Hi,
we are running 9800 CL for some time now and have issues with PSK SSIDs. We have couple of them and the same issue appears on all of them despite slighly different configuration. The issue I see on DNAC for those clients is always like this:
Details
| AUTH Server | 0.0.0.0 |
| WLC Name | wlc-a.eu-central-1.compute.internal |
| SubReasonType | Disassociation Due to Inactivity |
| Delete Reason Description | Client Authentication failed due to M5 retransmit max tries. |
| Frequency(GHz) | 5.0 |
And inside it:
<meta charset="utf-8" />
Authenticating | 2:37:15.487 PM | AAA Unknown Error |
| | Authenticating | 2:37:15.487 PM | Group Key Update Timeout |
| | Authenticating | 2:37:15.487 PM | 4 Way Key Exchange Failure - M3 M4 Key Exchange Timeout |
First of all we are running only Flex connect APs and have a central controller + ISE in AWS. Our WLANs have central authentication and switching disabled so I don't understand where does this timeout comes from, all communication should be between AP and the client. The signal strength is not an issue, this happens for various users (windows+mac) and it's not like a roaming issue. I tried fiddling with security protocols, fast transition modes etc but nothing solved this completely. Did anyone had similar issues and can advise how to troubleshoot this, or at least what could be the cause of this. Cert based SSIDs work without issues, I don't understand why the PSK ones are causing so much trouble if the users don't have any issues using other PSK networks (not a client driver issue)
Thank you for any advice
