cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
388
Views
0
Helpful
4
Replies

Wireless Bridge 1532E client authentication issue

ilyakligman
Level 1
Level 1

I have setup wireless in camp as following:

One AP1532E connected to wired network, three AP1532E configured as wireless bridges on Dot11Radio1 (5 MHz) interfaces and as root APs on Dot11Radio0 (2.4 MHz) interfaces. 

Some clients have trouble connecting to wireless and I see the following messages on all APs including wired one:

Capri: acif_ath_crypto_vlan_key_get Invalid key type 0

I have enable the same encryption on Dot11Radio0 and Dot11Radio1 interfaces:

encryption vlan 2 mode ciphers aes-ccm tkip wep128.

As I mentioned some wireless clients have trouble and others work fine.

Any suggestion will be appreciated.

1 Accepted Solution

Accepted Solutions

Only enable AES-CCM  & check. If you still have only TKIP supported clients, then you can enable it, but at least  get rid of WEP if that is the case. Encryption config should be like this under radio interface.

encryption vlan 2 mode ciphers aes-ccm

 Also make sure WPA version 2 selected as authentication key management under SSID configuration.

HTH

Rasika

**** Pls rate all useful responses ****

View solution in original post

4 Replies 4

Only enable AES-CCM  & check. If you still have only TKIP supported clients, then you can enable it, but at least  get rid of WEP if that is the case. Encryption config should be like this under radio interface.

encryption vlan 2 mode ciphers aes-ccm

 Also make sure WPA version 2 selected as authentication key management under SSID configuration.

HTH

Rasika

**** Pls rate all useful responses ****

Thank you Manannalage, unfortunately I can't take off other encryption options right now. In order to remove wep encryption I will need to remove SSID binding to Radio interface and it will disconnect the bridge. I will need to be on the location and connect through console to those bridges to do the changes. It probably wont happen soon. I have changed wep to version 2 so.

Thank you for you suggestions.

Thank you for your suggestion. It worked!

Also I was able to take wep encryption off from wireless bridges without connecting to the console of each bridge. I used TFTP server to download current configs, made a change with notepad, and uploaded modified configs to sartup-config on the bridges, then rebooted them. Worked pretty well.

Good to hear that.

Thanks for the follow up & update on how you did it.

Rasika

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card