cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
945
Views
0
Helpful
1
Replies

MFP Anomaly Detected Access Points are moving from one wlc to another and vice versa

Alex49
Level 1
Level 1

Hi together,

a customer has lost some Access Points to another WLC with 7.2  and then they come back after 15 minutes to the origin WLC with 7.5

Attached the messages

MFP Protection is configured as optional

152

Wed Nov 27 05:33:26 2013

MFP Anomaly Detected - 1 Not encrypted event(s) found as   violated by the radio 58:bf:ea:0f:67:4a and detected by the dot11 interface   at slot 1 of AP 58:bf:ea:0f:67:40 in 300 seconds when observing . Client's   last source mac 70:11:24:e4:43:0f

153

Wed Nov 27 05:31:40 2013

AP Disassociated. Base Radio MAC:88:43:e1:56:91:d0

154

Wed Nov 27 05:31:40 2013

AP's Interface:0(802.11b) Operation State Down: Base Radio   MAC:88:43:e1:56:91:d0 Cause=New Discovery Status:NA

155

Wed Nov 27 05:31:33 2013

AP Disassociated. Base Radio MAC:58:bf:ea:0f:73:d0

156

Wed Nov 27 05:31:33 2013

AP's Interface:1(802.11a) Operation State Down: Base Radio   MAC:58:bf:ea:0f:73:d0 Cause=New Discovery Status:NA

157

Wed Nov 27 05:31:33 2013

AP's Interface:0(802.11b) Operation State Down: Base Radio   MAC:58:bf:ea:0f:73:d0 Cause=New Discovery Status:NA

158

Wed Nov 27 05:31:28 2013

AP Disassociated. Base Radio MAC:58:bf:ea:0f:fc:20

159

Wed Nov 27 05:31:28 2013

AP's Interface:1(802.11a) Operation State Down: Base Radio   MAC:58:bf:ea:0f:fc:20 Cause=New Discovery Status:NA

160

Wed Nov 27 05:31:28 2013

AP's Interface:0(802.11b) Operation State Down: Base Radio   MAC:58:bf:ea:0f:fc:20 Cause=New Discovery Status:NA

161

Wed Nov 27 05:31:17 2013

AP Disassociated. Base Radio MAC:b4:e9:b0:e4:02:20

162

Wed Nov 27 05:31:17 2013

AP's Interface:1(802.11a) Operation State Down: Base Radio   MAC:b4:e9:b0:e4:02:20 Cause=New Discovery Status:NA

163

Wed Nov 27 05:31:17 2013

AP's Interface:0(802.11b) Operation State Down: Base Radio   MAC:b4:e9:b0:e4:02:20 Cause=New Discovery Status:NA

164

Wed Nov 27 05:31:15 2013

AP Disassociated. Base Radio MAC:a4:18:75:eb:da:b0

165

Wed Nov 27 05:31:15 2013

AP's Interface:1(802.11a) Operation State Down: Base Radio   MAC:a4:18:75:eb:da:b0 Cause=New Discovery Status:NA

166

Wed Nov 27 05:31:15 2013

AP's Interface:0(802.11b) Operation State Down: Base Radio   MAC:a4:18:75:eb:da:b0 Cause=New Discovery Status:NA

167

Wed Nov 27 05:28:26 2013

MFP Anomaly Detected - 35 Not encrypted event(s) found as   violated by the radio d8:24:bd:2f:df:6f and detected by the dot11 interface   at slot 1 of AP d8:24:bd:2f:df:60 in 300 seconds when observing Deauth.   Client's last source mac 00:23:14:a7:e3:54

168

Wed Nov 27 05:23:26 2013

MFP Anomaly Detected - 23 Not encrypted event(s) found as   violated by the radio f8:4f:57:a5:40:b2 and detected by the dot11 interface   at slot 0 of AP f8:4f:57:a5:40:b0 in 300 seconds when observing . Client's   last source mac 44:4c:0c:ba:27:77

Don´t know at the moment how to handle it.

Regards

Alex

1 Reply 1

Hi lAlex,

Disable Client MFP under WLAN advanced tab & see if  this still occur

Regards

Rasika

**** Pls rate all useful responses *****

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card