11-27-2008 07:23 AM - edited 07-03-2021 04:49 PM
Sometimes when I connect to 877W router via WiFi Im getting notice (which mentioned on cisco.com site) in logs:
%DOT11-7-CCKM_AUTH_FAILED : Station [enet] CCKM authentication failed
official explanation is: "The station has failed CCKM authentication."
And "Recommended Action" is: "Verify the topology of the APs under the WDS domain."
But 877W does not support WDS commands. And also there no ability to turn CCKM off.
Only one thing helps: reload.
I tried and made some tests with following IOSs:
c870-advipservicesk9-mz.124-22.T
c870-advipservicesk9-mz.124-15.T7
I was using 3 different PC's (two XP's and one OSX Leopard, all of them were with latest updates/patches)
To confirm highly mentioned problem its enough to switch reauth period to 10 seconds:
dot1x reauth-period 10
And after few minutes we'll get many notices like:
%DOT11-7-CCKM_AUTH_FAILED: Station [enet] authentication failed
And all clients which are trying to reassociate or associate with 877w are unable to connect.
I was surfing through forum and noticed following steps for testing:
- to leave only one SSID
- to turn guest-mode off
- to turn off TKIP and allow only AES.
I tried everything and that was useless.
Maybe someone got any idea how to solve this problem?
11-27-2008 11:35 PM
.
12-03-2008 04:41 AM
After some series of tests I discovered following.
Bug exists only in IOS 22.T + AES. If im using TKIP encryption or if I turn encryption off everything works perfectly.
12-03-2008 06:44 AM
CSCsv80189, its a bug in the new 22 code... if you back rev it will work fine.....
12-04-2008 04:38 AM
Yes, 15.T7 work but writes
"*** Not encrypted dot1x packet from [MAC] has been discarded"
while client reauthentication.
12-04-2008 06:56 AM
CSCsv80189 bug mentioned only for 28xx but same trouble exist on 871W and 877W.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide