Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

Supplicant sent malformed PEAP message - bad record MAC

 

 Hi all,

   A specific kind of endpont, a device called Raspberry PI, is unable to connect or keep connected to our wireless network and the message generated by ISE is : Supplicant sent malformed PEAP message - bad record MAC 

   the WLAN accepts AES end TKIP and both have been tested.

 

 I got some logs from WLC. Hope someone out there could help me. 

 

*dot1xMsgTask: Aug 27 20:26:40.673: 00:e7:a6:56:86:8c dot1x - moving mobile 00:e7:a6:56:86:8c into Connecting state

*dot1xMsgTask: Aug 27 20:26:40.673: 00:e7:a6:56:86:8c Sending EAP-Request/Identity to mobile 00:e7:a6:56:86:8c (EAP Id 1)

*Dot1x_NW_MsgTask_4: Aug 27 20:26:40.699: 00:e7:a6:56:86:8c Received EAPOL EAPPKT from mobile 00:e7:a6:56:86:8c

*Dot1x_NW_MsgTask_4: Aug 27 20:26:40.699: 00:e7:a6:56:86:8c Received Identity Response (count=1) from mobile 00:e7:a6:56:86:8c

*Dot1x_NW_MsgTask_4: Aug 27 20:26:40.699: 00:e7:a6:56:86:8c EAP State update from Connecting to Authenticating for mobile 00:e7:a6:56:86:8c

*Dot1x_NW_MsgTask_4: Aug 27 20:26:40.699: 00:e7:a6:56:86:8c dot1x - moving mobile 00:e7:a6:56:86:8c into Authenticating state

*Dot1x_NW_MsgTask_4: Aug 27 20:26:40.699: 00:e7:a6:56:86:8c Entering Backend Auth Response state for mobile 00:e7:a6:56:86:8c

*Dot1x_NW_MsgTask_4: Aug 27 20:26:40.700: 00:e7:a6:56:86:8c Received EAPOL EAPPKT from mobile 00:e7:a6:56:86:8c

*Dot1x_NW_MsgTask_4: Aug 27 20:26:40.700: 00:e7:a6:56:86:8c Received Duplicate EAP Response Identity packet with eapid=1 from mobile 00:e7:a6:56:86:8c

*Dot1x_NW_MsgTask_4: Aug 27 20:26:40.702: 00:e7:a6:56:86:8c Received EAPOL EAPPKT from mobile 00:e7:a6:56:86:8c

*Dot1x_NW_MsgTask_4: Aug 27 20:26:40.702: 00:e7:a6:56:86:8c Received Duplicate EAP Response Identity packet with eapid=1 from mobile 00:e7:a6:56:86:8c

*Dot1x_NW_MsgTask_4: Aug 27 20:26:40.726: 00:e7:a6:56:86:8c Processing Access-Reject for mobile 00:e7:a6:56:86:8c

*Dot1x_NW_MsgTask_4: Aug 27 20:26:40.726: 00:e7:a6:56:86:8c Removing PMK cache due to EAP-Failure for mobile 00:e7:a6:56:86:8c (EAP Id -1)

*Dot1x_NW_MsgTask_4: Aug 27 20:26:40.726: 00:e7:a6:56:86:8c Sending EAP-Failure to mobile 00:e7:a6:56:86:8c (EAP Id -1)

*Dot1x_NW_MsgTask_4: Aug 27 20:26:40.726: 00:e7:a6:56:86:8c Entering Backend Auth Failure state (id=-1) for mobile 00:e7:a6:56:86:8c

*Dot1x_NW_MsgTask_4: Aug 27 20:26:40.726: 00:e7:a6:56:86:8c Setting quiet timer for 5 seconds for mobile 00:e7:a6:56:86:8c

218
Views
0
Helpful
0
Replies