We are moving from PSK to MPSK for IoT devices and consolidate current devices using PSK with three SSIDs to a single SSID with role based access/vlan assignment .
New SSID configured with MPSK with ClearPass as authentication source.
All devices MAC addresses are added to ClearPass device database with unique password for each with role.
When tested with a laptop, all worked as intended, correct role, VLAN and IP address received.
When trying to connect IoT devices, we had partial success.
one device connected without any issues. Other devices including laptop we test gain de-auth after few seconds.
Looking at logs its same for most devices we tried. Order of event as well,
-Client connect to SSID,
-MAC auth request sent
-AP forward request to ClearPass
-ClearPass validate and sent auth success back to AP with MPSK and role as attributes
-AP receive MAC auth success message
-De-authentication From Client
APs are mostly AP-635 on firmware 8.10.0.22 Central Managed.
Has anyone has any pointers I can look at.
PS. TAC case also opened and still they did not come up with a solution. They still going through logs and packet captured.
Thanks in Advance