Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Users might experience few discrepancies in Search results. We are working on this on our side. We apologize for the inconvenience it may have caused.
New Member

MFP Anomaly Detected Access Points are moving from one wlc to another and vice versa

Hi together,

a customer has lost some Access Points to another WLC with 7.2  and then they come back after 15 minutes to the origin WLC with 7.5

Attached the messages

MFP Protection is configured as optional

152

Wed Nov 27 05:33:26 2013

MFP Anomaly Detected - 1 Not encrypted event(s) found as   violated by the radio 58:bf:ea:0f:67:4a and detected by the dot11 interface   at slot 1 of AP 58:bf:ea:0f:67:40 in 300 seconds when observing . Client's   last source mac 70:11:24:e4:43:0f

153

Wed Nov 27 05:31:40 2013

AP Disassociated. Base Radio MAC:88:43:e1:56:91:d0

154

Wed Nov 27 05:31:40 2013

AP's Interface:0(802.11b) Operation State Down: Base Radio   MAC:88:43:e1:56:91:d0 Cause=New Discovery Status:NA

155

Wed Nov 27 05:31:33 2013

AP Disassociated. Base Radio MAC:58:bf:ea:0f:73:d0

156

Wed Nov 27 05:31:33 2013

AP's Interface:1(802.11a) Operation State Down: Base Radio   MAC:58:bf:ea:0f:73:d0 Cause=New Discovery Status:NA

157

Wed Nov 27 05:31:33 2013

AP's Interface:0(802.11b) Operation State Down: Base Radio   MAC:58:bf:ea:0f:73:d0 Cause=New Discovery Status:NA

158

Wed Nov 27 05:31:28 2013

AP Disassociated. Base Radio MAC:58:bf:ea:0f:fc:20

159

Wed Nov 27 05:31:28 2013

AP's Interface:1(802.11a) Operation State Down: Base Radio   MAC:58:bf:ea:0f:fc:20 Cause=New Discovery Status:NA

160

Wed Nov 27 05:31:28 2013

AP's Interface:0(802.11b) Operation State Down: Base Radio   MAC:58:bf:ea:0f:fc:20 Cause=New Discovery Status:NA

161

Wed Nov 27 05:31:17 2013

AP Disassociated. Base Radio MAC:b4:e9:b0:e4:02:20

162

Wed Nov 27 05:31:17 2013

AP's Interface:1(802.11a) Operation State Down: Base Radio   MAC:b4:e9:b0:e4:02:20 Cause=New Discovery Status:NA

163

Wed Nov 27 05:31:17 2013

AP's Interface:0(802.11b) Operation State Down: Base Radio   MAC:b4:e9:b0:e4:02:20 Cause=New Discovery Status:NA

164

Wed Nov 27 05:31:15 2013

AP Disassociated. Base Radio MAC:a4:18:75:eb:da:b0

165

Wed Nov 27 05:31:15 2013

AP's Interface:1(802.11a) Operation State Down: Base Radio   MAC:a4:18:75:eb:da:b0 Cause=New Discovery Status:NA

166

Wed Nov 27 05:31:15 2013

AP's Interface:0(802.11b) Operation State Down: Base Radio   MAC:a4:18:75:eb:da:b0 Cause=New Discovery Status:NA

167

Wed Nov 27 05:28:26 2013

MFP Anomaly Detected - 35 Not encrypted event(s) found as   violated by the radio d8:24:bd:2f:df:6f and detected by the dot11 interface   at slot 1 of AP d8:24:bd:2f:df:60 in 300 seconds when observing Deauth.   Client's last source mac 00:23:14:a7:e3:54

168

Wed Nov 27 05:23:26 2013

MFP Anomaly Detected - 23 Not encrypted event(s) found as   violated by the radio f8:4f:57:a5:40:b2 and detected by the dot11 interface   at slot 0 of AP f8:4f:57:a5:40:b0 in 300 seconds when observing . Client's   last source mac 44:4c:0c:ba:27:77

Don´t know at the moment how to handle it.

Regards

Alex

1 REPLY
VIP Purple

Re: MFP Anomaly Detected Access Points are moving from one wlc t

Hi lAlex,

Disable Client MFP under WLAN advanced tab & see if  this still occur

Regards

Rasika

**** Pls rate all useful responses *****

728
Views
0
Helpful
1
Replies
CreatePlease to create content