%DOT11-4-FLUSH_DEAUTH: / %DOT11-4-CCMP_REPLAY: - AIR-CT5508-K9 running version 8.0.121.0 - AIR-CAP2702E-N-K9 Version 15.3(3)JA5

[Pamela Martinez Barajas]

Hello,

My customer has a report regarding random clients at their headquarters, where clients on 2 floors were disconnecting (clients are not roaming btw. APs). The only way to get the clients connected were to get them reconnect manually.

The Controller AIR-CT5508-K9 running version 8.0.121.0 displays on the access points in those floors several log messages like these ones:

%DOT11-4-FLUSH_DEAUTH: Consecutive tx fail 500+: deauth d8fc.9329.f6c6

%DOT11-4-CCMP_REPLAY: Client e4a4.7111.bab6 had 1 AES-CCMP TSC replays

The WLAN affected  uses encryption WPA2 AES with PSK. The access points in that building in the majority are AIR-CAP2702E-N-K9 Version 15.3(3)JA5.

We checked the configuration and logs in the controller that shows no issues and properly set however after investigating we have seen that the logs are pointing to a Known Cisco bug CSCur62548.

The bug does not have workaround at this moment. Neither a version to fix this. any help on this will be very appreciated.

[Scott Fella]

When you run into issues that you know is reproducible, most of the time a later code version may help. Anytime you have client issues, you need to isolate the issue by device type, NIC card and or driver. If a few types of devices have issue and many others don't, then it's usually client side in which use the lasted approved driver. If it happens to all the devices, then it's either a config issue or a bug.

-Scott 

*** Please rate helpful posts *** 

[Pamela Martinez Barajas]

Okay, will check on the client side. Thanks a lot for the quick answer.

[O_H]

Did you find a solution for this? i have same behaviour
%DOT11-4-CCMP_REPLAY: Client xxxx.xxxx.xxxx had 7 AES-CCMP TSC replays
%DOT11-4-FLUSH_DEAUTH: Consecutive tx fail 500+: deauth xxxx.xxxx.xxxx