ap1100 problems after firmware upgrade

[lupemacias]

i have a couple of cisco ap1100 aps running with cisco acs and wlse. when access points were running an older firmware, both b and g radios are able to connect and authenticate using the windows peap client. after firmware upgrade to anything later than 122-13.ja4, g radios continue to work fine but b radios no longer attach to aps. the same b clients that successfully associate to the aps before the upgrade no longer associate. i can then downgrade to the original firmware and the b clients work fine. all data rates and configuration options do remain the same. any suggestions?

all help appreciated.

thanks.

[thisisshanky]

I have not searched to find if this is a bug, nor that I know of a similar bug..Have you tried 12.3.2JA ? Does that help ?

At the same time, do they connect if you set them to static wep (or without WEP)and the IOS is any thing later than 12.2-13JA4 ? I am trying to think if this is a bug related the code and PEAP.

[lupemacias]

nothing above ja4 seems to work. i can setup and open ssid and the b radios will associate to it without any problems. because of that, i also though it would of been peap, but when the g radios connect fine to it.

[karthiknarasimhan]

Even I suspect this to be a bug.

But before moving further ahead, I'd check the following:

1] The client adapters' firmware is also upgraded to the latest version.

2] What is the behaviour likely to be with absolutely no security at all.

3] Which particular step in the Authentication status windoww do the clients stop while

authenticating to the ACS server.

5] Was the upgrae done using WLSE or manually & individually.[Shouldn't matter much on ths one I guess but am still doubtful]

Just check thes & lemme know if u inferred anything as to on which part of the communication process are we logically seeing a bug

Thanks & Regards,

Karthik N

[lupemacias]

i have updated the firmware on one of the b radio clients i'm using but it continues to have the same issue.

when the ssid has no security and is left open, regardless if ssid broadcast is on or off, the b radios associates to it just fine. this made me thing it was peap but g radios can connect with peap regardless of the ios version running on the ap.

i don't know exactly at what point in the authentication process it fails. i manually entered the ssid in the windows wireless client and it just sits there with a red X over the icon that represents the b radio adapter. i can leave it sit and downgrade the firmware on the ap and as soon as the ap reloads the b radio immediatelly sees it and prompts for credentials.

the upgrade was done via the ap's web interface and tftp server.

this is by far the strangest issue i've had with these.

one of our sites has 477 wireless clients with g cards and use an aegis based client. since this site never had an issue, we then decided to implement these at a second site. unfortunately it is at this second site where most of the clients have b radios.

while i have no problem with running the older ios, i worry about bugs that might affect the wlan's normal operation. the reason for the ios upgrade was to eliminate the bugs, add swan support, and for some reason the older ios makes the aps show up as 802.11a radios is wlse.

[lupemacias]

i had the people that original setup the wlan come out and take a look at this issue. it seems that changing the cipher from ckip to wep128 fixed this problem. they think there might of been a bug in the old ios that was allowing the b radios connect even though they shouldn't of as ckip was also the cipher with the old ap firmware.