56,789 [Th 248 Req 22535931 SessId R0013b27c-05-651d3940] INFO RadiusServer.Radius - rlm_service: The request has been categorized into service "BX-802.1x-WBAP"
    2023-10-04 12:06:56,789 [Th 248 Req 22535931 SessId R0013b27c-05-651d3940] INFO RadiusServer.Radius - rlm_ldap: searching for user BBBBB-net\XXXXXXX in AD:corp.BBBBB.net
    2023-10-04 12:06:56,790 [Th 248 Req 22535931 SessId R0013b27c-05-651d3940] INFO RadiusServer.Radius - rlm_ldap: found user BBBBB-net\XXXXXXX in AD:corp.BBBBB.net
    2023-10-04 12:06:56,790 [Th 248 Req 22535931 SessId R0013b27c-05-651d3940] INFO RadiusServer.Radius - LDAP/AD User lookup time = 1 ms
    2023-10-04 12:06:56,790 [Th 248 Req 22535931 SessId R0013b27c-05-651d3940] INFO RadiusServer.Radius - rlm_eap_peap: Initiate
    2023-10-04 12:06:56,790 [Th 248 Req 22535931 SessId R0013b27c-05-651d3940] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 47:88:5414f3f79298:ANUAJACpADv73lcBX2eM/3+hlyXkHZieP0S9mg==
    2023-10-04 12:06:56,852 [Th 253 Req 22535932 SessId R0013b27c-05-651d3940] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "BX-802.1x-WBAP" - 49:440:5414f3f79298
    2023-10-04 12:06:56,853 [Th 253 Req 22535932 SessId R0013b27c-05-651d3940] INFO RadiusServer.Radius - TLS_accept:error in SSLv3 read client key exchange A
    2023-10-04 12:06:56,853 [Th 253 Req 22535932 SessId R0013b27c-05-651d3940] INFO RadiusServer.Radius - TLS_accept:error in SSLv3 read client key exchange A
    2023-10-04 12:06:56,853 [Th 253 Req 22535932 SessId R0013b27c-05-651d3940] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 49:1124:5414f3f79298:ACYAYwCxAAb83lcBd5xebnMGPKZ1CxS+eB99kA==
    2023-10-04 12:07:48,876 [main SessId R0013b27c-05-651d3940] ERROR RadiusServer.Radius - reqst_clean_list: Deleting request sessid - R0013b27c-05-651d3940, state - ACYAYwCxAAb83lcBd5xebnMGPKZ1CxS+eB99kA=
    2023-10-04 12:07:48,876 [main SessId R0013b27c-05-651d3940] ERROR RadiusServer.Radius - reqst_clean_list: Packet 47:252:88:5414f3f79298 recv 1696414016.785892 - resp 1696414016.790918
    2023-10-04 12:07:48,876 [main SessId R0013b27c-05-651d3940] ERROR RadiusServer.Radius - reqst_clean_list: Packet 49:440:1124:5414f3f79298 recv 1696414016.851903 - resp 1696414016.853393
    2023-10-04 12:07:48,876 [main SessId R0013b27c-05-651d3940] INFO RadiusServer.Radius - rlm_policy: Starting Policy Evaluation.
    2023-10-04 12:07:48,877 [RequestHandler-1-0x7f19f29f4700 r=psauto-1690209519-4260800 h=239 r=R0013b27c-05-651d3940] INFO Common.EndpointTable - Returning EndpointSPtr for macAddr 5414f3f79298
    2023-10-04 12:07:48,878 [RequestHandler-1-0x7f19f29f4700 r=psauto-1690209519-4260800 h=239 r=R0013b27c-05-651d3940] INFO Common.TagDefinitionCacheTable - No InstanceTagDefCacheMap found for instance id = 3265 entity id = 29
    2023-10-04 12:07:48,878 [RequestHandler-1-0x7f19f29f4700 r=psauto-1690209519-4260800 h=239 r=R0013b27c-05-651d3940] INFO Common.TagDefinitionCacheTable - Building the TagDefMapTable for NAD instance=3265
    2023-10-04 12:07:48,878 [RequestHandler-1-0x7f19f29f4700 r=psauto-1690209519-4260800 h=239 r=R0013b27c-05-651d3940] INFO Common.TagDefinitionCacheTable - Built 0 tag(s) for NAD instanceId=3265|entityId=29
    2023-10-04 12:07:48,878 [RequestHandler-1-0x7f19f29f4700 r=psauto-1690209519-4260800 h=239 r=R0013b27c-05-651d3940] INFO TAT.TagAttrHolderBuilder - No tags built for instanceId=3265|entity=Device
    2023-10-04 12:07:48,878 [RequestHandler-1-0x7f19f29f4700 r=psauto-1690209519-4260800 h=239 r=R0013b27c-05-651d3940] INFO TAT.AluTagAttrHolderBuilder - buildAttrHolder: Tags cannot be built for instanceId=0 (NULL AuthLocalUser)
    2023-10-04 12:07:48,878 [RequestHandler-1-0x7f19f29f4700 r=psauto-1690209519-4260800 h=239 r=R0013b27c-05-651d3940] INFO TAT.GuTagAttrHolderBuilder - buildAttrHolder: Tags cannot be built for instanceId=0 (NULL GuestUser)
    2023-10-04 12:07:48,878 [RequestHandler-1-0x7f19f29f4700 r=psauto-1690209519-4260800 h=239 r=R0013b27c-05-651d3940] INFO TAT.OnboardTagAttrHolderBuilder - buildAttrHolder: Tags cannot be built for instanceId=0 (NULL Onboard Device User)
    2023-10-04 12:07:48,878 [RequestHandler-1-0x7f19f29f4700 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - *** PE_TASK_SCHEDULE_RADIUS Started ***
    2023-10-04 12:07:48,878 [RequestHandler-1-0x7f19f29f4700 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Starting PETaskAuthSourceRestriction **
    2023-10-04 12:07:48,878 [RequestHandler-1-0x7f19f29f4700 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Starting PETaskRoleMapping **
    2023-10-04 12:07:48,878 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Completed PETaskAuthSourceRestriction **
    2023-10-04 12:07:48,879 [RequestHandler-1-0x7f19f29f4700 h=28372189 c=R0013b27c-05-651d3940] INFO Core.PETaskRoleMapping - Roles: BX-Role-AD-Lista-OU
    2023-10-04 12:07:48,879 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Completed PETaskRoleMapping **
    2023-10-04 12:07:48,879 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Starting PETaskPolicyResult **
    2023-10-04 12:07:48,880 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372191 c=R0013b27c-05-651d3940] ERROR Core.PETaskPolicyResult - handleHttpResponseEv: All policy result cache lookups failed
    2023-10-04 12:07:48,880 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Completed PETaskPolicyResult **
    2023-10-04 12:07:48,880 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Starting PETaskEnforcement **
    2023-10-04 12:07:48,881 [RequestHandler-1-0x7f19f29f4700 h=28372192 c=R0013b27c-05-651d3940] INFO Core.PETaskEnforcement - EnfProfiles: Enf-Prof-BX-IAP-Role-AD-OU
    2023-10-04 12:07:48,881 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Completed PETaskEnforcement **
    2023-10-04 12:07:48,881 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Starting PETaskRadiusEnfProfileBuilder **
    2023-10-04 12:07:48,881 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Starting PETaskRadiusCoAEnfProfileBuilder **
    2023-10-04 12:07:48,881 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Starting PETaskAppEnfProfileBuilder **
    2023-10-04 12:07:48,881 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Starting PETaskAgentEnfProfileBuilder **
    2023-10-04 12:07:48,881 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Starting PETaskPostAuthEnfProfileBuilder **
    2023-10-04 12:07:48,881 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Starting PETaskGenericEnfProfileBuilder **
    2023-10-04 12:07:48,881 [RequestHandler-1-0x7f19f29f4700 h=28372198 c=R0013b27c-05-651d3940] INFO Core.PETaskGenericEnfProfileBuilder - getApplicableProfiles: No App enforcement (Generic) profiles applicable for this device
    2023-10-04 12:07:48,881 [RequestHandler-1-0x7f19f29f4700 h=28372193 c=R0013b27c-05-651d3940] INFO Core.PETaskRadiusEnfProfileBuilder - EnfProfileAction=ACCEPT
    2023-10-04 12:07:48,881 [RequestHandler-1-0x7f19f29f4700 h=28372193 c=R0013b27c-05-651d3940] INFO Core.PETaskRadiusEnfProfileBuilder - Radius enfProfiles used: Enf-Prof-BX-IAP-Role-AD-OU
    2023-10-04 12:07:48,881 [RequestHandler-1-0x7f19f29f4700 h=28372193 c=R0013b27c-05-651d3940] INFO Core.EnfProfileComputer - getFinalSessionTimeout: sessionTimeout = 0
    2023-10-04 12:07:48,881 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Completed PETaskGenericEnfProfileBuilder **
    2023-10-04 12:07:48,881 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Completed PETaskAgentEnfProfileBuilder **
    2023-10-04 12:07:48,881 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Completed PETaskAppEnfProfileBuilder **
    2023-10-04 12:07:48,882 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Starting PETaskCliEnforcement **
    2023-10-04 12:07:48,882 [RequestHandler-1-0x7f19f29f4700 h=28372199 c=R0013b27c-05-651d3940] INFO Core.PETaskCliEnforcement - startHandler: No commands for CLI enforcement
    2023-10-04 12:07:48,882 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Completed PETaskRadiusEnfProfileBuilder **
    2023-10-04 12:07:48,882 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372197 c=R0013b27c-05-651d3940] INFO Core.PETaskPostAuthEnfProfileBuilder - getApplicableProfiles: No Post auth enforcement profiles applicable for this device
    2023-10-04 12:07:48,882 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Completed PETaskCliEnforcement **
    2023-10-04 12:07:48,882 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372194 c=R0013b27c-05-651d3940] INFO Core.PETaskRadiusCoAEnfProfileBuilder - getApplicableProfiles: No radius_coa enforcement profiles applicable for this device
    2023-10-04 12:07:48,882 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Completed PETaskPostAuthEnfProfileBuilder **
    2023-10-04 12:07:48,882 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Completed PETaskRadiusCoAEnfProfileBuilder **
    2023-10-04 12:07:48,882 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Starting PETaskAuthStatusInfo **
    2023-10-04 12:07:48,882 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Starting PETaskOutputPolicyRes **
    2023-10-04 12:07:48,882 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Starting PETaskSessionLog **
    2023-10-04 12:07:48,885 [main SessId R0013b27c-05-651d3940] INFO RadiusServer.Radius - Policy Evaluation time = 9 ms
    2023-10-04 12:07:48,885 [main SessId R0013b27c-05-651d3940] INFO RadiusServer.Radius - rlm_policy: Received Accept Enforcement Profile
    2023-10-04 12:07:48,885 [main SessId R0013b27c-05-651d3940] INFO RadiusServer.Radius - rlm_policy: Policy Server reply does not contain Posture-Validation-Response
    2023-10-04 12:07:48,885 [RequestHandler-1-0x7f19f29f4700 h=28372201 c=R0013b27c-05-651d3940] INFO Core.XpipPolicyResHandler - populateResponseTlv: PETaskPostureOutput does not exist. Skip sending posture VAFs
    2023-10-04 12:07:48,885 [RequestHandler-1-0x7f19f29f4700 h=28372201 c=R0013b27c-05-651d3940] INFO Core.PolicyResCollector - getSohr: Failed to generate Sohr
    2023-10-04 12:07:48,885 [RequestHandler-1-0x7f19f29f4700 h=28372200 c=R0013b27c-05-651d3940] INFO Core.PolicyResCollector - getSohr: Failed to generate Sohr
    2023-10-04 12:07:48,885 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Completed PETaskSessionLog **
    2023-10-04 12:07:48,885 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Completed PETaskOutputPolicyRes **
    2023-10-04 12:07:48,885 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - ** Completed PETaskAuthStatusInfo **
    2023-10-04 12:07:48,885 [RequestHandler-1-0x7f19f29f4700 r=R0013b27c-05-651d3940 h=28372187 c=R0013b27c-05-651d3940] INFO Core.PETaskScheduler - *** PE_TASK_SCHEDULE_RADIUS Completed ***


  • 2.  RE: Error Code: 9002 RADIUS Client did not complete EAP transaction

    Posted Oct 04, 2023 10:37 AM

    Hi

    This error message often indicates a faulty configuration on the client side. How do you configure the client, is it manual or a GPO or another management tool?

    Does the problem affect one client or all clients?

    This error is also common after changing the Radius certificate and you have Apple devices like iPhones and iPads. IOS devices will prompt the user to accept the new Radius certificate. Until the user have accepted the new certificate the device will time out in Access Tracker.



    ------------------------------
    Best Regards
    Jonas Hammarbäck
    MVP 2023, ACCX #1335, ACX-Network Security, Aruba SME, ACMP, ACDP , ACEP, ACSA
    Aranya AB
    If you find my answer useful, consider giving kudos and/or mark as solution
    ------------------------------



  • 3.  RE: Error Code: 9002 RADIUS Client did not complete EAP transaction

    Posted Mar 16, 2026 05:40 AM

    Hello, we are facing same issue with same errors messages, did you find the solution ?

    -------------------------------------------



  • 4.  RE: Error Code: 9002 RADIUS Client did not complete EAP transaction

    Posted Mar 16, 2026 09:50 AM

    As Jonas already wrote in a lot of cases this is a problem with CA certificates on client side. Check client event logs for clues.

    Best, Gorazd  



    ------------------------------
    Gorazd Kikelj
    MVP Guru 2025
    ------------------------------

    Original Message


  • 5.  RE: Error Code: 9002 RADIUS Client did not complete EAP transaction

    Posted Mar 16, 2026 04:45 PM

    Hello,

    We are suspecting a problem with user authentication, we user TEAP (EAP-TLS for machine authentication and MSCHAPV2 for user authentication), as you can see in the logs below, the TLS tunnel is established but when Clearpass sent access-challenge for user authentication there is a timeout: 

    Time Message
    2026-03-12 11:04:28,483 [Th 58131 Req 19175299 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: Starting Service Categorization - 213:374:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,487 [Th 58131 Req 19175299 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - Service Categorization time = 4 ms
    2026-03-12 11:04:28,487 [Th 58131 Req 19175299 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request has been categorized into service "Ponant - 802.1X Wired - TEAP"
    2026-03-12 11:04:28,487 [Th 58131 Req 19175299 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_ldap: searching for user anonymous in AD:srvad-mrs.ponant.com
    2026-03-12 11:04:28,487 [RequestHandler-1-0x7fba195ea700 r=psauto-1758697854-20582995 h=223 r=R002d58b1-03-69b28fac] INFO Core.ServiceReqHandler - Service classification result = Ponant - 802.1X Wired - TEAP
    2026-03-12 11:04:28,489 [Th 58131 Req 19175299 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_eap_teap: Initiate
    2026-03-12 11:04:28,489 [Th 58131 Req 19175299 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 213:88:fc-4c-ea-a1-a2-bf:AOoAPADvANeDlyQBp9wDghVGJNq62BbvnSTbUg==
    2026-03-12 11:04:28,494 [Th 58129 Req 19175300 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 214:564:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,494 [Th 58129 Req 19175300 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_ldap: searching for user anonymous in AD:srvad-mrs.ponant.com
    2026-03-12 11:04:28,496 [Th 58129 Req 19175300 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 214:1124:fc-4c-ea-a1-a2-bf:AJQAqQDAAPmElyQBhYajKN/QwaLb50M/pdJjZQ==
    2026-03-12 11:04:28,499 [Th 58136 Req 19175301 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 215:408:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,499 [Th 58136 Req 19175301 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_ldap: searching for user anonymous in AD:srvad-mrs.ponant.com
    2026-03-12 11:04:28,500 [Th 58136 Req 19175301 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 215:1120:fc-4c-ea-a1-a2-bf:AEwAUwC6AK+FlyQBmE1SUzLYI3HtJuarVAasUg==
    2026-03-12 11:04:28,503 [Th 58128 Req 19175302 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 216:408:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,503 [Th 58128 Req 19175302 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_ldap: searching for user anonymous in AD:srvad-mrs.ponant.com
    2026-03-12 11:04:28,504 [Th 58128 Req 19175302 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 216:1120:fc-4c-ea-a1-a2-bf:ALoASACPAMWGlyQBuIplSCSJN5oWmMlHyKWcxg==
    2026-03-12 11:04:28,506 [Th 58132 Req 19175303 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 217:408:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,506 [Th 58132 Req 19175303 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_ldap: searching for user anonymous in AD:srvad-mrs.ponant.com
    2026-03-12 11:04:28,507 [Th 58132 Req 19175303 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 217:366:fc-4c-ea-a1-a2-bf:AJcAJAADAFuHlyQBAEdDJaqQQB2xEqDNDLiTew==
    2026-03-12 11:04:28,513 [Th 58134 Req 19175304 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 218:501:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,513 [Th 58134 Req 19175304 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_ldap: searching for user anonymous in AD:srvad-mrs.ponant.com
    2026-03-12 11:04:28,514 [Th 58134 Req 19175304 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - TLS_accept: SSL negotiation finished successfully
    2026-03-12 11:04:28,515 [Th 58134 Req 19175304 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 218:139:fc-4c-ea-a1-a2-bf:ADoASgC8ABSIlyQBv5/W9xSxPfbrbh9kkNqVNg==
    2026-03-12 11:04:28,520 [Th 58127 Req 19175305 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 219:408:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,520 [Th 58127 Req 19175305 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_ldap: searching for user anonymous in AD:srvad-mrs.ponant.com
    2026-03-12 11:04:28,522 [Th 58127 Req 19175305 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_eap_teap: Session established.
    2026-03-12 11:04:28,522 [Th 58127 Req 19175305 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 219:132:fc-4c-ea-a1-a2-bf:AMQAcgDFAOqJlyQBs2Vws3GjNmaZfYhqR+5JVA==
    2026-03-12 11:04:28,537 [Th 58130 Req 19175306 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 220:473:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,537 [Th 58130 Req 19175306 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_ldap: searching for user anonymous in AD:srvad-mrs.ponant.com
    2026-03-12 11:04:28,538 [Th 58130 Req 19175306 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_ldap: searching for user host/L1039.ponant.com in AD:srvad-mrs.ponant.com
    2026-03-12 11:04:28,540 [Th 58130 Req 19175306 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_ldap: found user L1039$ in AD:srvad-mrs.ponant.com
    2026-03-12 11:04:28,540 [Th 58130 Req 19175306 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - LDAP/AD User lookup time = 2 ms
    2026-03-12 11:04:28,540 [Th 58130 Req 19175306 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_eap_tls: Initiate
    2026-03-12 11:04:28,540 [Th 58130 Req 19175306 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 220:127:fc-4c-ea-a1-a2-bf:AGAAxwCiALmKlyQBgYN14MdhC2oKNOYwUrT8sw==
    2026-03-12 11:04:28,554 [Th 58135 Req 19175307 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 221:710:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,554 [Th 58135 Req 19175307 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 139:0:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,556 [Th 58135 Req 19175307 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 221:901:fc-4c-ea-a1-a2-bf:AH4ALgAQAJ+LlyQBCYTFWBpzD8Xl0If0TIeurA==
    2026-03-12 11:04:28,561 [Th 58133 Req 19175308 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 222:447:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,561 [Th 58133 Req 19175308 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 140:0:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,562 [Th 58133 Req 19175308 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 222:897:fc-4c-ea-a1-a2-bf:ANAAEAA9AOyMlyQBbuXefCD8V0v4jC/m6xZkIA==
    2026-03-12 11:04:28,564 [Th 58131 Req 19175309 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 223:447:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,564 [Th 58131 Req 19175309 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 141:0:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,565 [Th 58131 Req 19175309 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 223:897:fc-4c-ea-a1-a2-bf:AE8AvwBiAHmNlyQBAbLmJ0XeO3ELKizx9r8HZA==
    2026-03-12 11:04:28,568 [Th 58129 Req 19175310 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 224:447:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,568 [Th 58129 Req 19175310 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 142:0:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,568 [Th 58129 Req 19175310 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 224:897:fc-4c-ea-a1-a2-bf:AOUAhADxADOOlyQBPEkeVEAXiI2dmS9iGzvfPA==
    2026-03-12 11:04:28,571 [Th 58136 Req 19175311 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 225:447:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,571 [Th 58136 Req 19175311 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 143:0:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,572 [Th 58136 Req 19175311 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 225:897:fc-4c-ea-a1-a2-bf:AAIAMAD5ANKPlyQBWNc8z0Yd6pzeTZpZelZORA==
    2026-03-12 11:04:28,586 [Th 58128 Req 19175312 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 226:447:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,586 [Th 58128 Req 19175312 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 144:0:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,586 [Th 58128 Req 19175312 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 226:481:fc-4c-ea-a1-a2-bf:ALgAuQAwABeQlyQBC7xJBgtdedPJsmWcYRNqZg==
    2026-03-12 11:04:28,608 [Th 58132 Req 19175313 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 227:1904:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,608 [Th 58132 Req 19175313 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 227:88:fc-4c-ea-a1-a2-bf:ANsAVAARAGeRlyQB9hQkIKfjGow0CYBFFFOewg==
    2026-03-12 11:04:28,619 [Th 58134 Req 19175314 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 228:1904:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,619 [Th 58134 Req 19175314 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 228:88:fc-4c-ea-a1-a2-bf:ADoA5gCkAD6SlyQBm0yjB1nBr63CWDnmOc6A9A==
    2026-03-12 11:04:28,623 [Th 58127 Req 19175315 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 229:624:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,625 [Th 58127 Req 19175315 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 147:0:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,625 [Th 58127 Req 19175315 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - chain-depth=2,
    2026-03-12 11:04:28,625 [Th 58127 Req 19175315 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - error=0
    2026-03-12 11:04:28,625 [Th 58127 Req 19175315 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - --> User-Name = host/L1039.ponant.com
    2026-03-12 11:04:28,625 [Th 58127 Req 19175315 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - --> subject = /CN=SRV-CAROOT-CA
    2026-03-12 11:04:28,625 [Th 58127 Req 19175315 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - --> issuer = /CN=SRV-CAROOT-CA
    2026-03-12 11:04:28,625 [Th 58127 Req 19175315 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - --> verify return:1
    2026-03-12 11:04:28,625 [Th 58127 Req 19175315 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - chain-depth=1,
    2026-03-12 11:04:28,625 [Th 58127 Req 19175315 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - error=0
    2026-03-12 11:04:28,625 [Th 58127 Req 19175315 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - --> User-Name = host/L1039.ponant.com
    2026-03-12 11:04:28,625 [Th 58127 Req 19175315 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - --> subject = /DC=com/DC=ponant/CN=ponant-SRV-SUBCA-CA
    2026-03-12 11:04:28,625 [Th 58127 Req 19175315 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - --> issuer = /CN=SRV-CAROOT-CA
    2026-03-12 11:04:28,625 [Th 58127 Req 19175315 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - --> verify return:1
    2026-03-12 11:04:28,625 [Th 58127 Req 19175315 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - chain-depth=0,
    2026-03-12 11:04:28,625 [Th 58127 Req 19175315 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - error=0
    2026-03-12 11:04:28,625 [Th 58127 Req 19175315 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - --> User-Name = host/L1039.ponant.com
    2026-03-12 11:04:28,625 [Th 58127 Req 19175315 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - --> subject = /CN=L1039.ponant.com
    2026-03-12 11:04:28,625 [Th 58127 Req 19175315 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - --> issuer = /DC=com/DC=ponant/CN=ponant-SRV-SUBCA-CA
    2026-03-12 11:04:28,625 [Th 58127 Req 19175315 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - --> verify return:1
    2026-03-12 11:04:28,625 [Th 58127 Req 19175315 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - TLS_accept: SSL negotiation finished successfully
    2026-03-12 11:04:28,626 [Th 58127 Req 19175315 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 229:233:fc-4c-ea-a1-a2-bf:ALUACACqAByTlyQBcc4IaH9G81oikEsG5gAh2Q==
    2026-03-12 11:04:28,633 [Th 58130 Req 19175316 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 230:447:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,633 [Th 58130 Req 19175316 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 148:0:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,633 [Th 58130 Req 19175316 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_eap_tls: Session established.
    2026-03-12 11:04:28,634 [Th 58130 Req 19175316 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_eap_tls: MPPE Key generation based on TLS 1.3
    2026-03-12 11:04:28,634 [Th 58130 Req 19175316 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_policy: Bypassing Policy Evaluation.
    2026-03-12 11:04:28,634 [Th 58130 Req 19175316 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 230:203:fc-4c-ea-a1-a2-bf:AJQAkgACAMCUlyQBOCUdbDpRmeLY6SOkB1e0sA==
    2026-03-12 11:04:28,638 [Th 58135 Req 19175317 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "Ponant - 802.1X Wired - TEAP" - 231:523:fc-4c-ea-a1-a2-bf
    2026-03-12 11:04:28,638 [Th 58135 Req 19175317 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - EAP-TEAP Flag: 2, Subtype: 1
    2026-03-12 11:04:28,638 [Th 58135 Req 19175317 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - EAP-TEAP: Received MSK based Compound MAC
    2026-03-12 11:04:28,638 [Th 58135 Req 19175317 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - rlm_eap_teap: Sending next identity
    2026-03-12 11:04:28,639 [Th 58135 Req 19175317 SessId R002d58b1-03-69b28fac] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 231:132:fc-4c-ea-a1-a2-bf:AE0AmQDoALSVlyQBubqLJ/LlDmEsXw/laza4tg==
    2026-03-12 11:05:17,464 [main SessId R002d58b1-03-69b28fac] ERROR RadiusServer.Radius - reqst_clean_list: Deleting request sessid - R002d58b1-03-69b28fac, state - AE0AmQDoALSVlyQBubqLJ/LlDmEsXw/laza4tg=
    2026-03-12 11:05:17,464 [main SessId R002d58b1-03-69b28fac] ERROR RadiusServer.Radius - reqst_clean_list: Packet 213:374:88:fc-4c-ea-a1-a2-bf recv 1773309868.483473 - resp 1773309868.489432
    2026-03-12 11:05:17,464 [main SessId R002d58b1-03-69b28fac] ERROR RadiusServer.Radius - reqst_clean_list: Packet 214:564:1124:fc-4c-ea-a1-a2-bf recv 1773309868.494638 - resp 1773309868.496960
    -------------------------------------------

    Original Message


  • 6.  RE: Error Code: 9002 RADIUS Client did not complete EAP transaction

    Posted Mar 18, 2026 08:09 AM

    So it seems that the client is not responding to that Access-Challenge, or the response does not reach back to ClearPass. Probably a client configuration problem, but you could run a packet capture on the client to see if it responds to the Access-Challenge; so compare between client and the server side and see where it goes off the track.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------

    Original Message


  • 7.  RE: Error Code: 9002 RADIUS Client did not complete EAP transaction

    Posted Mar 18, 2026 09:51 AM
      |   view attached

    We did Wireshark capture on wireless adapater on laptop, we achieve to capture traffic where laptop disconnects from wireless network, laptop tries to reconnect automatically but it failed and we have to click manually three times on the SSID to reconnect successfully, the first and second were not successfull . The problem is we are not seeing any EAPoL packets on capture.. so we are trying to capture trafic between Access Point and client. I share the capture in files but don't think it will help.

    -------------------------------------------

    Attachment(s)

    pcapng
    capture.pcapng   2.75 MB 1 version
    Original Message


Related Content