cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
738
Views
0
Helpful
4
Replies

TKIP_MIC_FAILURE_REPEATED

halsaudi
Cisco Employee
Cisco Employee

Hello everyone,

Recently there was such error message appeared in AP log as shown bellow:

Error Message    DOT11-3-TKIP_MIC_FAILURE_REPEATED: Two TKIP Michael MIC failures were 
detected within [number] seconds on [interface] interface. The interface will be 
put on MIC failure hold state for next [number] seconds

Such error have been solved by the following configuration:

config wlan disable <WLAN ID>    

config wlan security tkip hold-down 0 <WLAN ID>

config wlan enable <WLAN ID>

 In case we have several SSIDs configured in our WLC.

Do we have to implement the command that i mentioned in all SSIDs? Or there is a way to determine from which SSID it is being attack?

4 Replies 4

Rasika Nayanajith
VIP Alumni
VIP Alumni

Completely move away from WPA/TKIP, use WPA2/AES instead.

HTH

Rasika

Agreed move away if you can. If you can not then apply to each WLAN that has tkip enabled. 

"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
___________________________________________________________

Thank you for your confirmation.

Thank you for your useful comment :)

Review Cisco Networking for a $25 gift card