Nokia E51 Fails 802.1x with Invalid RSN Descriptor Code 254

Unanswered Question
Jun 25th, 2009
User Badges:

Hi Guys,


Trying to get a Nokia E51 authenticated to a WLAN, and get the following :


Invalid RSN Descriptor code (254) from mobile xx:xx:xx:xx:xx:xx



Then it reties, and then retires, and the hits the limit of 3 and fails.


Here is the debug info.


Anyone seen the same kinda thing?




Thu Jun 25 14:11:45 2009: xx:xx:xx:xx:xx:xx Sending EAP-Success to mobile xx:xx:xx:xx:xx:xx (EAP Id 253)

Thu Jun 25 14:11:45 2009: Including PMKID Thu Jun 25 14:11:45 2009: [0000] bla bla bla :)

Thu Jun 25 14:11:45 2009: xx:xx:xx:xx:xx:xx Sending EAPOL-Key Message to mobile xx:xx:xx:xx:xx:xx

state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00

Thu Jun 25 14:11:45 2009: xx:xx:xx:xx:xx:xx Entering Backend Auth Success state (id=253) for mobile xx:xx:xx:xx:xx:xx

Thu Jun 25 14:11:45 2009: xx:xx:xx:xx:xx:xx Received Auth Success while in Authenticating state for mobile xx:xx:xx:xx:xx:xx

Thu Jun 25 14:11:45 2009: xx:xx:xx:xx:xx:xx dot1x - moving mobile xx:xx:xx:xx:xx:xx into Authenticated state


Thu Jun 25 14:11:45 2009: xx:xx:xx:xx:xx:xx Received EAPOL-Key from mobile xx:xx:xx:xx:xx:xx

Thu Jun 25 14:11:45 2009: xx:xx:xx:xx:xx:xx Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile xx:xx:xx:xx:xx:xx

Thu Jun 25 14:11:45 2009: xx:xx:xx:xx:xx:xx Invalid RSN Descriptor code (254) from mobile xx:xx:xx:xx:xx:xx

Thu Jun 25 14:11:46 2009: xx:xx:xx:xx:xx:xx 802.1x 'timeoutEvt' Timer expired for station xx:xx:xx:xx:xx:xx


Thu Jun 25 14:11:46 2009: xx:xx:xx:xx:xx:xx Retransmit 1 of EAPOL-Key M1 (length 121) for mobile xx:xx:xx:xx:xx:xx

Thu Jun 25 14:11:46 2009: xx:xx:xx:xx:xx:xx Received EAPOL-Key from mobile xx:xx:xx:xx:xx:xx

Thu Jun 25 14:11:46 2009: xx:xx:xx:xx:xx:xx Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile xx:xx:xx:xx:xx:xx

Thu Jun 25 14:11:46 2009: xx:xx:xx:xx:xx:xx Invalid RSN Descriptor code (254) from mobile xx:xx:xx:xx:xx:xx

Thu Jun 25 14:11:47 2009: xx:xx:xx:xx:xx:xx 802.1x 'timeoutEvt' Timer expired for station xx:xx:xx:xx:xx:xx


Thu Jun 25 14:11:47 2009: xx:xx:xx:xx:xx:xx Retransmit 2 of EAPOL-Key M1 (length 121) for mobile xx:xx:xx:xx:xx:xx

Thu Jun 25 14:11:47 2009: xx:xx:xx:xx:xx:xx Received EAPOL-Key from mobile xx:xx:xx:xx:xx:xx

Thu Jun 25 14:11:47 2009: xx:xx:xx:xx:xx:xx Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile xx:xx:xx:xx:xx:xx

Thu Jun 25 14:11:47 2009: xx:xx:xx:xx:xx:xx Invalid RSN Descriptor code (254) from mobile xx:xx:xx:xx:xx:xx

Thu Jun 25 14:11:48 2009: xx:xx:xx:xx:xx:xx 802.1x 'timeoutEvt' Timer expired for station xx:xx:xx:xx:xx:xx


Thu Jun 25 14:11:48 2009: xx:xx:xx:xx:xx:xx Retransmit failure for EAPOL-Key M1 to mobile xx:xx:xx:xx:xx:xx, retransmit count 3, mscb deauth count 0

Thu Jun 25 14:11:48 2009: xx:xx:xx:xx:xx:xx Sent Deauthenticate to mobile on BSSID xx:xx:xx:xx:xx:xx slot 0

Thu Jun 25 14:11:48 2009: xx:xx:xx:xx:xx:xx Scheduling deletion of Mobile Station: (callerId: 92) in 10 seconds





Many thx all,

Ken




  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
dancampb Thu, 06/25/2009 - 08:55
User Badges:
  • Cisco Employee,

There isn't really enough info but you may be hitting bug CSCsv21872. What type of security do you have setup on the WLAN?

kfarrington Thu, 06/25/2009 - 09:03
User Badges:

Hi Dan,


We are using wpa2 and eap-tls, so 802.1x


does that help?


Many thx, as I am desperate to get this up and running :))))


Cheers,

Ken

Actions

This Discussion