topic Authentication issues on Guest SSID in Wireless

Authentication issues on Guest SSID

gs2527 — Thu, 09 May 2024 21:01:24 GMT

Hi,

There has been an increase in number of wireless connection issues for a Guest SSID configured. The "failure stage" is "Authentication" and has a bunch of following messages -

Client failed during the authentication step

type='WPA-PSK auth fail' associated='false' radio='1' vap='1'

The PSK is accurate but the connection drops regardless. Any suggestions/advice for troubleshooting?

Re: Authentication issues on Guest SSID

Christian_S — Thu, 09 May 2024 21:51:22 GMT

Check the port on the switch that the AP is plugged into and confirm the guest VLAN is allowed on the port. Then also check the uplink port on the same switch/every switch the traffic passes through until it reaches the firewall to make sure the guest vlan is allowed outbound.

Re: Authentication issues on Guest SSID

gs2527 — Thu, 09 May 2024 22:18:46 GMT

Guest Vlan is allowed on all AP ports and outbound as well. These messages get logged as the failure on authentication when looked from a wireless health POV.

What I am also noticing is a lot of roaming even when the client is stationary. Example logs below -

Successful connection to SSID Guest for a minute on access point F01-AP02-Lobby, and then the client roamed to access point F01-AP05.

Roamed from access point F01-AP02-Lobby then had a successful connection to SSID Guest for a few seconds on access point F01-AP05, and then the client roamed.

Successful connection to SSID Guest for a few seconds on access point F01-AP02-Lobby.

Roamed from access point F01-AP02-Lobby then had a successful connection to SSID Guest for a minute on access point F02-AP01, and then the client roamed to access point F02-AP18.

Roamed from access point F02-AP01 then had a successful connection to SSID Guest for a few seconds on access point F02-AP18, and then the client roamed to access point F02-AP13.

Re: Authentication issues on Guest SSID

aleabrahao — Fri, 10 May 2024 01:43:30 GMT

I suggest you open a support case.