4 way handshake timeout

[ittechk4u1]

Hello experts,

I am getting the eeor on a WLAN

"Client Deauthenticated: MACAddress:xxxxxxxxxxx Base Radio MAC:yyyyyyyyyyyyyy Slot: 0 User Name: unknown Ip Address: unknown Reason:Authentication rejected because of challenge failure ReasonCode: 15"

I read somewhere that its a issue of 4-way handshake timeout. This means that during the initial phase of authentication the wireless client didn't respond or didn't respond within the time frame.

How can i  increase the 4 way Handshake timeout on WLC or in WLAN?

Thanks

[Ric Beeching]

Hey,

What do you see on your Authentication Server logs? You should see an error message of some kind which may clue you into why it has failed.

What type of 802.1x authentication are you trying to use?

Ric

[ittechk4u1]

there is no special Authentication server , WLAN is conifgred with WPA2/AES-PSK. 

Error:

User Name: unknown Ip Address: unknown Reason:Authentication rejected because of challenge failure ReasonCode: 15

Thanks

[Sandeep Choudhary · Accepted solution]

Thats correct , its a issue of 4 way handshake.

you cna try these comamnds:

config advanced eap eapol-key-timeout
config advanced eap eapol-key-retries

Regards

Dont forget to rate helpful posts

[ittechk4u1]

Great it works.

Thank you very much

[sam2386]

Iam having the same issue and i tried both of the commands to increase the max retries to 4 and timeout to 2000 still not success. all other SSID's are working find except one SSID having this same issue, do you have an idea if there is something else to look into?

thanks