Strange messages in logs.

jamesmpoplar · ‎11-02-2007

Currently we are running some scan guns on the floor, a new model is running with no issue and the MAC doesn't show up in the logs.

For the older scan guns I am seeing the following messages in the WLC 4402 logs:

Fri Nov 2 08:13:04 2007 [SECURITY] 1x_ptsm.c 391: MAX EAPOL-Key M1 retransmissions reached for mobile 00:0b:6c:19:08:b1

These older guns sometimes drop, not due to signal issues, but because of these messages mostly.

what are some thoughts on the cause? They are all authenticating with WPA PSKs.

Googling the above message and searching in ciscos internal database really haven't yielded anything.

Rob Huffman · ‎11-02-2007

Hi James,

I thought you might want to see this note;

The [SECURITY] 1x_ptsm.c 391: MAX EAPOL-Key M3 retransmissions reached error message means that the card did not respond to a request for its identity. You can extend the EAP timers on the controllers to wait for client 802.1x info if you use these commands on the WLC CLI:

config advanced eap identity-request-timeout 120

config advanced eap identity-request-retries 20

config advanced eap request-timeout 120

config advanced eap request-retries 20

save config

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a0080665d18.shtml#tshoot

Hope this helps!

Rob