Cisco 1120AP and Toshiba IK-WB11A Wireless Cam

[chris@routerguy.com]

I have a network of Cisco 1120 series AP's. I am attempting to connect a Toshiba IK-WB11A wireless surveillance camera to one of the AP's that I have wiped clean clean clean.

I have a 128bit wep key defined. I can associate with a client pc (hate the idea of wep only - but this is a test). The Toshiba will not associate and encrypt.

I called Toshiba support. Their suggestion was to dump the Cisco gear (yeah, right) and go with something like Linksys.

So after several hours of futzing around, I went and dropped $69 on a Linksys WRTG54G AP unit...

DANG! the Toshiba associated right away!

So my question is - has anyone been able to find a way to get the Cisco AP to show what the real error is in the WEP keys like wep keys hash checksum errors during negotitation or something?

Better yet, if we could get a "hey dummy" notice.

What bothers me is my client pc will connect to Cisco or Linksys using the same wep key. The camera will not.

Any recommendations are welcome.

Chris

[dixho]

Please disable "Aironet Extension". If you go to the http interface of the AP, click on "Express Setup" You can disable Aironet Extension there.

[chris@routerguy.com]

Hello -

Here's what I have found.

1) The toshiba camera does not scan for channel settings. If you set it for 11, then the AP must be at 11.

2) You must set not only authentication open but must have authentication shared enable. This debug snipped clued me in on it:

*Mar 1 13:46:17.809: dot11_mgmt: add a new station 0006.f409.48e3

*Mar 1 13:46:17.809: dot11_mgmt_sta_add(ref=1,sta_ptr=0x9AA4A0,mac = 0006.f409.48e3

*Mar 1 13:46:17.809: dot11_mgmt:reject 0006.f409.48e3 auth req, no sharedkey auth

*Mar 1 13:46:17.809: dot11_mgmt:[C6F2F037]send auth=1, status[13] to dst=0006.f409.48e3 seq=2,

Dot11Radio0

t

*Mar 1 13:46:17.809: dot11_mgmt_sta_del(ref=1,sta_ptr=0x9AA4A0,mac = 0006.f409.48e3)

So now that I have auth open and auth shared enable I can see that I get a WEP session...

MyAP#sh dot11 associations all-client

Address : 0006.f409.48e3 Name :

IP Address : 192.168.100.4 Interface : Dot11Radio 0

Device : - Software Version :

CCX Version :

State : Assoc Parent : self

SSID : IKWB VLAN : 0

Hops to Infra : 1 Association Id : 25

Clients Associated: 0 Repeaters associated: 0

Tunnel Address :0.0.0.0

Key Mgmt type : NONE Encryption : WEP

Current Rate : 11.0 Capability : ShortHdr ShortSlot

Supported Rates : 1.0 2.0 5.5 11.0

Signal Strength : -33 dBm Connected for : 149 seconds

Signal Quality : N/A Activity Timeout : 37 seconds

Power-save : Off Last Activity : 23 seconds ago

Packets Input : 10 Packets Output : 12

Bytes Input : 910 Bytes Output : 1167

Duplicates Rcvd : 0 Data Retries : 1

Decrypt Failed : 0 RTS Retries : 0

MIC Failed : 0

MIC Missing : 0

Thanks for the help!

[dixho]

1. This is the first time I see a wireless client defines the channel.

2. From the debugs, it looks like that the Toshiba client is looking for shared authentication:

"send auth=1, status[13]"

Auth=1 means shared authentication. If open authentication is used "Auth" should be equal to 0

Status 13 means wrong authentication.