I need some help with an issue i'm having in a production environment. This wireless network consists of about 25 1242AG ap's, with a 4402 WLC . Currently there is anywhere from 10-40 clients on the wireless network. There is an ssid for mobile equipment (tow motors), the security on this ssid is security: WAP+WPA2, static 104 WEP Key, WPA Parameters: WPA encryption-tkip, WPA2 encryption-aes, psk format-ascii.
The problem we are having is these mobile clients are currently loosing their connection in very sporadic areas of the building, and its been hard to re-produce this and figure out the cause. I'm trying to go over the logs and see what could be the cause of these clients not keeping their connection (roaming, authentication, coverage problems?) but could use some guidance. Below are a few errors I picked out off the controllers logs.
Any guidance would be greatly
Decrypt errors occurred for client *.*.*.* using WPA key on 802.11b/g interface of AP *.*.*.*
Coverage Hole Detected for AP b02wst517 whose Base Radio MAC is *.*.*.*. Number of Failing Clients 1
Client Excluded: MACAddress:*.*.*.* Base Radio MAC :*.*.*.* Slot: 0 Reason:802.1x Authentication failed 3 times. ReasonCode: 3
Luke, what model client devices are you using? The decrypt error is indicative of a "caveat" you run into with some Intel cards such as the 3945ABG. I'm imagining the clients connect fine, stay connected for a while, then drop connectivity whent he decrypt issue happens, and can reconnect fine after the fact quickly by disabling then re-enabling the client card. You can try capturing the following debug's for a single client, but it's obviously difficult to do as the issue is so sporatic. I'll update this post once more info is received from intel...
First I'd start from the beginning and take a device that you know works (your laptop?) and do some testing.
I would build another test ssid with just plain wep or no security and roam the area with your working device. be sure you are using either the client software (Intel) or Windows (Wireless Zero Config.)but NOT both at the same time. One of these must be off, your choice. This will cause frequent drops and re-authentications because the two fight each other for control.
If you still have connectivity issues then most likely the environment needs work. If everybody has problems in the same areas, that's a good clue.
If everything works, then you should look at the card and its ability to maintain a connection using your flavor of security as was posted earlier.
You should eliminate the environment first though...
We do use Intel 3945ABG cards, but only in office laptops, i'm not sure what these mobile devices have installed, I will check this.
I will have to do the testing you recommended, the only problem is when someone puts in a complaint that they got disconnected in a certain area, we go down and test again with them and the connection stays up fine.
Transferring Crash file from standby:
Login to the Active WLC in HA.
(Cisco Controller) >transfer upload datatype crash
(Cisco Controller) >transfer upload filename <Desired filename>
(Cisco Controller) >transfer up...
This is the start of a display filter cross reference between Wireshark and OmniPeek.
The 1st installment is a table of advanced filters. More filters will be added as time allows.
It is a living doc, so check back for changes every so often
Please feel ...
I have created a Powershell script to automatically add a Wireless Guest User on Cisco WLCs. (tested on 2500 Series)
The script should be completely self explanatory.
Powershell SNMP Module (Install-Module -Name SNMP)
SNMP Write Access to...