AIR-CTVM-K9 - Somme Client unable to connect to PSK SSID

[LAN team]

Since few weeks, most of the client are unable to connect to a PSK SSID.

On logs, we can see :  Received EAPOL-key M2 with invalid MIC from mobile xx:xx:xx:xx:xx:xx version 2 while it's valid MIC received on the few working client.

is it a bug ?

[MHM Cisco World · Accepted solution]

Only make user correctly enter password 

MHM

[LAN team]

On-site guy confirm it has been verified.

[MHM Cisco World · Accepted solution]

believe me it issue of password 

(Cisco Controller) >show client detail xx.xx.xx.xx

 do this and share output 

ans ask IT to re enter the password 

MHM

[marce1000]

           - What software version is the controller running ?

 M.

[LAN team]

It's 8.5.161.6

[marce1000]

  - You should go for https://software.cisco.com/download/home/284464214/type/280926587/release/8.10.196.0
     to have the latest bugfixes and because the aireos based platforms are getting obsolete.

  M.

[Rich R]

Before updating to 8.10 check that your APs are compatible with 8.10 on the Compatibility Matrix (link below).
If not then you should, at the very least update, to 8.5.182.12 (link below).
That kind of problem could also be a bug in the client so check that clients' OS and drivers are up to date.
What type of clients are affected and have they recently had any updates?

[Flavio Miranda · Accepted solution]

@LAN team 

 It can be a bug if no config was change but before, run a debug and share the logs please

• debug client client_mac, where client _mac is the MAC address of the client's test.
• debug aaa detail enable

Received EAPOL-key M2 with invalid MIC from mobile

 This message suggest wrong password. 

[LAN team]

Finaly, you're right. on site team confirm it was a password issue...sorry guys.

[Scott Fella]

@LAN team  So did the PSK on the devices get pushed out wrong or did users use the wrong PSK? It's weird that you mentioned most of the devices started to fail.