cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1296
Views
0
Helpful
5
Replies

WLC 4400 Zebra Wireless Printers invalid MIC errors

jamiec
Level 1
Level 1

Hello,

I have 4404 WLC's running 4.0.217.0 and I am getting invalid MIC errors with new Zebra QL220 Plus printers using wpa/peap/tkip. All other clients work fine, just not these printers.

Error log:

[SECURITY]1x_eapkey.c 723: Received EAPOL-key M2 with invalid MIC from cckm mobile MAC ADDRESS

[SECURITY]1x_ptsm.c 391: MAX EAPOL-KEY M1 retransmissions reached for mobile MAC ADDRESS

According to Zebra's kb, changing the following settings is all that is required to get the printers to work. I did not have the same luck.

config advanced eap identity-request timeout 5

config advanced eap request-timout 5

The printers are running the latest software SHSTG10Z.

Any help is appreciated.

Thanks.

5 Replies 5

plandobait
Level 1
Level 1

I had QL420+ and wpa/psk/tkip and WLC's 4.0.217.0 - in this instance some of the QL420's would drop the last character of my key causing the MIC errors.

Thanks for the reply! What was your solution? Return the ones that didn't work? I have only tried 2 out of 25 so far.

Thanks again!

jamie

I should have typed more, but was rushing to get to a meeting. O.O

Are you using Label Vista for network setup or using parameter commands? I was using Label Vista - typing the key in ASCii.

What I meant by dropping is the Label Vista program would drop the last character if I copy/paste the ASCii key. If I hand typed the key in, it usually worked fine (providing I didn't fat finger it 3-4 times).

I did, however, have 5 or 6 out of 125 that I sent back because no matter what I did I ended up with MIC errors.

Hi,

We are using label vista which is a battle itself. We are using WPA1/PEAP/TKIP which requires user authentication so we dont have to worry about hex/ascii keys. We have tried different user accounts that are working on wireless devices right next to the printers and I don't think we are even getting to the point of authentication yet... I think its failing on setting up the 802.1x session with the cert keys. I will have the site try more printers, but the odds of the first 2 of 25 being bad aren't good.

Thanks for your help!

jamie

Label Vista is a trip...glad I don't have to use it anymore. :P

Sorry I couldn't help ya...was hoping hearing what I went through might spark something to check.

Maybe use the "debug lwapp events enable" command and "debug aaa all enable" commands to see what's going on once you power up the printer and it trys to authenticate.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: