Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Access Point disconnecting users

Good day,

Probably, this topic has been discussed somewhere else, but kind of hard the right solution or at least a work around to calm down this issue.

The problem is that users are complaining that sometimes they lost the conextion, it is ramdomly but often and now it is becoming more intense.

when I checked the logs, it provides me some information but I dont understand what could be causing this issue, a mis - configuration or something else.

It is happening on a big floor area where there are 2 Access Points, so the range in meters is good, at least both are far away enough.

and we have another 2 APs on another floor. they are good and people are NOT complaining about the wireless.

so that is why I think it is a miss config or something else with version or something because long time ago, this issue was not happening until now that it has risen more complains.

something to note is that the they have password via ACLs with MACs, so other words, it kind of double authen,

Users have to have the password and the MAC address has to be added to the AP

**********************************************************************************************************************************************************

Version of AP 1

Cisco IOS Software, C1260 Software (AP3G1-K9W7-M), Version 12.4(25d)JA1, RELEASE SOFTWARE (fc1)

System image file is "flash:/ap3g1-k9w7-mx.124-25d.JA1/ap3g1-k9w7-mx.124-25d.JA1"

Model: AIR-AP1262N-A-K9

Version of AP 2

Cisco IOS Software, C1260 Software (AP3G1-K9W7-M), Version 12.4(25d)JA1, RELEASE SOFTWARE (fc1)

System image file is "flash:/ap3g1-k9w7-mx.124-25d.JA1/ap3g1-k9w7-mx.124-25d.JA1"

AIR-AP1262N-A-K9

**********************************************************************************************************

LOG AP 1

Feb 24 22:27:11.816: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 1c69.a56d.6cd4 Reason: Sending station has left the BSS

*Feb 24 22:27:11.841: %DOT11-6-ASSOC: Interface Dot11Radio0, Station  1c69.a56d.6cd4 Associated KEY_MGMT[NONE]

*Feb 24 22:27:12.036: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0837.3d97.bdc2 Reason: Sending station has left the BSS

*Feb 24 22:27:13.373: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 7011.24cc.25c8 Reason: Sending station has left the BSS

*Feb 24 22:27:13.376: %DOT11-4-MAXRETRIES: Packet to client 7011.24cc.25c8 reached max retries, removing the client

*Feb 24 22:27:13.650: %DOT11-7-AUTH_FAILED: Station b864.9122.b069 Authentication failed

*Feb 24 22:27:14.575: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   0837.3d97.bdc2 Associated KEY_MGMT[NONE]

*Feb 24 22:27:19.246: %DOT11-7-AUTH_FAILED: Station b864.9122.b069 Authentication failed

*Feb 24 22:27:24.286: %DOT11-7-AUTH_FAILED: Station b864.9122.b069 Authentication failed

*Feb 24 22:27:29.567: %DOT11-7-AUTH_FAILED: Station b864.9122.b069 Authentication failed

*Feb 24 22:27:34.236: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   7011.24cc.25c8 Associated KEY_MGMT[NONE]

*Feb 24 22:27:35.069: %DOT11-7-AUTH_FAILED: Station b864.9122.b069 Authentication failed

*Feb 24 22:27:40.360: %DOT11-7-AUTH_FAILED: Station b864.9122.b069 Authentication failed

*Feb 24 22:27:44.340: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 7011.24cc.25c8 Reason: Sending station has left the BSS

*Feb 24 22:27:45.371: %DOT11-7-AUTH_FAILED: Station b864.9122.b069 Authentication failed

*Feb 24 22:27:45.482: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0837.3d97.bdc2 Reason: Sending station has left the BSS

*Feb 24 22:27:50.861: %DOT11-7-AUTH_FAILED: Station b864.9122.b069 Authentication failed

*Feb 24 22:27:53.245: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   781f.dbea.4833 Associated KEY_MGMT[NONE]

*Feb 24 22:27:53.538: %DOT11-6-ASSOC: Interface Dot11Radio0, Station  ac81.12a8.4b1f Reassociated KEY_MGMT[WPAv2]

*Feb 24 22:27:55.891: %DOT11-4-MAXRETRIES: Packet to client 1c69.a56d.6cd4 reached max retries, removing the client

*Feb 24 22:27:55.891: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 1c69.a56d.6cd4 Reason: Previous authentication no longer valid

*Feb 24 22:27:55.897: %DOT11-4-MAXRETRIES: Packet to client 1c69.a56d.6cd4 reached max retries, removing the client

*Feb 24 22:27:56.158: %DOT11-7-AUTH_FAILED: Station b864.9122.b069 Authentication failed

*Feb 24 22:27:57.558: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   7011.24cc.25c8 Associated KEY_MGMT[NONE]

*Feb 24 22:28:00.012: %DOT11-6-ASSOC: Interface Dot11Radio0, Station  1c69.a56d.6cd4 Associated KEY_MGMT[NONE]

*Feb 24 22:28:01.770: %DOT11-7-AUTH_FAILED: Station b864.9122.b069 Authentication failed

*Feb 24 22:28:05.784: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 9803.d886.5967

LOG AP 2

Feb 24 17:36:17.181: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   f8e0.79c0.56aa Associated KEY_MGMT[WPAv2 PSK]

*Feb 24 17:36:25.964: %DOT11-7-AUTH_FAILED: Station 2054.7693.a09f Authentication failed

*Feb 24 17:36:48.123: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station f8e0.79c0.56aa Reason: Sending station has left the BSS

*Feb 24 17:36:48.827: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   f8e0.79c0.56aa Associated KEY_MGMT[WPAv2 PSK]

*Feb 24 17:37:12.115: %DOT11-7-AUTH_FAILED: Station 2054.7693.a09f Authentication failed

*Feb 24 17:37:19.778: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station f8e0.79c0.56aa Reason: Sending station has left the BSS

*Feb 24 17:37:21.933: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   b4f0.abd9.6154 Associated KEY_MGMT[WPAv2 PSK]

*Feb 24 17:37:33.987: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station b4f0.abd9.6154 Reason: Sending station has left the BSS

*Feb 24 17:37:34.012: %DOT11-7-AUTH_FAILED: Station bcf5.acff.cc1f Authentication failed

*Feb 24 17:37:36.155: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   f8e0.79c0.56aa Associated KEY_MGMT[WPAv2 PSK]

*Feb 24 17:37:55.265: %DOT11-7-AUTH_FAILED: Station bcf5.acff.cc1f Authentication failed

*Feb 24 17:38:00.905: %DOT11-6-ASSOC: Interface Dot11Radio0, Station  ac81.12a8.4b1f Reassociated KEY_MGMT[WPAv2]

*Feb 24 17:38:07.055: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station f8e0.79c0.56aa Reason: Sending station has left the BSS

*Feb 24 17:38:23.539: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   f8e0.79c0.56aa Associated KEY_MGMT[WPAv2 PSK]

*Feb 24 17:38:33.898: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   bcf5.acff.cc1f Associated KEY_MGMT[WPAv2 PSK]

*Feb 24 17:38:54.439: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station f8e0.79c0.56aa Reason: Sending station has left the BSS

*Feb 24 17:39:04.933: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station bcf5.acff.cc1f Reason: Sending station has left the BSS

*Feb 24 17:39:06.802: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   f8e0.79c0.56aa Associated KEY_MGMT[WPAv2 PSK]

*Feb 24 17:39:07.601: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   bcf5.acff.cc1f Associated KEY_MGMT[WPAv2 PSK]

*Feb 24 17:39:30.986: %DOT11-7-AUTH_FAILED: Station 2054.7693.a09f Authentication failed

*Feb 24 17:39:32.518: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station bcf5.acff.cc1f Reason: Sending station has left the BSS

*Feb 24 17:39:37.743: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station f8e0.79c0.56aa Reason: Sending station has left the BSS

*Feb 24 17:40:00.905: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   bcf5.acff.cc1f Associated KEY_MGMT[WPAv2 PSK]

*Feb 24 17:40:31.551: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   f8e0.79c0.56aa Associated KEY_MGMT[WPAv2 PSK]

*Feb 24 17:40:31.907: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station bcf5.acff.cc1f Reason: Sending station has left the BSS

*Feb 24 17:40:34.558: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   bcf5.acff.cc1f Associated KEY_MGMT[WPAv2 PSK]

*Feb 24 17:41:02.480: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station f8e0.79c0.56aa Reason: Sending station has left the BSS

*Feb 24 17:41:03.688: %DOT11-7-AUTH_FAILED: Station 2054.7693.a09f Authentication failed

*Feb 24 17:41:05.251: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   1410.9fd7.5357 Reassociated KEY_MGMT[WPAv2 PSK]

what could be possible the solution, work around or any other information that you might want to check, I will really appreciate it please

1 ACCEPTED SOLUTION

Accepted Solutions
Hall of Fame Super Silver

Re: Access Point disconnecting users

Remove TKIP from the encryption. Since your using WPA v2, you only want AES-CCM

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
8 REPLIES
Hall of Fame Super Silver

Access Point disconnecting users

How do you have the SSID configured... Make sure that you either have it set to WPA/TKIP or WPA2/AES.... don't mix and match as that causes issues with some clients. 

Might want to post your show run-config also.

Thanks,

Scott

*****Help out other by using the rating system and marking answered questions as "Answered"*****

-Scott
*** Please rate helpful posts ***
New Member

Access Point disconnecting users

Hi, thank you for your response,

I have attached the config, please check it out and let me know if you find discrepancies. I dont know if it is the server itself or the Access Point itself

thank you

Hall of Fame Super Silver

Re: Access Point disconnecting users

Remove TKIP from the encryption. Since your using WPA v2, you only want AES-CCM

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
New Member

Re: Access Point disconnecting users

Sure,

I will try now and let you know as soon as I get feedback from the user.

Again, thank you so much.

I will let you know soon.

Regards,

Hall of Fame Super Silver

Re: Access Point disconnecting users

No problem. Keep us posted.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
New Member

Re: Access Point disconnecting users

Hi,

Let me tell you that so fat so good. Something that I would like to share is that the same config is applied to others 2 APs in the second floor, but they dont complaint about the issue with the wireless.

Those APs have the following:

encryption vlan 310 mode ciphers aes-ccm tkip

but they are working fine, However, interesting, I removed the tkip from the ones that had issues but so fat so good.

I will let you know for more updates..

thank you

New Member

Re: Access Point disconnecting users

Hi,

Its been 2 days since I modified the config and so far so god . Everything is working normally as far as the users conection.

They have not reported any issues. However, the logs shows the same status, but the issue has been fixed which is more important for me jeje

Thank you so much for your great support.

This thread is closed with a good resolution.

Regards,

Hall of Fame Super Silver

Re: Access Point disconnecting users

Good to know. It might be that you have some devices that are still trying to use the other encryption. I just ran into this yesterday and a bunch if new android tablets where connecting to WPA/TKIP because the SSID had both configured. We disable WPA TKIP and these devices connected fine but since they originally was setup to connect to either, we will still see these errors. They are going to go back to reconfigure these over the summer.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
2746
Views
0
Helpful
8
Replies
CreatePlease to create content