01-11-2011 02:04 AM - edited 07-03-2021 07:39 PM
Hi,
We have a site running 2 1131AG access points on different floors with the same SSID.
There have been issues with connections dropping over the last 2-3 months to some newer laptops and iphones that have been introduced to the network. It is almost totally intermittent and after updating the IOS and laptop drivers where possible, there is a still a problem that wont go away.
I have some example logging from both AP's when this happens (apologies for the date/time differences, however the events are all sequential)
AP1
*Dec 7 03:06:03.591: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 7cc5.37fc.f8cd Associated KEY_MGMT[WPA PSK]
*Dec 7 03:06:06.326: %DOT11-4-TKIP_REPLAY: Client 7cc5.37fc.f8cd had 1 TKIP TSC replays
*Dec 7 03:08:45.326: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 7cc5.37fc.f8cd Reason: Previous authentication no longer valid
AP2
*Feb 17 09:49:55.577: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 7cc5.37fc.f8cd Associated KEY_MGMT[WPA PSK]
*Feb 17 09:50:34.418: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 7cc5.37fc.f8cd Reason: Sending station has left the BSS
*Feb 17 09:51:45.826: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 7cc5.37fc.f8cd Associated KEY_MGMT[WPA PSK]$11Radio0, Station 7cc5.37fc.f8cd Associated KEY_MGMT[WPA PSK]
*Feb 17 09:51:45.826: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 7cc5.37fc^.f8cd Associated KEY_MGMT[WPA PSK]
*Feb 17 09:53:12.441: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 7cc5.37fc.f8cd Reason: Sending station has left the BSS
Many Thanks,
01-11-2011 04:50 AM
There are 2 differents reasons :
1) *Feb 17 09:53:12.441: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 7cc5.37fc.f8cd Reason: Sending station has left the BSS
=> this means that the laptop went out of coverage
2) *Dec 7 03:06:06.326: %DOT11-4-TKIP_REPLAY: Client 7cc5.37fc.f8cd had 1 TKIP TSC replays
=> either this is an active attack or the client is incorrectly replaying packets
Nicolas
01-21-2011 03:23 PM
*Dec 7 03:08:45.326: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 7cc5.37fc.f8cd Reason: Previous authentication no longer valid
I have been chasing this error on some of the 1242 outdoor point to point links I have installed. I had been thinking interference but if anyone else has had the same experience and has a better answer I'm open to suggestions. The weird thing with this is that the radios do not re-establish the link without being manually forced by a carrier busy test or a reboot. Once one of those two things are done the link returns just as happy as it was before it went away.
Scott
01-21-2011 10:10 PM
Scott, did you capture any more in the logs, if so can you post it?
01-24-2011 11:40 AM
1 | 000085: Jan 24 07:40:56.248 EST | Notification | Line protocol on Interface Dot11Radio1, changed state to up |
2 | 000084: Jan 24 07:40:55.249 EST | Error | Interface Dot11Radio1, changed state to up |
3 | 000083: Jan 24 07:40:55.248 EST | Warning | Interface Dot11Radio1, Associated To AP 8th_Turner_to_9 0021.5689.e680 [None WPAv2 PSK] |
4 | 000082: Jan 24 07:40:51.284 EST | Notification | Line protocol on Interface Dot11Radio1, changed state to down |
5 | 000081: Jan 24 07:40:50.285 EST | Error | Interface Dot11Radio1, changed state to down |
6 | 000080: Jan 24 07:40:50.272 EST | Warning | Interface Dot11Radio1, parent lost: Received deauthenticate (2) not valid |
7 | 000079: Jan 24 07:24:37.698 EST | Notification | Line protocol on Interface Dot11Radio1, changed state to up |
8 | 000078: Jan 24 07:24:36.698 EST | Error | Interface Dot11Radio1, changed state to up |
9 | 000077: Jan 24 07:24:36.698 EST | Warning | Interface Dot11Radio1, Associated To AP 8th_Turner_to_9 0021.5689.e680 [None WPAv2 PSK] |
10 | 000076: Jan 24 07:24:32.731 EST | Notification | Line protocol on Interface Dot11Radio1, changed state to down |
11 | 000075: Jan 24 07:24:31.731 EST | Error | Interface Dot11Radio1, changed state to down |
12 | 000074: Jan 24 07:24:31.725 EST | Warning | Interface Dot11Radio1, parent lost: Received deauthenticate (2) not valid |
13 | 000073: Jan 24 07:21:57.409 EST | Notification | Line protocol on Interface Dot11Radio1, changed state to up |
14 | 000072: Jan 24 07:21:56.409 EST | Error | Interface Dot11Radio1, changed state to up |
15 | 000071: Jan 24 07:21:56.409 EST | Warning | Interface Dot11Radio1, Associated To AP 8th_Turner_to_9 0021.5689.e680 [None WPAv2 PSK] |
16 | 000070: Jan 24 07:21:52.436 EST | Notification | Line protocol on Interface Dot11Radio1, changed state to down |
17 | 000069: Jan 24 07:21:51.436 EST | Error | Interface Dot11Radio1, changed state to down |
18 | 000068: Jan 24 07:21:51.420 EST | Warning | Interface Dot11Radio1, parent lost: Received deauthenticate (2) not valid |
19 | 000067: Jan 24 07:10:35.356 EST | Notification | Line protocol on Interface Dot11Radio1, changed state to up |
20 | 000066: Jan 24 07:10:34.355 EST | Error | Interface Dot11Radio1, changed state to up |
21 | 000065: Jan 24 07:10:34.354 EST | Warning | Interface Dot11Radio1, Associated To AP 8th_Turner_to_9 0021.5689.e680 [None WPAv2 PSK] |
22 | 000064: Jan 24 07:10:32.802 EST | Notification | Line protocol on Interface Dot11Radio1, changed state to down |
23 | 000063: Jan 24 07:10:31.803 EST | Error | Interface Dot11Radio1, changed state to down |
24 | 000062: Jan 24 07:10:31.784 EST | Warning | Interface Dot11Radio1, parent lost: Received deauthenticate (2) not valid |
25 | 000061: Jan 24 07:09:23.805 EST | Notification | Line protocol on Interface Dot11Radio1, changed state to up |
26 | 000060: Jan 24 07:09:22.805 EST | Error | Interface Dot11Radio1, changed state to up |
27 | 000059: Jan 24 07:09:22.804 EST | Warning | Interface Dot11Radio1, Associated To AP 8th_Turner_to_9 0021.5689.e680 [None WPAv2 PSK] |
28 | 000058: Jan 24 07:09:16.395 EST | Notification | Line protocol on Interface Dot11Radio1, changed state to down |
29 | 000057: Jan 24 07:09:15.395 EST | Error | Interface Dot11Radio1, changed state to down |
30 | 000056: Jan 24 07:09:15.353 EST | Warning | Interface Dot11Radio1, parent lost: Received deauthenticate (2) not valid |
31 | 000055: Jan 24 06:57:34.118 EST | Notification | Line protocol on Interface Dot11Radio1, changed state to up |
32 | 000054: Jan 24 06:57:33.117 EST | Error | Interface Dot11Radio1, changed state to up |
33 | 000053: Jan 24 06:57:33.117 EST | Warning | Interface Dot11Radio1, Associated To AP 8th_Turner_to_9 0021.5689.e680 [None WPAv2 PSK] |
34 | 000052: Jan 24 06:57:24.295 EST | Notification | Line protocol on Interface Dot11Radio1, changed state to down |
35 | 000051: Jan 24 06:57:23.296 EST | Error | Interface Dot11Radio1, changed state to down |
Root
1 | 000069: Jan 24 07:40:55.245 EST | Information | Interface Dot11Radio1, Station 9th_Turner_to_8 0024.98a9.adf0 Reassociated KEY_MGMT[WPAv2 PSK] |
2 | 000068: Jan 24 07:40:50.267 EST | Warning | Packet to client 0024.98a9.adf0 reached max retries, removing the client |
3 | 000067: Jan 24 07:40:50.265 EST | Information | Interface Dot11Radio1, Deauthenticating Station 0024.98a9.adf0 Reason: Previous authentication no longer valid |
4 | 000066: Jan 24 07:40:50.265 EST | Warning | Packet to client 0024.98a9.adf0 reached max retries, removing the client |
5 | 000065: Jan 24 07:24:36.697 EST | Information | Interface Dot11Radio1, Station 9th_Turner_to_8 0024.98a9.adf0 Reassociated KEY_MGMT[WPAv2 PSK] |
6 | 000064: Jan 24 07:24:31.725 EST | Warning | Packet to client 0024.98a9.adf0 reached max retries, removing the client |
7 | 000063: Jan 24 07:24:31.723 EST | Information | Interface Dot11Radio1, Deauthenticating Station 0024.98a9.adf0 Reason: Previous authentication no longer valid |
8 | 000062: Jan 24 07:24:31.723 EST | Warning | Packet to client 0024.98a9.adf0 reached max retries, removing the client |
9 | 000061: Jan 24 07:21:56.411 EST | Information | Interface Dot11Radio1, Station 9th_Turner_to_8 0024.98a9.adf0 Reassociated KEY_MGMT[WPAv2 PSK] |
10 | 000060: Jan 24 07:21:51.422 EST | Information | Interface Dot11Radio1, Deauthenticating Station 0024.98a9.adf0 Reason: Previous authentication no longer valid |
11 | 000059: Jan 24 07:21:51.421 EST | Warning | Packet to client 0024.98a9.adf0 reached max retries, removing the client |
12 | 000058: Jan 24 07:10:34.357 EST | Information | Interface Dot11Radio1, Station 9th_Turner_to_8 0024.98a9.adf0 Reassociated KEY_MGMT[WPAv2 PSK] |
13 | 000057: Jan 24 07:10:31.788 EST | Warning | Packet to client 0024.98a9.adf0 reached max retries, removing the client |
14 | 000056: Jan 24 07:10:31.785 EST | Information | Interface Dot11Radio1, Deauthenticating Station 0024.98a9.adf0 Reason: Previous authentication no longer valid |
15 | 000055: Jan 24 07:10:31.785 EST | Warning | Packet to client 0024.98a9.adf0 reached max retries, removing the client |
16 | 000054: Jan 24 07:09:22.796 EST | Information | Interface Dot11Radio1, Station 9th_Turner_to_8 0024.98a9.adf0 Reassociated KEY_MGMT[WPAv2 PSK] |
17 | 000053: Jan 24 07:09:15.345 EST | Warning | Packet to client 0024.98a9.adf0 reached max retries, removing the client |
18 | 000052: Jan 24 07:09:15.343 EST | Information | Interface Dot11Radio1, Deauthenticating Station 0024.98a9.adf0 Reason: Previous authentication no longer valid |
19 | 000051: Jan 24 07:09:15.343 EST | Warning | Packet to client 0024.98a9.adf0 reached max retries, removing the client |
20 | 000050: Jan 24 06:57:33.079 EST | Information | Interface Dot11Radio1, Station 9th_Turner_to_8 0024.98a9.adf0 Reassociated KEY_MGMT[WPAv2 PSK] |
21 | 000049: Jan 24 06:57:31.402 EST | Notification | Line protocol on Interface Dot11Radio1, changed state to up |
22 | 000048: Jan 24 06:57:30.402 EST | Error | Interface Dot11Radio1, changed state to up |
23 | 000047: Jan 24 06:57:20.091 EST | Notification | Line protocol on Interface Dot11Radio1, changed state to down |
24 | 000046: Jan 24 06:57:19.091 EST | Notification | Interface Dot11Radio1, changed state to reset |
25 | 000045: Jan 24 06:00:57.343 EST | Warning | Packet to client 0024.98a9.adf0 reached max retries, removing the client |
26 | 000044: Jan 24 06:00:57.340 EST | Information | Interface Dot11Radio1, Deauthenticating Station 0024.98a9.adf0 Reason: Previous authentication no longer valid |
27 | 57.340 EST | Warning | Packet to client 0024.98a9.adf0 reached max retries, removing the client |
09-03-2011 05:55 AM
Hello Christopher,
Please mark the Question as Answered, if the provided information is correct and it helped. By doing that others can take benefit as well.
Thanks,
Vinay Sharma
Community Manager – Wireless
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide