Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Community will be in read-only mode on 12/14/2017 from 12:00 am pacific to 11:30 am.

During this time you will only be able to see content. Other interactions such as posting, replying to questions, or marking content as helpful will be disabled for few hours.

We apologize for the inconvenience while we perform important updates to the Community.

New Member

WPA-TKIP PSK authentication problem

Hi,

I have a WLC 4402-12 in 4.1.171.0 (and ER) and LAP 1242 with 2 antenna 4941 in diversity mode.

I have 2 SSID, one in WPA-802.1X (entreprise) and an guest in WPA-TKIP PSK (without web auth).

I have a problem to connect some PC on the guest access, and all pc who have the first SSID installed, can't connect to the second one (PC under XP and Vista)

I have this type of log on controler :

---------------

Mon Jul 2 08:26:41 2007: 00:14:a5:2b:60:08 Sending Assoc Response to station 00:14:a5:2b:60:08 on BSSID 00:1c:0e:d6:f7:20 (status 0)

Mon Jul 2 08:26:41 2007: 00:14:a5:2b:60:08 apfProcessAssocReq (apf_80211.c:3741) Changing state for mobile 00:14:a5:2b:60:08 on AP 00:1c:0e:d6:f7:20 from Associated to Associated

Mon Jul 2 08:26:41 2007: 00:14:a5:2b:60:08 Creating a new PMK Cache Entry for station 00:14:a5:2b:60:08 (RSN 0)

Mon Jul 2 08:26:41 2007: 00:14:a5:2b:60:08 Initiating WPA PSK to mobile 00:14:a5:2b:60:08

Mon Jul 2 08:26:41 2007: 00:14:a5:2b:60:08 dot1x - moving mobile 00:14:a5:2b:60:08 into Force Auth state

Mon Jul 2 08:26:41 2007: 00:14:a5:2b:60:08 Skipping EAP-Success to mobile 00:14:a5:2b:60:08

Mon Jul 2 08:26:41 2007: 00:14:a5:2b:60:08 Sending EAPOL-Key Message to mobile 00:14:a5:2b:60:08

state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00

Mon Jul 2 08:26:42 2007: 00:14:a5:2b:60:08 802.1x 'timeoutEvt' Timer expired for station 00:14:a5:2b:60:08

Mon Jul 2 08:26:42 2007: 00:14:a5:2b:60:08 Retransmit 1 of EAPOL-Key M1 (length 99) for mobile 00:14:a5:2b:60:08

Mon Jul 2 08:26:42 2007: 00:14:a5:2b:60:08 Received EAPOL-Key from mobile 00:14:a5:2b:60:08

Mon Jul 2 08:26:42 2007: 00:14:a5:2b:60:08 Received EAPOL-key in PKT_START state (message 2) from mobile 00:14:a5:2b:60:08

Mon Jul 2 08:26:42 2007: 00:14:a5:2b:60:08 Received EAPOL-key M2 with invalid MIC from mobile 00:14:a5:2b:60:08

Mon Jul 2 08:26:43 2007: 00:14:a5:2b:60:08 802.1x 'timeoutEvt' Timer expired for station 00:14:a5:2b:60:08

Mon Jul 2 08:26:43 2007: 00:14:a5:2b:60:08 Retransmit 2 of EAPOL-Key M1 (length 99) for mobile 00:14:a5:2b:60:08

Mon Jul 2 08:26:43 2007: 00:14:a5:2b:60:08 Received EAPOL-Key from mobile 00:14:a5:2b:60:08

Mon Jul 2 08:26:43 2007: 00:14:a5:2b:60:08 Received EAPOL-key in PKT_START state (message 2) from mobile 00:14:a5:2b:60:08

Mon Jul 2 08:26:43 2007: 00:14:a5:2b:60:08 Received EAPOL-key M2 with invalid MIC from mobile 00:14:a5:2b:60:08

Mon Jul 2 08:26:44 2007: 00:14:a5:2b:60:08 802.1x 'timeoutEvt' Timer expired for station 00:14:a5:2b:60:08

Mon Jul 2 08:26:44 2007: 00:14:a5:2b:60:08 Retransmit failure for EAPOL-Key M1 to mobile 00:14:a5:2b:60:08, retransmit count 3, mscb deauth count 0

Mon Jul 2 08:26:44 2007: 00:14:a5:2b:60:08 Sent Deauthenticate to mobile 00:14:a5:2b:60:08 on BSSID 00:1c:0e:d6:f7:20 slot 0(caller 1x_ptsm.c:460)

Mon Jul 2 08:26:44 2007: 00:14:a5:2b:60:08 Scheduling deletion of Mobile Station: 00:14:a5:2b:60:08 (callerId: 57) in 10 seconds

----------------

Someone have an idea ?

1 REPLY
Silver

Re: WPA-TKIP PSK authentication problem

The debugs point to a know issue with the MS Zero Config using PEAP and talking to any non-Microsoft Radius server. This is resolved by installing the post-SP2 hotfix KB885453

271
Views
0
Helpful
1
Replies
CreatePlease to create content