ERROR: Apple TV causes AES-CCMP TSC replays

alexander2003 · ‎11-23-2022

Hello,
I have a problem. I have a Cisco 2702i AP with two wifis. The two networks run on 2.4GHz and 5GHz and so far work without problems.

But as soon as I connect my Apple TV to the wifi, it triggers the following error message and then loses connection for a few seconds. The Apple TV is on the latest software version. In another network (no Cisco AP) it works without problem.

%DOT11-4-CCMP_REPLAY: Client acbc.4586.e8c8 had 1 AES-CCMP TSC replays
%DOT11-4-MAXRETRIES: Packet to client acbc.4586.e8c8 reached max retries, removing the client
%DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station acbc.4586.e8c8 Reason: Previous authentication no longer valid

I have also uploaded my current config of the AP.

Would be very grateful for any help.

Alex

marce1000 · ‎11-24-2022

- FYI : https://bst.cisco.com/bugsearch/bug/CSCur62548

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Rich R · ‎11-24-2022

So as @marce1000 has highlighted this appears to be a known bug.
But Cisco will not be fixing it because the product is already way past the end of software maintenance date:
https://www.cisco.com/c/en/us/products/collateral/wireless/aironet-2700-series-access-point/eos-eol-notice-c51-740711.html

You don't mention what version of software you're using now so the only thing I can suggest is to try different versions.
for example https://bst.cisco.com/bugsearch/bug/CSCup72165 is fixed in 15.3(3)JPJ6 and 15.3(3)JK5 - try those.
https://bst.cisco.com/bugsearch/bug/CSCuq91056 possibly (bug details are sketchy) fixed in 8.0.120.0 so try 15.3(3)JA4.

If none of those solve the problem then really nothing you can do other than replace with a currently supported product.

------------------------------
Please click Helpful if this post helped you and Select as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's and TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's, Best Practices for 9800 WLC's and Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.196.0, latest 9800 releases, 8.5.182.12 (8.5.182.13 for 3504) and 8.5.182.109 (IRCM, 8.5.182.111 for 3504)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs

Aleck_Sei · ‎05-02-2024

In relation to this topic, I have a mesh network with 2 AP AIR-CAP1532E-E-K9, one with the role of RAP and the other as MAP. We only work with SSIDs that use 802.1x. Clients connected to the LAN segment connected to the MAP report ongoing problems. In the RAP logs we constantly receive these messages:

%DOT11-4-CCMP_REPLAY: Client <Base Radio MAC_MAP> had 2 AES-CCMP TSC replays
%DOT11-4-CCMP_REPLAY: Client <Base Radio MAC_MAP> had 2 AES-CCMP TSC replays
%DOT11-4-CCMP_REPLAY: Client <Base Radio MAC_MAP> had 2 AES-CCMP TSC replays
%DOT11-4-CCMP_REPLAY: Client <Base Radio MAC_MAP> had 2 AES-CCMP TSC replays
.....
Do you think it may also be related to the 'CSCur62548' bug? Could it also be due to the existence of another external network that works at a frequency very close to our mesh network?

Thanks for your help.