This article describes the various network/authentication status messages that are displayed via the various OAC screens. This article was written by utilizing OAC 4.80r1. It should be noted that these status message have not significantly changed, as compared to previous versions.
The status messages are displayed in the following areas:
- Odyssey Client Manager’s Adapter Pages: An individual page is available for each network adapter being managed by OAC.
- Odyssey Client Manager’s Infranet Controller Pages: Each Infranet Controller (PPS) that is configured in OAC will have its own status page.
- GINA: During the interactive user login process.
Odyssey Client Manager’s Adapter Pages
The following image is a typical example of the Odyssey Access Client network adapter status page:
Connection Information - Status
| Open and authenticated | Indicates that OAC has successfully authenticated the user to the network via the 802.1X protocol and has opened the network adapter port to allow network access |
| Open | Indicates that OAC has opened the network adapter port to allow network access. Authentication has either failed or has not been performed. |
| Open / Authenticating | Indicates that OAC is attempting to re-authenticate the user. This can occur when session resumption is being attempted between OAC and the authentication server |
| Requesting Authentication | Indicates that OAC is attempting to authenticate, but has not receive a response from the switch/access point |
| Authenticating | Indicates that the authentication process has started and is in process. This message will be displayed until you either successfully authenticate or fail authentication. |
| Waiting to Authenticate | Indicates that OAC has started the authentication process, but is now waiting on a response from the authentication server. You are not yet connected and the last authentication failed but you are waiting to retry. If you see this message for a considerable length of time, there might be an association problem. If so, select the association mode required for your access point. |
| Searching for Access Point | This message is displayed during the following conditions:
- The access point is not in range
- Your Network Settings do not match those configured on the Access Point
- There is no SSID in range that matches the SSID being searched for. SSIDs are case sensitive.
NOTE : This message is a very common cause for calls to the Pulse Secure Support. |
| Disconnecting | Indicates that OAC is attempting to terminate an active session or stop the authentication process |
| Cable Unplugged | This is the default state for the adapter. OAC will report this state until it determines otherwise. You may see this message displayed for a small amount of time immediately after you click the “Connect to Network” check box. This is normal behavior |
| Disconnected | You are not connected and Connect to network may be unchecked. |
| Adapter not present | Indicates that OAC is not able to bind to the configured network adapter. This can be caused by a few different things.
- The adapter has been either disabled or removed from the system
- During the installation process, OAC will not able to bind to the adapter because of a corrupted Windows driver database.
Troubleshooting :
- You should ensure that you have the latest driver installed.
- You may also want to try installing OAC again to see if this corrects the issue.
- Contact technical support for further assistance
- In some cases, when a PC is resumed from a standby state, the adapter is not immediately available for OAC to use.
|
| OAC is disabled | You are not connected and OAC has been disabled. |
Odyssey Client Manager’s Infranet Controller PagesThe following image is of the Odyssey Client Manager’s Infranet Controller page. Each Infranet Controller that is defined in OAC will have its own status page:
Infranet Controller – StatusThe following table lists the status messages that are displayed on either the Infranet Controller page or the adapter page’s Infranet Controller section:
| Disconnected | There is currently no layer 3 connection established between OAC and the Infranet Controller. This can happen if the “Connect to Infranet Controller” check box is unchecked. |
| Session Established | Indicates that there is an authenticated Layer 3 connection to the Infranet Controller |
| Starting Authentication | Indicates that OAC has begun the layer 3 EAP-over-HTTP authentication to an Infranet Controller |
| Authenticating | Indicates that the authentication process has started and is in process. This message will be displayed until you either successfully authenticate or fail authentication. |
| Terminated | The layer 3 session between OAC and the Infranet Controller was terminated by the IC for administrative purposes. |
| Retrying | Indicates that OAC has failed to authenticate to an Infranet Controller and is retrying the authentication. |
| Error (message) | Indicates a general error has occurred during authentication. Refer to the parenthetical text for more detail. |
Infranet Controller – Compliance
| Your computer meets the security policies | Indicates that the host check process has completed and the PC has met the Host Check policies as defined by the Infranet Controller |
| Your computer has failed one or more security policies. You may not have full network access. How do I resolve this problem | Indicates that OAC has failed one or more of the host check policies as defined by the Infranet Controller. You should click on the “How do I resolve this problem” hyperlink to see any custom instructions returned by the Infranet Controller |
| <Blank> | If there is no compliance message displayed, it can indicate one of the following:
- There are no host checks required by the Infranet Controller
- You have authenticated with a protocol that does not support the host check process.
NOTE : There is currently only one combination within OAC that supports host check. This is EAP-TTLS with EAP-JUAC as the inner EAP protocol.
|
GINA – Status Messages
The status window, which is displayed when OAC’s GINA module is used, greatly differs from those displayed within the OAC management screens These message will be displayed during the login process:
GINA
| Searching for Access Point | This message is displayed during the following conditions:
- The access point is not in range
- Your Network Settings do not match those configured on the Access Point
- There is no SSID in range that matches the SSID being searched for. SSIDs are case sensitive.
NOTE : This message is a very common cause for calls to the Pulse Secure Support. |
| Requesting Authentication | Indicates that OAC is attempting to authenticate, but has not receive a response from the switch/access point |
| Authenticating | Indicates that the authentication process has started and is in process. This message will be displayed until you either successfully authenticate or fail authentication. |
| Waiting to Authenticate | Indicates that OAC has started the authentication process, but is now waiting on a response from the authentication server. You are not yet connected and the last authentication failed but you are waiting to retry. If you see this message for a considerable length of time, there might be an association problem. If so, select the association mode required for your access point. |
| Open | Indicates that OAC has successfully authenticated the user to the network via the 802.1X protocol and has opened the network adapter port to allow network access NOTE : This is a very misleading message. At GINA time, OAC only shows the message “Open” for Open and Authenticated connections. |
| Waiting for IP Address | Indicates that OAC has authenticated the user and has instructed the operating system to request an IP address from a DHCP server, if DHCP is configured. OAC will wait for 15 seconds before continuing. NOTE : If the system is configured with a static IP address or is on a guest network where the network does not require authentication, this message will be displayed very briefly. |
| Waiting for Gateway Address | Indicates that OAC is waiting for the DHCP server assigned default gateway. OAC will wait for 15 seconds before continuing NOTE : If the system is configured with a static IP address and default gateway, this message will be displayed very briefly. |
| Synchronizing | This message is displayed when OAC is transitioning from machine account autthentication to user authentication. |
