×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Access Point disconnecting users

Answered Question
Feb 25th, 2014
User Badges:

Good day,


Probably, this topic has been discussed somewhere else, but kind of hard the right solution or at least a work around to calm down this issue.


The problem is that users are complaining that sometimes they lost the conextion, it is ramdomly but often and now it is becoming more intense.


when I checked the logs, it provides me some information but I dont understand what could be causing this issue, a mis - configuration or something else.


It is happening on a big floor area where there are 2 Access Points, so the range in meters is good, at least both are far away enough.


and we have another 2 APs on another floor. they are good and people are NOT complaining about the wireless.


so that is why I think it is a miss config or something else with version or something because long time ago, this issue was not happening until now that it has risen more complains.


something to note is that the they have password via ACLs with MACs, so other words, it kind of double authen,


Users have to have the password and the MAC address has to be added to the AP


**********************************************************************************************************************************************************


Version of AP 1


Cisco IOS Software, C1260 Software (AP3G1-K9W7-M), Version 12.4(25d)JA1, RELEASE SOFTWARE (fc1)

System image file is "flash:/ap3g1-k9w7-mx.124-25d.JA1/ap3g1-k9w7-mx.124-25d.JA1"

Model: AIR-AP1262N-A-K9



Version of AP 2



Cisco IOS Software, C1260 Software (AP3G1-K9W7-M), Version 12.4(25d)JA1, RELEASE SOFTWARE (fc1)

System image file is "flash:/ap3g1-k9w7-mx.124-25d.JA1/ap3g1-k9w7-mx.124-25d.JA1"

AIR-AP1262N-A-K9



**********************************************************************************************************



LOG AP 1



Feb 24 22:27:11.816: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 1c69.a56d.6cd4 Reason: Sending station has left the BSS

*Feb 24 22:27:11.841: %DOT11-6-ASSOC: Interface Dot11Radio0, Station  1c69.a56d.6cd4 Associated KEY_MGMT[NONE]

*Feb 24 22:27:12.036: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0837.3d97.bdc2 Reason: Sending station has left the BSS

*Feb 24 22:27:13.373: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 7011.24cc.25c8 Reason: Sending station has left the BSS

*Feb 24 22:27:13.376: %DOT11-4-MAXRETRIES: Packet to client 7011.24cc.25c8 reached max retries, removing the client

*Feb 24 22:27:13.650: %DOT11-7-AUTH_FAILED: Station b864.9122.b069 Authentication failed

*Feb 24 22:27:14.575: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   0837.3d97.bdc2 Associated KEY_MGMT[NONE]

*Feb 24 22:27:19.246: %DOT11-7-AUTH_FAILED: Station b864.9122.b069 Authentication failed

*Feb 24 22:27:24.286: %DOT11-7-AUTH_FAILED: Station b864.9122.b069 Authentication failed

*Feb 24 22:27:29.567: %DOT11-7-AUTH_FAILED: Station b864.9122.b069 Authentication failed

*Feb 24 22:27:34.236: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   7011.24cc.25c8 Associated KEY_MGMT[NONE]

*Feb 24 22:27:35.069: %DOT11-7-AUTH_FAILED: Station b864.9122.b069 Authentication failed

*Feb 24 22:27:40.360: %DOT11-7-AUTH_FAILED: Station b864.9122.b069 Authentication failed

*Feb 24 22:27:44.340: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 7011.24cc.25c8 Reason: Sending station has left the BSS

*Feb 24 22:27:45.371: %DOT11-7-AUTH_FAILED: Station b864.9122.b069 Authentication failed

*Feb 24 22:27:45.482: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0837.3d97.bdc2 Reason: Sending station has left the BSS

*Feb 24 22:27:50.861: %DOT11-7-AUTH_FAILED: Station b864.9122.b069 Authentication failed

*Feb 24 22:27:53.245: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   781f.dbea.4833 Associated KEY_MGMT[NONE]

*Feb 24 22:27:53.538: %DOT11-6-ASSOC: Interface Dot11Radio0, Station  ac81.12a8.4b1f Reassociated KEY_MGMT[WPAv2]

*Feb 24 22:27:55.891: %DOT11-4-MAXRETRIES: Packet to client 1c69.a56d.6cd4 reached max retries, removing the client

*Feb 24 22:27:55.891: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 1c69.a56d.6cd4 Reason: Previous authentication no longer valid

*Feb 24 22:27:55.897: %DOT11-4-MAXRETRIES: Packet to client 1c69.a56d.6cd4 reached max retries, removing the client

*Feb 24 22:27:56.158: %DOT11-7-AUTH_FAILED: Station b864.9122.b069 Authentication failed

*Feb 24 22:27:57.558: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   7011.24cc.25c8 Associated KEY_MGMT[NONE]

*Feb 24 22:28:00.012: %DOT11-6-ASSOC: Interface Dot11Radio0, Station  1c69.a56d.6cd4 Associated KEY_MGMT[NONE]

*Feb 24 22:28:01.770: %DOT11-7-AUTH_FAILED: Station b864.9122.b069 Authentication failed

*Feb 24 22:28:05.784: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 9803.d886.5967







LOG AP 2



Feb 24 17:36:17.181: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   f8e0.79c0.56aa Associated KEY_MGMT[WPAv2 PSK]

*Feb 24 17:36:25.964: %DOT11-7-AUTH_FAILED: Station 2054.7693.a09f Authentication failed

*Feb 24 17:36:48.123: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station f8e0.79c0.56aa Reason: Sending station has left the BSS

*Feb 24 17:36:48.827: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   f8e0.79c0.56aa Associated KEY_MGMT[WPAv2 PSK]

*Feb 24 17:37:12.115: %DOT11-7-AUTH_FAILED: Station 2054.7693.a09f Authentication failed

*Feb 24 17:37:19.778: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station f8e0.79c0.56aa Reason: Sending station has left the BSS

*Feb 24 17:37:21.933: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   b4f0.abd9.6154 Associated KEY_MGMT[WPAv2 PSK]

*Feb 24 17:37:33.987: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station b4f0.abd9.6154 Reason: Sending station has left the BSS

*Feb 24 17:37:34.012: %DOT11-7-AUTH_FAILED: Station bcf5.acff.cc1f Authentication failed

*Feb 24 17:37:36.155: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   f8e0.79c0.56aa Associated KEY_MGMT[WPAv2 PSK]

*Feb 24 17:37:55.265: %DOT11-7-AUTH_FAILED: Station bcf5.acff.cc1f Authentication failed

*Feb 24 17:38:00.905: %DOT11-6-ASSOC: Interface Dot11Radio0, Station  ac81.12a8.4b1f Reassociated KEY_MGMT[WPAv2]

*Feb 24 17:38:07.055: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station f8e0.79c0.56aa Reason: Sending station has left the BSS

*Feb 24 17:38:23.539: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   f8e0.79c0.56aa Associated KEY_MGMT[WPAv2 PSK]

*Feb 24 17:38:33.898: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   bcf5.acff.cc1f Associated KEY_MGMT[WPAv2 PSK]

*Feb 24 17:38:54.439: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station f8e0.79c0.56aa Reason: Sending station has left the BSS

*Feb 24 17:39:04.933: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station bcf5.acff.cc1f Reason: Sending station has left the BSS

*Feb 24 17:39:06.802: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   f8e0.79c0.56aa Associated KEY_MGMT[WPAv2 PSK]

*Feb 24 17:39:07.601: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   bcf5.acff.cc1f Associated KEY_MGMT[WPAv2 PSK]

*Feb 24 17:39:30.986: %DOT11-7-AUTH_FAILED: Station 2054.7693.a09f Authentication failed

*Feb 24 17:39:32.518: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station bcf5.acff.cc1f Reason: Sending station has left the BSS

*Feb 24 17:39:37.743: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station f8e0.79c0.56aa Reason: Sending station has left the BSS

*Feb 24 17:40:00.905: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   bcf5.acff.cc1f Associated KEY_MGMT[WPAv2 PSK]

*Feb 24 17:40:31.551: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   f8e0.79c0.56aa Associated KEY_MGMT[WPAv2 PSK]

*Feb 24 17:40:31.907: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station bcf5.acff.cc1f Reason: Sending station has left the BSS

*Feb 24 17:40:34.558: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   bcf5.acff.cc1f Associated KEY_MGMT[WPAv2 PSK]

*Feb 24 17:41:02.480: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station f8e0.79c0.56aa Reason: Sending station has left the BSS

*Feb 24 17:41:03.688: %DOT11-7-AUTH_FAILED: Station 2054.7693.a09f Authentication failed

*Feb 24 17:41:05.251: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   1410.9fd7.5357 Reassociated KEY_MGMT[WPAv2 PSK]



what could be possible the solution, work around or any other information that you might want to check, I will really appreciate it please

Correct Answer by Scott Fella about 3 years 5 months ago

Remove TKIP from the encryption. Since your using WPA v2, you only want AES-CCM

Sent from Cisco Technical Support iPhone App

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Scott Fella Tue, 02/25/2014 - 11:59
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    The Hall of Fame designation is a lifetime achievement award based on significant overall achievements in the community. 

  • Cisco Designated VIP,

    2017 Wireless

How do you have the SSID configured... Make sure that you either have it set to WPA/TKIP or WPA2/AES.... don't mix and match as that causes issues with some clients. 


Might want to post your show run-config also.


Thanks,

Scott

*****Help out other by using the rating system and marking answered questions as "Answered"*****

Alex Yomay Tue, 02/25/2014 - 13:02
User Badges:

Hi, thank you for your response,


I have attached the config, please check it out and let me know if you find discrepancies. I dont know if it is the server itself or the Access Point itself


thank you

Correct Answer
Scott Fella Tue, 02/25/2014 - 13:13
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    The Hall of Fame designation is a lifetime achievement award based on significant overall achievements in the community. 

  • Cisco Designated VIP,

    2017 Wireless

Remove TKIP from the encryption. Since your using WPA v2, you only want AES-CCM

Sent from Cisco Technical Support iPhone App

Alex Yomay Tue, 02/25/2014 - 14:05
User Badges:

Sure,


I will try now and let you know as soon as I get feedback from the user.


Again, thank you so much.


I will let you know soon.


Regards,

Scott Fella Tue, 02/25/2014 - 15:13
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    The Hall of Fame designation is a lifetime achievement award based on significant overall achievements in the community. 

  • Cisco Designated VIP,

    2017 Wireless

No problem. Keep us posted.

Sent from Cisco Technical Support iPhone App

Alex Yomay Wed, 02/26/2014 - 09:18
User Badges:

Hi,


Let me tell you that so fat so good. Something that I would like to share is that the same config is applied to others 2 APs in the second floor, but they dont complaint about the issue with the wireless.


Those APs have the following:

encryption vlan 310 mode ciphers aes-ccm tkip


but they are working fine, However, interesting, I removed the tkip from the ones that had issues but so fat so good.


I will let you know for more updates..


thank you

Alex Yomay Fri, 02/28/2014 - 05:09
User Badges:

Hi,


Its been 2 days since I modified the config and so far so god . Everything is working normally as far as the users conection.


They have not reported any issues. However, the logs shows the same status, but the issue has been fixed which is more important for me jeje


Thank you so much for your great support.


This thread is closed with a good resolution.


Regards,

Scott Fella Fri, 02/28/2014 - 05:37
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    The Hall of Fame designation is a lifetime achievement award based on significant overall achievements in the community. 

  • Cisco Designated VIP,

    2017 Wireless

Good to know. It might be that you have some devices that are still trying to use the other encryption. I just ran into this yesterday and a bunch if new android tablets where connecting to WPA/TKIP because the SSID had both configured. We disable WPA TKIP and these devices connected fine but since they originally was setup to connect to either, we will still see these errors. They are going to go back to reconfigure these over the summer.

Sent from Cisco Technical Support iPhone App

Actions

This Discussion

Related Content

 

 

Trending Topics - Security & Network