Lots of wireless authentication failures

[anythinghosted]

Hello!

With the improved wireless health screens, I've been trying to diagnose some issues. I am seeing a lot of authentication errors (mainly with iPhone / iPads). Some are static and some roam from one AP to another.

I've cleared the network settings and removed the wifi ssid from the phone and it's still happening.

Any ideas? I am testing and will soon deploy Identity PSK with RADIUS -will that address the problem?

Thanks,

Chris

[CMR]

What MR model and firmware are you running. Is it causing an actual problem, or simply a log issue?

[anythinghosted]

Both APs are MR52 and latest firmware (26.7)

I do notice that sometimes my iPhone is on 4G and then switches back to wifi, is that an issue probably not.

I do have wifi calling set up and sometimes notice if I roam between the APs the signal degrades quite a lot (normal phone signal is pretty weak).

I do have 802.11r set to Adaptive (and just PSK WPA2). I do understand the security issue and hence moving to iPSK.

[PawelG]

I have similar problems with MR45s and mostly iPhones and iPads. Firmware 26.7.
I'm using 802.1x with Meraki authentication - thought that might be Meraki radius availability problem.

br, Pawel.

[anythinghosted]

This morning, iPhone now says incorrect password and won't even join.

No configuration changes have been made at all.

Worth raising a case with Meraki support to have it logged?

[AaronP1]

After upgrading to 26.7 I had constant and repeated problems with authentication, both standard WPA2 and RADIUS. Rolling back to 26.6.1 fixed the issues - I'd try that first and wait for a stable release to come out instead of the RC.

[PawelG]

I've did a bit of debugging of this issue today and found out some curious thing:

It seems that failures reported by Wireless Health are fake. When I look at access logs there is no such event (there is a Radius authentication event, but it is not fail - just roaming re-auth)

Opened case about that.

Br, Pawel.

[Koal]

Hi!

Any replay from TAC about this behavior?

BR

frenz

[PawelG]

I've opened a case.

I've got reply that they are not aware of such issue and I need to call them to make real-time packet capture.

The problem is that those errors are random and it is not easy to reproduce them during such session.

Pawel.

[vasank]

I have seen similar issue with Apple and Non Apple devices as well. My MR is set for WPA2-PSK and the device is failing with WPA-PSK auth. It doesn't seem like an issue as my device connects fine later. I would hope if I enable WPA and WPA2 I will not see this error. I discarded it as a false alarm.

[PawelG]

One question to anyone that still have this issue:

Do you have corresponding event log entries to health-reported authentication errors. In may case there aren't any.

I've noiticed TAC about that, but they simply ignored it.

Br, Pawel.

[wayne.ranchuk]

I ma having the same issues Just replying so i can follow the answers

[PawelG]

I'v downgraded APs to 26.6.1 and problem still exists on both WPA2-PSK and WPA2-Enterprise networks. Authentication failures are only with Apple iOS devices - and the is no trace of them in device event logs - only in Wireless Health pages in dashboard.

BR, Pawel.

[Dinger]

Seeing the same thing here and have also downgraded which made no difference.

[hjherron]

Has anyone seen any improvements with this? I recently update to 26.6.1 and started having auth issues with my RADIUS and WPA2 SSID's. Prior to this firmware version I had no issues so I am looking to roll back but was wondering if any of you had found a resolution to this yet.