mp118
asked on
Cisco 1130 AP authentication problems
I have 6 Cisco 1130AG access points. They were all working fine until about 2 weeks ago and they all started to give the following error messages:
Feb 23 17:03:13.241 Information Interface Dot11Radio0, Station ap1 0019.d206.2adf Associated KEY_MGMT[NONE]
Feb 23 17:03:11.200 Information Interface Dot11Radio0, Deauthenticating Station 0019.d206.2adf Reason: Sending station has left the BSS
Feb 23 17:00:15.293 Warning Possible encryption key mismatch between interface Dot11Radio0 and station 0019.d206.2adf
Feb 23 17:00:11.071 Information Interface Dot11Radio0, Station ap1 0019.d206.2adf Associated KEY_MGMT[NONE]
Feb 23 17:00:07.188 Information Interface Dot11Radio0, Deauthenticating Station 0019.d206.2adf Reason: Sending station has left the BSS
Feb 23 16:59:57.492 Information Interface Dot11Radio0, Deauthenticating Station 0016.6fca.e4e1 Reason: Previous authentication no longer valid
I have looked on multiple sites and forums and they guess that it comes down to a hardware or a signal interference problem. The computers will connect to the wireless network for about 30 minutes and then drop the network resources. It will stay connected to the actual wireless network which leads me to believe that it is not hardware or interference but the actual authentication with Active Directory. I had them set up on WEP keys initially but I set up a test network with WPA to test that out but they couldn't authenticate the user, so the clients never connected.
I have updated the firmware, synced the time, deleted and reconfigured the WLANs with various authentication methods, and have completely reset the APs but none of that helped.
Feb 23 17:03:13.241 Information Interface Dot11Radio0, Station ap1 0019.d206.2adf Associated KEY_MGMT[NONE]
Feb 23 17:03:11.200 Information Interface Dot11Radio0, Deauthenticating Station 0019.d206.2adf Reason: Sending station has left the BSS
Feb 23 17:00:15.293 Warning Possible encryption key mismatch between interface Dot11Radio0 and station 0019.d206.2adf
Feb 23 17:00:11.071 Information Interface Dot11Radio0, Station ap1 0019.d206.2adf Associated KEY_MGMT[NONE]
Feb 23 17:00:07.188 Information Interface Dot11Radio0, Deauthenticating Station 0019.d206.2adf Reason: Sending station has left the BSS
Feb 23 16:59:57.492 Information Interface Dot11Radio0, Deauthenticating Station 0016.6fca.e4e1 Reason: Previous authentication no longer valid
I have looked on multiple sites and forums and they guess that it comes down to a hardware or a signal interference problem. The computers will connect to the wireless network for about 30 minutes and then drop the network resources. It will stay connected to the actual wireless network which leads me to believe that it is not hardware or interference but the actual authentication with Active Directory. I had them set up on WEP keys initially but I set up a test network with WPA to test that out but they couldn't authenticate the user, so the clients never connected.
I have updated the firmware, synced the time, deleted and reconfigured the WLANs with various authentication methods, and have completely reset the APs but none of that helped.
It would depend on how many computers you are trying to service with the six APs as well. I noticed that we reach a signal saturation point at about 12 clients per access point w/o lowering power settings for the G signal.
Also, if you have your frequency set manually, you may want to change that to best throughput. This will allow the APs to better participate with each other in regards to which AP should use which frequency.
Also, if you have your frequency set manually, you may want to change that to best throughput. This will allow the APs to better participate with each other in regards to which AP should use which frequency.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Radio Interference You do not require a license to operate radio equipment in the 2.4 GHz band where the Cisco Aironet WLAN equipment operates. As a result, other transmitters can broadcast on the same frequency that your WLAN uses. A spectrum analyzer is the best tool to determine the presence of any activity on your frequency. The Carrier Busy test available in the Test menus of Cisco Aironet bridges functions as a substitute for this item. This test generates a rough display of activity on the different frequencies. If you suspect radio interference with transmission and reception on your WLAN, turn off the equipment that operates on the frequency in question and run the test. The test shows any activity on your frequency and the other frequencies on which the equipment can operate. You can thus determine if you want to change frequencies. Note: High error counters on radio interfaces on the client, the access point or bridge indicate the effects of RF interference. You can also identify RF interference through system messages in the logs of the access point (AP) or bridge. The output looks like this: May 13 18:57:38.208 Information Interface Dot11Radio0, Deauthenticating Station 000e.3550.fa78 Reason: Previous authentication no longer valid May 13 18:57:38.208 Warning Packet to client 000e.3550.fa78 reached max retries, removing the client