02-21-2020 06:32 AM - edited 07-05-2021 11:45 AM
hello,
I have a wireless network built with Cisco WLC 5520 (in HA), AP 2800. WLC is running code 8.3.133.0.
Randomly, client roaming goes wrong, all I can found in the debug client is this :
xx:xx:xx:xx:xx:xx : MAC of client
yy:yy:yy:yy:yy:yy : BSSID
*Dot1x_NW_MsgTask_2: Nov 22 09:52:43.707: [PA] xx:xx:xx:xx:xx:xx Received EAPOL-Key from mobile xx:xx:xx:xx:xx:xx
*Dot1x_NW_MsgTask_2: Nov 22 09:52:43.707: [PA] xx:xx:xx:xx:xx:xx Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile xx:xx:xx:xx:xx:xx
*Dot1x_NW_MsgTask_2: Nov 22 09:52:43.707: [PA] xx:xx:xx:xx:xx:xx key Desc Version FT - 0
*Dot1x_NW_MsgTask_2: Nov 22 09:53:52.366: [PA] xx:xx:xx:xx:xx:xx Received EAPOL-key message in invalid state from mobile xx:xx:xx:xx:xx:xx
*apfOpenDtlSocket: Nov 22 09:55:08.983: [PA] xx:xx:xx:xx:xx:xx Recevied management frame REASSOCIATION REQUEST on BSSID yy:yy:yy:yy:yy:yy destination addr yy:yy:yy:yy:yy:y2
Solved! Go to Solution.
02-22-2020 05:48 AM
02-21-2020 06:59 AM
hello,
I think somehow the client send eapol pkt with the key version 1 that's ignored by the controller (version 2).
is there a way to ignore the version check in the controller ?
*dot1xSocketTask: Nov 22 09:53:52.365: [PA] xx:xx:xx:xx:xx:xx validating eapol pkt: key version = 2
*Dot1x_NW_MsgTask_2: Nov 22 09:52:43.707: [PA] xx:xx:xx:xx:xx:xx Received EAPOL-Key from mobile xx:xx:xx:xx:xx:xx
*Dot1x_NW_MsgTask_2: Nov 22 09:52:43.707: [PA] xx:xx:xx:xx:xx:xx Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile xx:xx:xx:xx:xx:xx
*Dot1x_NW_MsgTask_2: Nov 22 09:52:43.707: [PA] xx:xx:xx:xx:xx:xx key Desc Version FT - 0
*Dot1x_NW_MsgTask_2: Nov 22 09:53:52.366: [PA] xx:xx:xx:xx:xx:xx Received EAPOL-key message in invalid state from mobile xx:xx:xx:xx:xx:xx
*apfOpenDtlSocket: Nov 22 09:55:08.983: [PA] xx:xx:xx:xx:xx:xx Recevied management frame REASSOCIATION REQUEST on BSSID yy:yy:yy:yy:yy:yy destination addr yy:yy:yy:yy:yy:y2
Thanks in advance,
02-22-2020 05:48 AM
02-26-2020 06:45 AM
06-04-2020 10:09 AM
06-04-2020 11:56 AM
Hello,
The upgrade solved the problem.
Regards,
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: