AP connection problem

[PuyiZhang7814]

Why do I have so many errors about "Client entered wrong password."?

My computer was connected automatically and I made sure my password was correct.

[Daniel Hoffman]

I observe the same issue with iOS clients only. Have not seen it with the Mac devices. On the iOS devices I selected "Forget Network" and added the network again, entering THE CORRECT PASSWORD, and the devices joined the wireless network. Errors resumed within one hour.

Errors occur on only one SSID out of three and only on one of the APs where that SSID is enabled.

[alican1]

I've been experiencing the same problem as well. I made 100% sure that the password is correct.

Wifi is incredibly unreliable due to this 😞


AP: MR33
Firmware: MR 26.7

[PawelG]

I think we have another thread about the same issue.

https://community.meraki.com/t5/Wireless-LAN/Lots-of-wireless-authentication-failures/m-p/79779#M12207

In my case those are not PSK but 802.1x Meraki Auth errors, but behavior is the same.

It seems that its connected with roaming between APs.

I've tried to open case about that but they wanted live packet captures, which was difficult as I can't say what are the exact conditions for it to happen.

But there is certainly an unresolved bug in several firmwares.

Br, Pawel.

[ERAHRO]

I have also "Client entered wrong password" in more than 30 networks we have. not only iOS but also android and Windows 10 computers also having the same issue. We know for sure that the password is 100% correct.

I opened a case with Meraki support and they asked me to capture a live packet via wireshark and sent it to Meraki support. Still waiting for the reply.

[PawelG]

As I wrote in the other thread about this problem - try disabling 802.11r. In my case it solved the problem completely . Of course it affects roaming performance - but in my case it's better as those auth errors caused delays in roaming.

Br, Pawel.

[ERAHRO]

The 802.11r has been never enabled in our network and also 802.11r is only for iOS while this problem happens in all types of clients.

[PawelG]

To be clear, Adaptive 802.11r is only for iOS devices, pure 802.11r is not restricted, but there is not much devices supporting it.

In my case problem was only with iOS devices and disabling 802.11r solved it.

Seems not to be that simple as I thought.

Br, Pawel.

[alican1]

Same here. 802.11r is disabled and I have one single AP in my network (so there is no roaming or anything)

All types of clients experience this issue.

AP: MR33
Firmware: MR 26.7

[PawelG]

Unfortunately I must agree with you both.

I have those errors again. Disabling 802.1r just reduced them significantly, but they are still there. It is 802.11x not PSK in my case, which might be also a contributing factor.

Br, Pawel.

[ERAHRO]

It is not just the errors on the dashboard but the clients having regular disconnections while roaming. We have mostly problem in our warehouse where clients moving around.

[PawelG]

I've just looked at dashboard of another big network (I was not looking at it since I've encountered errors in my network) consisting of MR52's and using WPA2-PSK for its main SSID.

802.11r disabled and there is a LOT of authentication errors ("bad password"). So You are absolutely right 802.11r does not improve anything when using PSK.

Called them and they say they have problems with their devices saying frequently there is bad password or they just disconnect when roaming.

TAC still not seeing this problem.

Br, Pawel.

[wayne.ranchuk]

I originally thought it was user error but I see it on so many devices and even my own devices just stop working and seeing bad password for themn in the log. I am not sure how a saved password in many devices start sending the wrong password.

not sure why TAC is so reluctant to look deeper into this issue

[jmastera]

I realize it has been a couple of weeks since the last reply, but I am not finidng much else out there in terms of a possible resolution.

I have an MX64, a MS220, and a MR33. Obviously as most people have pointed out through any number of threads this is an issue at the MR33 side of the house.

In my case, all end devices, at one point or another, has had the Client entered wrong password.
type='WPA-PSK auth fail' associated='false' radio='1' vap='1' error.

I cannot find any single reason why after 6 weeks shy of 3 years every single device would start erroring. I have 47 days on my license and at this point I do not think I will be renewing. Sad as I have been a Meraki customer since prior to the Cisco purchase.

Other than changing from WPA 2 to WPA 1 and 2, turning off meshing, allowing rogue, etc. has anyone managed to find a solution?

[PawelG]

Had a long discussion and debug session with TAC about this without any clear output.

They state that those are not auth errors but interpretation of events by Wireless health - which are not related to authentication.

I'm not convinced as sometimes my devices really pop-up a window saying that password is incorrect and requiring to type it again.

Br, Pawel.

[jmastera]

I have watched in real time, on a Win10 device, pings drop, then while still connected to the wireless network Windows will state that the connection has no internet. So while the statement from Cisco may be true in that the auth doesn't actually drop from the device to the WAP, something is truly amiss.