WAP561 RADIUS Authentication - deauthenticated constantly

[Oben Kuyucu]

Hi,

We have two WAP561 devices as a cluster and they authenticate wireless users from Windows 2008 server based RADIUS. We are seeing some strange logs from these access points.

Has anyone got any idea why there is such errors? The client in case cannot authenticate for a while, but when tried persistently, he/she can authenticate.

Sep  4 2014 14:2       3        hostapd[1203]           trying to update accounting statistics, station ... not found
Sep  4 2014 14:2       3        hostapd[1203]           trying to deauthenticate to station ... , but not authenticated
Sep  4 2014 14:3       3        hostapd[1203]           trying to update accounting statistics, station ... not found
Sep  4 2014 14:3       3        hostapd[1203]           trying to deauthenticate to station ... , but not authenticated
Sep  4 2014 14:4       3        hostapd[1203]           trying to update accounting statistics, station ... not found
Sep  4 2014 14:4       3        hostapd[1203]           trying to deauthenticate to station ... , but not authenticated

Thanks,

[Havok_2333]

We also have these issues. All of our WAP561 APs are configured to authenticate the clients with our RADIUS-Server (Windows 2012 R2).

It would be nice if somebody could take a look at this problem. 

Firmware 1.2.0.2 is installed on every WAP. 

Sep  1 2015 12:36:43   3        hostapd[892]            trying to deauthenticate to station f8:e0:79:13:db:9c, but not authenticated

Sep  1 2015 13:09:47   3        hostapd[892]            trying to update accounting statistics, station 38:0f:4a:a8:08:5b not found

Sep  1 2015 13:09:47   3        hostapd[892]            trying to deauthenticate to station 38:0f:4a:a8:08:5b, but not authenticated

Sep  1 2015 13:34:53   3        hostapd[892]            trying to update accounting statistics, station 38:0f:4a:a8:08:5b not found

Sep  1 2015 13:34:53   3        hostapd[892]            trying to deauthenticate to station 38:0f:4a:a8:08:5b, but not authenticated

Sep  1 2015 14:21:20   3        hostapd[892]            trying to deauthenticate to station 54:9f:13:86:4a:61, but not authenticated

Sep  1 2015 14:21:22   3        hostapd[892]            trying to deauthenticate to station 54:9f:13:86:4a:61, but not authenticated

Sep  1 2015 14:26:56   3        hostapd[892]            trying to deauthenticate to station 54:9f:13:86:4a:61, but not authenticated

Sep  1 2015 14:28:56   3        hostapd[892]            trying to deauthenticate to station 54:9f:13:86:4a:61, but not authenticated

Sep  1 2015 14:29:46   3        hostapd[892]            trying to deauthenticate to station 54:9f:13:86:4a:61, but not authenticated

Sep  1 2015 14:30:05   3        hostapd[892]            trying to update accounting statistics, station f8:e0:79:13:db:9c not found

Sep  1 2015 14:30:05   3        hostapd[892]            trying to deauthenticate to station f8:e0:79:13:db:9c, but not authenticated

Sep  1 2015 14:43:14   3        hostapd[892]            trying to deauthenticate to station 54:9f:13:86:4a:61, but not authenticated

Sep  1 2015 15:21:29   3        hostapd[892]            trying to update accounting statistics, station 38:0f:4a:a8:08:5b not found

Sep  1 2015 15:21:29   3        hostapd[892]            trying to deauthenticate to station 38:0f:4a:a8:08:5b, but not authenticated

Sep  1 2015 15:27:16   3        hostapd[892]            trying to update accounting statistics, station 38:0f:4a:a8:08:5b not found

Sep  1 2015 15:27:16   3        hostapd[892]            trying to deauthenticate to station 38:0f:4a:a8:08:5b, but not authenticated

Sep  1 2015 15:28:25   3        hostapd[892]            trying to update accounting statistics, station 38:0f:4a:a8:08:5b not found

Sep  1 2015 15:28:25   3        hostapd[892]            trying to deauthenticate to station 38:0f:4a:a8:08:5b, but not authenticated

Sep  1 2015 15:31:16   3        hostapd[892]            trying to update accounting statistics, station f8:e0:79:13:db:9c not found

Sep  1 2015 15:31:16   3        hostapd[892]            trying to deauthenticate to station f8:e0:79:13:db:9c, but not authenticated

Sep  1 2015 15:33:57   3        hostapd[892]            trying to deauthenticate to station 54:9f:13:86:4a:61, but not authenticated

Sep  1 2015 15:34:11   3        hostapd[892]            trying to deauthenticate to station 54:9f:13:86:4a:61, but not authenticated

Sep  1 2015 15:51:28   3        hostapd[892]            trying to deauthenticate to station 54:9f:13:86:4a:61, but not authenticated

Sep  1 2015 15:51:33   3        hostapd[892]            trying to deauthenticate to station 54:9f:13:86:4a:61, but not authenticated

Sep  1 2015 15:52:44   3        hostapd[892]            trying to deauthenticate to station 54:9f:13:86:4a:61, but not authenticated 

[Eric Moyers]

My name Eric Moyers. I am an Engineer in the Small Business Support Center.

I am sorry to hear that you are experiencing this issue. 

Have you tried "as a test" without using Radius Authentication? Do you still get the same errors?

I have seen something like this before and not sure, but I don't think they were using Radius for authentication.

If you go to the Wireless - Network tab, and then go into Security, disable tkip and you should see some check boxes. Set MFP to "Not Required" and retest?

If this does not improve your issue, please call our support center and open a case so that one of our engineers can work directly with you.
http://www.cisco.com/c/en/us/support/web/tsd-cisco-small-business-support-center-contacts.html

Eric Moyers
.:|:.:|:. CISCO | Cisco Presales Technical Support | Wireless Subject Matter Expert

Please rate helpful Posts and Let others know when your Question has been answered.

[Havok_2333]

Hello Eric, 

I disabled the MFP-Feature... Now, it seems to work. I will test with other devices next week. 

For me, it is not a really nice solution to disable MFP.

I just put a screenshot from our current WAP-configuration as an attachment. 

Thanks for your Help.

Have a nice Weekend so far :)

[Havok_2333]

Hello Eric. I guess that this is the problem (MFP). We tested around with our wlan-infrastructure for about 1 month now.

Therefore, we had two main problems. The first problem is that our wireless clients are not able to connect to the access-points sometimes. We checked out everything. We even switched from windows RADIUS to FreeRadius on linux in order to make sure that DHCP, our Dell-Switch and other parts of our network run properly.

The second problem was our AP-Log. Since I turned off the MFP-Feature (I have a bad feeling about this), the error-logs are really blown away. But I think that´s not an option.

I need to See wheather client-connection is stable for now or not.

We use different sorts of wireless clients. Notebooks, iPads, iPhones, Windows-Phones, Androi-Phones, etc.. All of them get stuck some times.

Havok