topic Re: error-code='8' Authentication problem on wireless network in Wireless

error-code='8' Authentication problem on wireless network

Carmicklec — Fri, 27 Oct 2023 18:51:42 GMT

I have deployed several MR70's, WPA2 Enterprise, radius server. Clients have been connecting but experiencing periods of disconnection. When investigating there seem to be three errors I am coming across.

1 - auth_mode='wpa2-802.1x' radius_proto='ipv4' radius_ip='192.168.101.83' error_code='8' radio='1' vap='0' channel='44' rssi='22'

A list of error codes would be great, if one exists.

2 - auth_mode='wpa2-802.1x' vlan_id='150' radius_proto='ipv4' radius_ip='192.168.101.83' reason='eapol_timeout' reassoc='1' roam_ap='0E:7B:D8:EA:66:1A' radio='1' vap='0' channel='44' rssi='19'

Went down the 'eapol-timeout' rabbit hole yesterday with no resolution.

3 - Client made an 802.1X authentication request to the RADIUS server, but it did not respond.auth_mode='wpa2-802.1x' vlan_id='150' radius_proto='ipv4' radius_ip='192.168.101.83' reason='radius_timeout' radio='0' vap='0' channel='11' rssi='23'

This is the majority of the errors, the info bubble says "The RADIUS server didn't respond to this client's request. Check that the server is configured properly and that the server is reachable." The server is configured properly and is reachable or they would never be able to connect and this is intermittent. Unless I am missing something.

Re: error-code='8' Authentication problem on wireless network

aleabrahao — Fri, 27 Oct 2023 19:00:53 GMT

Code 8 means Station has left the basic service area or extended service area and is disassociated. It's a very generic error, did you do a packet capture?

Re: error-code='8' Authentication problem on wireless network

aleabrahao — Fri, 27 Oct 2023 19:04:27 GMT

You can try increasing the EAP time out values.

https://documentation.meraki.com/MR/Access_Control/MR_Meraki_RADIUS_2.0#EAP_Timers

Re: error-code='8' Authentication problem on wireless network

Carmicklec — Fri, 27 Oct 2023 19:20:21 GMT

Changed the server timeout from 1 to 2 seconds. Changed the EAPOL key timeout from 500 to 1000 milliseconds

Reply to previous comment:

The clients are literally surrounded by MR70's and my understanding is they are a fully mesh system so there should be no drops at all. Drop zone is within 100' of 2, possibly 3 AP's

I have android devices and Apple devices connecting to the Access points not sure where to run a packet capture from?

Re: error-code='8' Authentication problem on wireless network

aleabrahao — Fri, 27 Oct 2023 19:30:47 GMT

More access points does not mean that your network will be better, everything will depend on whether the network was designed well.

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Packet_Capture_Overview

Re: error-code='8' Authentication problem on wireless network

Philip D'Ath — Sun, 29 Oct 2023 19:27:44 GMT

This sounds like it could be a client issue. What kind of client is it?

Does it have the latest driver for the WiFi chipset that it has?

Re: error-code='8' Authentication problem on wireless network

Philip D'Ath — Sun, 29 Oct 2023 19:28:20 GMT

Does Wireless Health show anything interesting?

Re: error-code='8' Authentication problem on wireless network

Carmicklec — Mon, 30 Oct 2023 20:40:00 GMT

Of the two devices that seem to have the issue one is an iPhone the other an android tablet

Re: error-code='8' Authentication problem on wireless network

Carmicklec — Mon, 30 Oct 2023 20:41:03 GMT

It is intereting to look through but it isn't showing me anything other than what I originally posted.