cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1429
Views
0
Helpful
5
Replies

877W %DOT11-7-CCKM_AUTH_FAILED

Anatoytyukanov
Level 1
Level 1

Sometimes when I connect to 877W router via WiFi Im getting notice (which mentioned on cisco.com site) in logs:

%DOT11-7-CCKM_AUTH_FAILED : Station [enet] CCKM authentication failed

official explanation is: "The station has failed CCKM authentication."

And "Recommended Action" is: "Verify the topology of the APs under the WDS domain."

But 877W does not support WDS commands. And also there no ability to turn CCKM off.

Only one thing helps: reload.

I tried and made some tests with following IOSs:

c870-advipservicesk9-mz.124-22.T

c870-advipservicesk9-mz.124-15.T7

I was using 3 different PC's (two XP's and one OSX Leopard, all of them were with latest updates/patches)

To confirm highly mentioned problem its enough to switch reauth period to 10 seconds:

dot1x reauth-period 10

And after few minutes we'll get many notices like:

%DOT11-7-CCKM_AUTH_FAILED: Station [enet] authentication failed

And all clients which are trying to reassociate or associate with 877w are unable to connect.

I was surfing through forum and noticed following steps for testing:

- to leave only one SSID

- to turn guest-mode off

- to turn off TKIP and allow only AES.

I tried everything and that was useless.

Maybe someone got any idea how to solve this problem?

5 Replies 5

russlavbank
Level 1
Level 1

.

After some series of tests I discovered following.

Bug exists only in IOS 22.T + AES. If im using TKIP encryption or if I turn encryption off everything works perfectly.

CSCsv80189, its a bug in the new 22 code... if you back rev it will work fine.....

Yes, 15.T7 work but writes

"*** Not encrypted dot1x packet from [MAC] has been discarded"

while client reauthentication.

Anatoytyukanov
Level 1
Level 1

CSCsv80189 bug mentioned only for 28xx but same trouble exist on 871W and 877W.

Review Cisco Networking products for a $25 gift card