WPA/TKIP clients authenticated with EAP-TLS loose connectivity when associated with APs 2600

[Vasco Costa]

Greetings,

We have a customer with several SSIDs; one of which is configured to accept EAP-TLS sessions, encrypted with WPA/TKIP.

The wireless network was compose of 5508 WLC (7.6.210), with several type of APs (1131, 1142, 1242) and this SSID was working perfectly.

We've replaced several of those APs with 2600 APs and then some of the clients began to loose their connectivity. On any other AP type (1131, 1142, 1242) the clients don't notice any problem. 

The same clients but in any of the customers SSIDs (PEAP with WPA/TKIP; webauth; mac-filtering) the clients don't have any problem.

They also don't noticed any problem if they connected to an 2600 AP but use WPA2/AES instead of WPA/TKIP but unfortunately, due to company network policies, the customers need to user WPA/TKIP along with EAP-TLS. 

Does anyone had this same problem with the 2600 APs?

Kind regards,

Vasco Costa

[Vasco Costa]

Hi,

Customer replaced the AP2600 were he was connected with an 1142 and the session connectivity issues stopped.
 

Just tested with a 3702 AP for almost one hour (WPA/TKIP, EAP-TLS) and didn't have any problem.

Rgds,

Vasco