Core Issue
The client adapter may have issues with the security and encryption settings.
Resolution
If your client adapter is unable to authenticate to an access point. You may be receiving error messages such as %DOT11-7-AUTH_FAILED and/or possibly others. Check the security settings of your client adapter and the access point. These include the following areas:
- Client Name or Logon Name parameter
- WEP key values, WEP key sizes, WEP activation, and WEP transmit key parameters Network Security parameter
- LEAP activation and LEAP username and password parameters
For more information, refer to the Problems Authenticating to the Access Point section of Troubleshooting .
Note: When considering security solutions, network administrators should refer to the 802.11 Wireless LAN Security White Paper.
Special attention should be paid to the use of strong passwords. Cisco LEAP is a password-based algorithm. To minimize the possibility of a successful dictionary attack, use strong passwords, which are difficult to guess. Some characteristics of strong passwords include the following:
- A minimum of ten characters.
- A mixture of uppercase and lowercase letters.
- At least one numeric character or one non-alphanumeric character (example: !#@$%).
- No form of the user's name or user ID.
- A word that is not found in the dictionary (domestic or foreign).
Problem Type
Client / Device cannot authenticate
Products
Access point
WLAN adapters (wireless card) / ACU (Aironet Client Utility)
Security Options
PEAP
WEP key
EAP
LEAP / RADIUS
What can you ping?
Cannot ping peer
VxWorks Errors, Warnings, Statistics and Log Messages
Station [hostname][MAC address] Failed Authentication, status Unsupported Authentication Algorithm
Wireless Stages
Unauthenticated and Associated
