无线问题--WLC5508，连接网络频繁掉线

LiTe. · ‎04-11-2019

本帖最后由 LiTe. 于 2019-4-15 11:19 编辑
WLC5508，APF分别是27的和11的，WLC版本8.3,。143；通过WLC看ap都是注册上去了的，但是连接网络就会出现部分用户端断线，又一次全网都断了；下面是log信息，请问有遇到过的么？怎么解决？
*Dot1x_NW_MsgTask_5: Apr 11 21:23:16.544: %DOT1X-3-ABORT_AUTH: [PA]1x_bauth_sm.c:477 Authentication Aborted for client d8:9c:67:00:1d:95 Abort Reason:DOT1X RESTARTED DUE TO EAPOL-START/CLIENT ROAM
*Dot1x_NW_MsgTask_4: Apr 11 21:17:56.428: %DOT1X-3-INVALID_WPA_KEY_MSG_STATE: [PA]1x_eapkey.c:1182 Received invalid EAPOL-key M2 msg in START state - invalid secure bit; KeyLen 40, Key type 1, client a0:88:b4:81:14:7c
*Dot1x_NW_MsgTask_4: Apr 11 21:17:55.373: %DOT1X-3-INVALID_WPA_KEY_MSG_STATE: [PA]1x_eapkey.c:1182 Received invalid EAPOL-key M2 msg in START state - invalid secure bit; KeyLen 40, Key type 1, client a0:88:b4:81:14:7c
*Dot1x_NW_MsgTask_2: Apr 11 21:14:48.726: %DOT1X-3-INVALID_REPLAY_CTR: [PA]1x_eapkey.c:452 Invalid replay counter from client f8:2d:7c:d7:13:52 - got 00 00 00 00 00 00 00 03, expected 00 00 00 00 00 00 00 04
PP-3-REPLAY_ERR: [PA]spam_lrad.c:42504 The system has received replay error on slot 1, WLAN ID 1, count 1 from AP 00:a3:8e:42:b1:90
*spamApTask3: Apr 11 20:54:57.993: %LWAPP-3-REPLAY_ERR: [PA]spam_lrad.c:42504 The system has received replay error on slot 1, WLAN ID 1, c
*Dot1x_NW_MsgTask_2: Apr 11 18:55:40.460: %DOT1X-3-AAA_AUTH_SEND_FAIL: [PA]1x_aaa.c:817 Unable to send AAA message for client 00:1d:fa:18:a3:4a
*Dot1x_NW_MsgTask_2: Apr 11 18:55:40.453: %DOT1X-3-ABORT_AUTH: [PA]1x_bauth_sm.c:477 Authentication Aborted for client 00:1d:fa:18:a3:4a Abort Reason:DOT1X RESTARTED DUE TO EAPOL-START/CLIENT ROAM
*Dot1x_NW_MsgTask_5: Apr 11 18:55:39.296: %DOT1X-3-ABORT_AUTH: [PA]1x_bauth_sm.c:477 Authentication Aborted for client d8:9c:67:00:1d:95 Abort Reason:DOT1X RESTARTED DUE TO EAPOL-START/CLIENT ROAM
*Dot1x_NW_MsgTask_3: Apr 11 18:55:38.681: %DOT1X-3-ABORT_AUTH: [PA]1x_bauth_sm.c:477 Authentication Aborted for client 1c:91:48:18:d0:73 Abort Reason:DOT1X RESTARTED DUE TO EAPOL-START/CLIENT ROAM
*Dot1x_NW_MsgTask_3: Apr 11 18:55:36.499: %DOT1X-3-AAA_AUTH_SEND_FAIL: [PA]1x_aaa.c:817 Unable to send AAA message for client 20:3c:ae:98:31:43
*Dot1x_NW_MsgTask_3: Apr 11 18:55:36.492: %DOT1X-3-ABORT_AUTH: [PA]1x_bauth_sm.c:477 Authentication Aborted for client 20:3c:ae:98:31:43 Abort Reason:DOT1X RESTARTED DUE TO EAPOL-START/CLIENT ROAM
*Dot1x_NW_MsgTask_3: Apr 11 18:55:33.674: %DOT1X-3-AAA_AUTH_SEND_FAIL: [PA]1x_aaa.c:817 Unable to send AAA message for client 1c:91:48:18:d0:73
*Dot1x_NW_MsgTask_3: Apr 11 18:55:33.671: %DOT1X-3-ABORT_AUTH: [PA]1x_bauth_sm.c:477 Authentication Aborted for client 1c:91:48:18:d0:73 Abort Reason:DOT1X RESTARTED DUE TO EAPOL-START/CLIENT ROAM
*Dot1x_NW_MsgTask_0: Apr 11 18:55:32.263: %DOT1X-3-AAA_AUTH_SEND_FAIL: [PA]1x_aaa.c:817 Unable to send AAA message for client dc:16:b2:2d:4f:58
*Dot1x_NW_MsgTask_3: Apr 11 18:55:27.863: %DOT1X-3-AAA_AUTH_SEND_FAIL: [PA]1x_aaa.c:817 Unable to send AAA message for client 60:9a:c1:a2:9b:a3
*Dot1x_NW_MsgTask_3: Apr 11 18:55:27.860: %DOT1X-3-ABORT_AUTH: [PA]1x_bauth_sm.c:477 Authentication Aborted for client 60:9a:c1:a2:9b:a3 Abort Reason:DOT1X RESTARTED DUE TO EAPOL-START/CLIENT ROAM
*Dot1x_NW_MsgTask_6: Apr 11 18:55:27.712: %DOT1X-3-AAA_AUTH_SEND_FAIL: [PA]1x_aaa.c:817 Unable to send AAA message for client f0:6e:0b:dc:4f:26
*Dot1x_NW_MsgTask_6: Apr 11 18:55:27.471: %DOT1X-3-AAA_AUTH_SEND_FAIL: [PA]1x_aaa.c:817 Unable to send AAA message for client 68:ec:c5:2a:d6:5e
*Dot1x_NW_MsgTask_6: Apr 11 18:55:27.466: %DOT1X-3-ABORT_AUTH: [PA]1x_bauth_sm.c:477 Authentication Aborted for client 68:ec:c5:2a:d6:5e Abort Reason:DOT1X RESTARTED DUE TO EAPOL-START/CLIENT ROAM
*Dot1x_NW_MsgTask_0: Apr 11 18:55:25.474: %DOT1X-3-ABORT_AUTH: [PA]1x_bauth_sm.c:477 Authentication Aborted for client dc:16:b2:2d:4f:58 Abort Reason:DOT1X RESTARTED DUE TO EAPOL-START/CLIENT ROAM
*Dot1x_NW_MsgTask_3: Apr 11 18:55:22.852: %DOT1X-3-ABORT_AUTH: [PA]1x_bauth_sm.c:477 Authentication Aborted for client 60:9a:c1:a2:9b:a3 Abort Reason:DOT1X RESTARTED DUE TO EAPOL-START/CLIENT ROAM
*Dot1x_NW_MsgTask_1: Apr 11 18:55:21.309: %DOT1X-3-AAA_AUTH_SEND_FAIL: [PA]1x_aaa.c:817 Unable to send AAA message for client 10:08:b1:3b:e1:91
*Dot1x_NW_MsgTask_1: Apr 11 18:55:21.298: %DOT1X-3-ABORT_AUTH: [PA]1x_bauth_sm.c:477 Authentication Aborted for client 10:08:b1:3b:e1:91 Abort Reason:DOT1X RESTARTED DUE TO EAPOL-START/CLIENT ROAM
*Dot1x_NW_MsgTask_4: Apr 11 18:55:18.055: %DOT1X-3-ABORT_AUTH: [PA]1x_bauth_sm.c:477 Authentication Aborted for client 18:81
*Dot1x_NW_MsgTask_5: Apr 11 18:55:12.715: %DOT1X-3-ABORT_AUTH: [PA]1x_bauth_sm.c:477 Authentication Aborted for client b0:fc:36:4d:e2:15 Abort Reason:DOT1X RESTARTED DUE TO EAPOL-START/CLIENT ROAM
*Dot1x_NW_MsgTask_1: Apr 11 18:55:10.429: %DOT1X-3-AAA_AUTH_SEND_FAIL: [PA]1x_aaa.c:817 Unable to send AAA message for client 60:14:b3:79:99:f9

Rps-Cheers · ‎04-13-2019

这log太多了吧！！
关键的可能就是这个：
*Dot1x_NW_MsgTask_5: Apr 11 20:47:48.646: %DOT1X-3-ABORT_AUTH: [PA]1x_bauth_sm.c:477 Authentication Aborted for client d8:9c:67:00:1d:95 Abort Reason DOT1X RESTARTED DUE TO EAPOL-START/CLIENT ROAM
想了解一下使用的认证是配置了radius server吗，还是loca-eap的认证方式呢？
感觉你这个应该是中bug了

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Rps-Cheers | If it solves your problem, please mark as answer. Thanks !

LiTe. · ‎04-14-2019

1540488497lcj 发表于 2019-4-13 21:29
这log太多了吧！！
关键的可能就是这个：
*Dot1x_NW_MsgTask_5: Apr 11 20:47:48.646: %DOT1X-3-ABORT_AU ...

辛苦看了这么长的LOG。。没有做radius Server;对于出现的这个log信息确实没有接触过，我也认为大几率是出现bug问题，

fortune · ‎04-15-2019

CSCug72493
Cisco Bug: CSCug72493 - Clean up Error Messages about DOT1X-3-AAA_AUTH_SEND_FAIL
Last Modified
Feb 05, 2019
Products (1)
Cisco 5500 Series Wireless Controllers
Known Affected Releases
7.5(1.43) 8.3(132.1)
Description (partial)
Symptom:
DOT1X-3-AAA_AUTH_SEND_FAIL: "Unable to send AAA message for client x:x:x:x:x:x" showing up in the WLC message logs
Conditions:
WLC running 8.3.132.1
View Bug Details in Bug Search Tool Login Required Why Is Login Required?
Bug Details Include
Full Description (including symptoms, conditions and workarounds)
Status
Severity
Known Fixed Releases
Related Community Discussions
Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.
Learn More About Cisco Service Contracts
看看升级一下IOS 看看是否能够解决

LiTe. · ‎04-17-2019

vsop5207 发表于 2019-4-16 10:10
CSCug72493
Cisco Bug: CSCug72493 - Clean up Error Messages about DOT1X-3-AAA_AUTH_SEND_FAIL
Last M ...

感谢，近期我会尝试升级IOS再看看能不能解决这个信息