11-27-2008 07:23 AM - edited 07-03-2021 04:49 PM
Sometimes when I connect to 877W router via WiFi Im getting notice (which mentioned on cisco.com site) in logs:
%DOT11-7-CCKM_AUTH_FAILED : Station [enet] CCKM authentication failed
official explanation is: "The station has failed CCKM authentication."
And "Recommended Action" is: "Verify the topology of the APs under the WDS domain."
But 877W does not support WDS commands. And also there no ability to turn CCKM off.
Only one thing helps: reload.
I tried and made some tests with following IOSs:
c870-advipservicesk9-mz.124-22.T
c870-advipservicesk9-mz.124-15.T7
I was using 3 different PC's (two XP's and one OSX Leopard, all of them were with latest updates/patches)
To confirm highly mentioned problem its enough to switch reauth period to 10 seconds:
dot1x reauth-period 10
And after few minutes we'll get many notices like:
%DOT11-7-CCKM_AUTH_FAILED: Station [enet] authentication failed
And all clients which are trying to reassociate or associate with 877w are unable to connect.
I was surfing through forum and noticed following steps for testing:
- to leave only one SSID
- to turn guest-mode off
- to turn off TKIP and allow only AES.
I tried everything and that was useless.
Maybe someone got any idea how to solve this problem?
11-27-2008 11:35 PM
.
12-03-2008 04:41 AM
After some series of tests I discovered following.
Bug exists only in IOS 22.T + AES. If im using TKIP encryption or if I turn encryption off everything works perfectly.
12-03-2008 06:44 AM
CSCsv80189, its a bug in the new 22 code... if you back rev it will work fine.....
12-04-2008 04:38 AM
Yes, 15.T7 work but writes
"*** Not encrypted dot1x packet from [MAC] has been discarded"
while client reauthentication.
12-04-2008 06:56 AM
CSCsv80189 bug mentioned only for 28xx but same trouble exist on 871W and 877W.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: