01-31-2017 06:29 PM - edited 07-05-2021 06:28 AM
Hello,
My customer has a report regarding random clients at their headquarters, where clients on 2 floors were disconnecting (clients are not roaming btw. APs). The only way to get the clients connected were to get them reconnect manually.
The Controller AIR-CT5508-K9 running version 8.0.121.0 displays on the access points in those floors several log messages like these ones:
%DOT11-4-FLUSH_DEAUTH: Consecutive tx fail 500+: deauth d8fc.9329.f6c6
%DOT11-4-CCMP_REPLAY: Client e4a4.7111.bab6 had 1 AES-CCMP TSC replays
The WLAN affected uses encryption WPA2 AES with PSK. The access points in that building in the majority are AIR-CAP2702E-N-K9 Version 15.3(3)JA5.
We checked the configuration and logs in the controller that shows no issues and properly set however after investigating we have seen that the logs are pointing to a Known Cisco bug CSCur62548.
The bug does not have workaround at this moment. Neither a version to fix this. any help on this will be very appreciated.
01-31-2017 06:34 PM
When you run into issues that you know is reproducible, most of the time a later code version may help. Anytime you have client issues, you need to isolate the issue by device type, NIC card and or driver. If a few types of devices have issue and many others don't, then it's usually client side in which use the lasted approved driver. If it happens to all the devices, then it's either a config issue or a bug.
-Scott
*** Please rate helpful posts ***
02-01-2017 10:33 AM
Okay, will check on the client side. Thanks a lot for the quick answer.
02-11-2022 06:35 AM
Did you find a solution for this? i have same behaviour
%DOT11-4-CCMP_REPLAY: Client xxxx.xxxx.xxxx had 7 AES-CCMP TSC replays
%DOT11-4-FLUSH_DEAUTH: Consecutive tx fail 500+: deauth xxxx.xxxx.xxxx
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide