Guest username not reaching to ID Manager?

  • 1
  • Question
  • Updated 6 months ago

When a Guest try to login through CWP they get the error "network access is currently unavailable because acknowledgement of your submitted registration has not been received from the authentication server"

After checking logs on ID Manager portal, can't see that username as an attempted, which means username not even reaching to ID Manager.

Multiple username tried, case sensitive, even with numbers, issue still the same.

Any idea / advise as multiple users complaining for same issue.


Photo of Sahil Khan

Sahil Khan

  • 3 Posts
  • 0 Reply Likes

Posted 6 months ago

  • 1
Photo of Eastman Rivai

Eastman Rivai, Official Rep

  • 146 Posts
  • 17 Reply Likes
Sahil,

Please verify if any of the APs on the network can reach the IDM server. 


You can also execute "show idm" command on the CLI to verify. You need to ensure that you can see the following informaiton on the AP acting as radsec proxy.

RUN state: Connected securely to the IDM server
IDM transport mode: TCP
Server destination Port: 2083
RadSec Certificate state: Valid
RadSec Certificate Issued: 2017-08-11 09:47:55 GMT
RadSec Certificate Expires: 2018-08-11 09:47:55 GMT

If the IDM server is not reachable you need to check the network.

Ensure all the ports required for the IDM services are allowed on the firewall.
http://docs.aerohive.com/330000/docs/help/english/8.1r1/hm/full/Content/ref/services.htm?Highlight=s...

If the certificate is not valid you need to check the clock settings.


Thank you,

Eastman
Photo of Om Prakash Ravipati

Om Prakash Ravipati

  • 22 Posts
  • 2 Reply Likes
This is great. Can you please provide me the link to the list of ports that need to be open for Hivemanager NG cloud version?

Thanks.
Photo of Sahil Khan

Sahil Khan

  • 3 Posts
  • 0 Reply Likes

Eastman,

Yes, I can confirm that AP are connected to ID Manager. Radsec-Proxy icon is shown against two of the APs.

And I can also confirm that firewall rules are properly configured.

Also output from show idm confirmed that certificate is valid:
RUN state: Connected securely to the IDM server
IDM transport mode: TCP
Server destination Port: 2083
RadSec Certificate state: Valid
RadSec Certificate Issued: 2017-10-30 17:42:49
RadSec Certificate Expires: 2018-11-02 17:42:49

Please advise any other steps or options to check?

(Edited)
Photo of Eastman Rivai

Eastman Rivai, Official Rep

  • 146 Posts
  • 17 Reply Likes
Sahil,

Which HM do you use (classic or NG) and what version?

Eastman
Photo of Sahil Khan

Sahil Khan

  • 3 Posts
  • 0 Reply Likes
We have HM Classic, version 8.0r1.
Photo of Eastman Rivai

Eastman Rivai, Official Rep

  • 146 Posts
  • 17 Reply Likes
Sahil,

Could you please upgrade the HM and APs to the latest version? if the problem still exists please open a support case.

Thank you,

Eastman