10-26-2017 10:28 AM - editado 03-21-2019 04:02 PM
Gusto en saludarlos, Hace uno días atrás implementamos una solución Cisco Mobile express con 5 equipos 3802i, los cuales se asocian sin problemas entre ellos asignando a uno como controlador, pero la problemática que tengo es que existen algunos usuarios que constantemente se desasocian, algunos son usuarios linux, Windos, Mac, Los AP tiene de administración estatica y los cliente obtienen DHCP desde un firewall de la red. En cuanto a los LOG, son los siguientes: (gracias de antemano)
*sntpReceiveTask: Oct 25 12:26:00.675: %DNS-3-GETADDRINFO_SUCCESS: dns_query.c:239 getaddrinfo succeeded
*Dot1x_NW_MsgTask_0: Oct 25 12:25:20.472: %DOT1X-3-INVALID_WPA_KEY_STATE: 1x_eapkey.c:2897 Received EAPOL-key message while in invalid state (4) - version 1, type 3, descriptor 2, client a4:f1:e8:d5:be:f8
*Dot1x_NW_MsgTask_0: Oct 25 12:25:20.471: %DOT1X-3-INVALID_REPLAY_CTR: 1x_eapkey.c:452 Invalid replay counter from client a4:f1:e8:d5:be:f8 - got 00 00 00 00 00 00 00 00, expected 00 00 00 00 00 00 00 01
*Dot1x_NW_MsgTask_0: Oct 25 12:22:56.405: %DOT1X-3-PSK_CONFIG_ERR: 1x_ptsm.c:730 Client 50:82:d5:ac:e6:f0 may be using an incorrect PSK
*Dot1x_NW_MsgTask_0: Oct 25 12:17:52.521: %DOT1X-3-PSK_CONFIG_ERR: 1x_ptsm.c:730 Client bc:92:6b:2d:19:55 may be using an incorrect PSK
*Dot1x_NW_MsgTask_0: Oct 25 12:14:18.295: %DOT1X-3-PSK_CONFIG_ERR: 1x_ptsm.c:730 Client 50:82:d5:ac:e6:f0 may be using an incorrect PSK
*Dot1x_NW_MsgTask_0: Oct 25 12:09:19.791: %DOT1X-3-INVALID_WPA_KEY_STATE: 1x_eapkey.c:2897 Received EAPOL-key message while in invalid state (4) - version 1, type 3, descriptor 2, client 38:2d:e8:36:fc:20
*Dot1x_NW_MsgTask_0: Oct 25 12:08:55.963: %DOT1X-3-PSK_CONFIG_ERR: 1x_ptsm.c:730 Client bc:92:6b:2d:19:55 may be using an incorrect PSK
*Dot1x_NW_MsgTask_0: Oct 25 12:07:28.258: %DOT1X-3-INVALID_REPLAY_CTR: 1x_eapkey.c:452 Invalid replay counter from client 70:ef:00:31:ec:e3 - got 00 00 00 00 00 00 00 00, expected 00 00 00 00 00 00 00 01
*Dot1x_NW_MsgTask_0: Oct 25 12:03:49.433: %DOT1X-3-INVALID_WPA_KEY_STATE: 1x_eapkey.c:2897 Received EAPOL-key message while in invalid state (4) - version 1, type 3, descriptor 2, client 38:2d:e8:36:fc:20
*Dot1x_NW_MsgTask_0: Oct 25 12:02:33.191: %DOT1X-3-INVALID_WPA_KEY_STATE: 1x_eapkey.c:2897 Received EAPOL-key message while in invalid state (4) - version 1, type 3, descriptor 2, client 38:2d:e8:36:fc:20
*Dot1x_NW_MsgTask_0: Oct 25 11:57:22.335: %DOT1X-3-INVALID_REPLAY_CTR: 1x_eapkey.c:452 Invalid replay counter from client 78:9f:70:af:7d:7b - got 00 00 00 00 00 00 00 03, expected 00 00 00 00 00 00 00 04
*Dot1x_NW_MsgTask_0: Oct 25 11:57:22.335: %DOT1X-3-INVALID_REPLAY_CTR: 1x_eapkey.c:452 Invalid replay counter from client 78:9f:70:af:7d:7b - got 00 00 00 00 00 00 00 02, expected 00 00 00 00 00 00 00 04
*Dot1x_NW_MsgTask_0: Oct 25 11:55:41.581: %DOT1X-3-INVALID_REPLAY_CTR: 1x_eapkey.c:452 Invalid replay counter from client 70:ef:00:31:ec:e3 - got 00 00 00 00 00 00 00 03, expected 00 00 00 00 00 00 00 04
*dot1xMsgTask: Oct 25 11:55:37.372: %DOT1X-3-WPA_SEND_STATE_ERR: 1x_kxsm.c:1693 Unable to send EAPOL-key msg - invalid WPA state (2) - client 8c:f5:a3:10:d6:2e
*Dot1x_NW_MsgTask_0: Oct 25 11:45:02.028: %DOT1X-3-INVALID_WPA_KEY_STATE: 1x_eapkey.c:2897 Received EAPOL-key message while in invalid state (4) - version 1, type 3, descriptor 2, client a4:f1:e8:d5:be:f8
*Dot1x_NW_MsgTask_0: Oct 25 11:37:47.813: %DOT1X-3-PSK_CONFIG_ERR: 1x_ptsm.c:730 Client e8:2a:ea:69:e7:59 may be using an incorrect PSK
*Dot1x_NW_MsgTask_0: Oct 25 11:37:09.530: %DOT1X-3-PSK_CONFIG_ERR: 1x_ptsm.c:730 Client a4:c4:94:7e:a3:6a may be using an incorrect PSK
*Dot1x_NW_MsgTask_0: Oct 25 11:36:29.860: %DOT1X-3-PSK_CONFIG_ERR: 1x_ptsm.c:730 Client 70:70:0d:0d:b5:bc may be using an incorrect PSK
*Dot1x_NW_MsgTask_0: Oct 25 11:35:27.971: %DOT1X-3-PSK_CONFIG_ERR: 1x_ptsm.c:730 Client e8:2a:ea:69:e7:59 may be using an incorrect PSK
*Dot1x_NW_MsgTask_0: Oct 25 11:34:44.531: %DOT1X-3-PSK_CONFIG_ERR: 1x_ptsm.c:730 Client a4:c4:94:7e:a3:6a may be using an incorrect PSK
*Dot1x_NW_MsgTask_0: Oct 25 11:32:59.203: %DOT1X-3-PSK_CONFIG_ERR: 1x_ptsm.c:730 Client e8:2a:ea:69:e7:59 may be using an incorrect PSK
*Dot1x_NW_MsgTask_0: Oct 25 11:32:19.523: %DOT1X-3-PSK_CONFIG_ERR: 1x_ptsm.c:730 Client a4:c4:94:7e:a3:6a may be using an incorrect PSK
--More-- or (q)uit
*Dot1x_NW_MsgTask_0: Oct 25 11:31:24.974: %DOT1X-3-PSK_CONFIG_ERR: 1x_ptsm.c:730 Client 70:70:0d:0d:b5:bc may be using an incorrect PSK
*Dot1x_NW_MsgTask_0: Oct 25 11:29:53.919: %DOT1X-3-PSK_CONFIG_ERR: 1x_ptsm.c:730 Client a4:c4:94:7e:a3:6a may be using an incorrect PSK
*Dot1x_NW_MsgTask_0: Oct 25 11:27:29.118: %DOT1X-3-PSK_CONFIG_ERR: 1x_ptsm.c:730 Client a4:c4:94:7e:a3:6a may be using an incorrect PSK
*Dot1x_NW_MsgTask_0: Oct 25 11:25:07.689: %DOT1X-3-PSK_CONFIG_ERR: 1x_ptsm.c:730 Client a4:c4:94:7e:a3:6a may be using an incorrect PSK
*Dot1x_NW_MsgTask_0: Oct 25 11:24:35.138: %DOT1X-3-INVALID_REPLAY_CTR: 1x_eapkey.c:452 Invalid replay counter from client a4:d1:8c:61:30:b2 - got 00 00 00 00 00 00 00 00, expected 00 00 00 00 00 00 00 01
*RRM-DCLNT-5_0: Oct 25 11:22:56.545: %RRM-3-RRM_LOGMSG: rrmLrad.c:4839 RRM LOG: Client not found: D0:C5:F3:46:29:3B
*apfReceiveTask: Oct 25 11:22:50.228: %LOG-3-Q_IND: apf_80211.c:13659 There is no PMK cache entry for clientd0:c5:f3:46:29:3b. Can't do preauth[...It occurred 2 times.!]
*apfMsConnTask_0: Oct 25 11:22:48.863: %APF-3-PREAUTH_FAILURE: apf_80211.c:13659 There is no PMK cache entry for clientd0:c5:f3:46:29:3b. Can't do preauth[...It occurred 2 times/sec!.]
*apfMsConnTask_0: Oct 25 11:22:45.154: %APF-3-PREAUTH_FAILURE: apf_80211.c:13659 There is no PMK cache entry for clientd0:c5:f3:46:29:3b. Can't do preauth
*Dot1x_NW_MsgTask_0: Oct 25 11:22:44.871: %DOT1X-3-PSK_CONFIG_ERR: 1x_ptsm.c:730 Client a4:c4:94:7e:a3:6a may be using an incorrect PSK
*apfMsConnTask_0: Oct 25 11:22:44.814: %APF-3-PREAUTH_FAILURE: apf_80211.c:13659 There is no PMK cache entry for clientd0:c5:f3:46:29:3b. Can't do preauth
*Dot1x_NW_MsgTask_0: Oct 25 11:22:37.730: %DOT1X-3-PSK_CONFIG_ERR: 1x_ptsm.c:730 Client 44:1c:a8:af:6f:75 may be using an incorrect PSK
*apfMsConnTask_0: Oct 25 11:22:36.739: %APF-3-PREAUTH_FAILURE: apf_80211.c:13659 There is no PMK cache entry for clientd0:c5:f3:46:29:3b. Can't do preauth
*apfMsConnTask_0: Oct 25 11:22:33.396: %APF-3-PREAUTH_FAILURE: apf_80211.c:13659 There is no PMK cache entry for clientd0:c5:f3:46:29:3b. Can't do preauth
*apfMsConnTask_0: Oct 25 11:22:30.055: %APF-3-PREAUTH_FAILURE: apf_80211.c:13659 There is no PMK cache entry for clientd0:c5:f3:46:29:3b. Can't do preauth
*Dot1x_NW_MsgTask_0: Oct 25 11:22:29.994: %LOG-3-Q_IND: apf_80211.c:13659 There is no PMK cache entry for clientd0:c5:f3:46:29:3b. Can't do preauth
*apfMsConnTask_0: Oct 25 11:22:29.371: %APF-3-PREAUTH_FAILURE: apf_80211.c:13659 There is no PMK cache entry for clientd0:c5:f3:46:29:3b. Can't do preauth
*Dot1x_NW_MsgTask_0: Oct 25 11:22:22.307: %DOT1X-3-INVALID_REPLAY_CTR: 1x_eapkey.c:452 Invalid replay counter from client 54:13:79:92:5c:97 - got 00 00 00 00 00 00 00 00, expected 00 00 00 00 00 00 00 01
*Dot1x_NW_MsgTask_0: Oct 25 11:22:22.158: %LOG-3-Q_IND: apf_80211.c:13659 There is no PMK cache entry for clientd0:c5:f3:46:29:3b. Can't do preauth
*apfMsConnTask_0: Oct 25 11:22:21.267: %APF-3-PREAUTH_FAILURE: apf_80211.c:13659 There is no PMK cache entry for clientd0:c5:f3:46:29:3b. Can't do preauth[...It occurred 3 times/sec!.]
*apfMsConnTask_0: Oct 25 11:22:20.175: %APF-3-PREAUTH_FAILURE: apf_80211.c:13659 There is no PMK cache entry for clientd0:c5:f3:46:29:3b. Can't do preauth
*apfMsConnTask_0: Oct 25 11:22:17.273: %APF-3-PREAUTH_FAILURE: apf_80211.c:13659 There is no PMK cache entry for clientd0:c5:f3:46:29:3b. Can't do preauth
*apfMsConnTask_0: Oct 25 11:22:16.895: %APF-3-PREAUTH_FAILURE: apf_80211.c:13659 There is no PMK cache entry for clientd0:c5:f3:46:29:3b. Can't do preauth.
Esperando que me puedan guiar me despido cordialmente.
Marcelo.
¡Resuelto! Ir a solución.
el 12-05-2017 03:53 AM
Gracias Daniel por tu respuesta, te cuento que ya resolví el problema y lo que hice fue solo dejar la banda 2,4 ya que los clientes al tener posibilidad de conectarse con 5Ghz, esto producía algún tipo de problemas. La solución ya esta operativa y funcionando sin problemas.
Gracias!!!
el 10-29-2017 11:53 AM
el 12-05-2017 03:53 AM
Gracias Daniel por tu respuesta, te cuento que ya resolví el problema y lo que hice fue solo dejar la banda 2,4 ya que los clientes al tener posibilidad de conectarse con 5Ghz, esto producía algún tipo de problemas. La solución ya esta operativa y funcionando sin problemas.
Gracias!!!
el 12-05-2017 06:35 AM
Excelente Marcelo.
el 06-07-2018 11:16 AM
el 06-08-2018 08:45 AM
Descubra y salve sus notas favoritas. Vuelva a encontrar las respuestas de los expertos, guías paso a paso, temas recientes y mucho más.
¿Es nuevo por aquí? Empiece con estos tips. Cómo usar la comunidad Guía para nuevos miembros
Navegue y encuentre contenido personalizado de la comunidad