problem with Lumia smartphones connecting to Cisco AP 3702

[kavcic]

Hello,

We replace old Cisco AP (12xx) with new Cisco AP 3702. All clients and smartphones work normally except Lumia 830 and Lumia 1520 where we notice connectivity problem. On the other hand Lumia 820 works and connect normally.

We try to change some settings – for example disable Aironet extensions, we increase packet retries , we remove nearline AP's and even fixed channels on AP where we have problem with connection to assure that we don't have too much noise.. We have also increased timeouts (dot1x timeout supp-response seconds from 30 to 120), we enable reauthentication etc...Unfortunatelly all acitivites didn't resolve the problem. We get the following error messages:

Error Message    DOT11-4-MAXRETRIES: Packet to client [mac-address] reached max retries, removed the client

Apr 24 08:56:58.979: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 4886.e8c3.0dcc Reason: Previous authentication no longer valid

Apr 24 09:24:04.253: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   4886.e8c3.0dcc Associated KEY_MGMT[WPAv2]

Apr 24 09:25:05.951: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 4886.e8c3.0dcc Reason: Previous authentication no longer valid

In attached file I am sending you output of debug command, configuration, show tech and show log. ID of smartphone is 48-86-E8-C3-0D-CC

Thank you in advance very much for any help

Anton

[Mark Malone]

some Lumia platforms do not support cisco leap authentication , i would check what the specific model actually has available for authentication

[kavcic]

 These Lumia smartphones work nornally with older Cisco AP (12xx models). So this shouldn't be a problem. Now we are temporary using old Cisco AP untill we find a resolution for new Cisco AP (3702).

[Rasika Nayanajith · Accepted solution]

Try without TKIP if that supported by client

dot11 ssid WLAN_ISK_WPA_AC
   authentication key-management wpa version 2

interface Dot11Radio1
 encryption vlan 1 mode ciphers aes-ccm tkip

HTH

Rasika

*** Pls rate all useful responses ****

[kavcic]

Great, these change in settings have resolved all our problems! Thank you very much for your help and hint, you save us a lot of time.

Best regards,

Anton Kavcic