dot11i timeout wing 5.8.5

  • 0
  • 1
  • Question
  • Updated 1 year ago
  • Answered
  • (Edited)
Motorola G3/4 mobile phones will not authenticate with wlan, Dot11i timeout. If I set the wifi to be Open its fine, but will not connect using wpa-ccmp or wpa2-ccmp. I have changed the timeouts
 to the following
(config-wlan-test)#wpa-wpa2 handshake attempts 5
(config-wlan-test)#wpa-wpa2 handshake timeout 200 300 400 500 

Sometimes it will connect and then drops. I have tried this on a BNOB ( Brand new out the Box ) Motorola G4 and it does the same as the G3

Iphone connects no problem , But the strange thing is My G4 connects fine

the G3's are at andriod v6.01 anf my G4 is at v7.0

The AP's are a Mixture of 7131 / 7532 Dual radio 2.4 & 5Ghz 

Any Idea's please on how to fix
Photo of Phil storey

Phil storey

  • 1,152 Points 1k badge 2x thumb

Posted 1 year ago

  • 0
  • 1
Photo of Edmundo Bermudez

Edmundo Bermudez

  • 498 Points 250 badge 2x thumb
Hi Phil

What version of Wing do the APs have ??

You can do a test with TKIP-CCMP
Photo of Timo

Timo

  • 3,210 Points 3k badge 2x thumb
Hi,
mostly it's a client or RF problem. You can do the following for a test:

change the timeout to value of 1500 (do not use productive!)

Now you can to a remote-debug for example with this:

remote-debug live-pktcap rf-domain <RF-DOMAIN> radio all count 1000 filter dot11 addr 1 <CLIENT-MAC> and dot11 addr 2 <CLIENT-MAC> and dot11 addr 3 <CLIENT-MAC>

With this you filter all wireless packages from you client. Include the 4 way handshake. Take a look, how long the handshake needs. You can also copy the output. Compare this with your G4.

Based on this result you can adjust the timeout.

BR Timo
Photo of Phil storey

Phil storey

  • 1,152 Points 1k badge 2x thumb
The Ap's all have 5.8.5,, The RF  when you look on the RFS and on the device is very good

We have 3 Wlans, all sowing very Good signal, but the new 4th WLAN is showing a reduced signal strenghth for some reason ?

I have tried with TKip-ccmp and its the same issue, if the wlan is Open then the device will connect with out issue

I will try the remote-debug later today

Thanks for your suggestions
Phil
Photo of Phil storey

Phil storey

  • 1,152 Points 1k badge 2x thumb
Hello 
  I tried the "remote-debug live-pktcap rf-domain <RF-DOMAIN> radio all count 1000 filter dot11 addr 1 <CLIENT-MAC> and dot11 addr 2 <CLIENT-MAC> and dot11 addr 3 <CLIENT-MAC>"

adding the mac of  the device in question and it reports nothing back, I ran the same command on a device I could see attached to an AP , same result nothing displayed
Strange :-(
Photo of Edmundo Bermudez

Edmundo Bermudez

  • 498 Points 250 badge 2x thumb
You set the target tftp?

Try:

RFSXXXX#remote-debug live-pktcap rf-domain default write tftp://x.x.x.x/wireless.pcap radio all count 20000 filter ether host 00-23-68-A9-FD-5F

Photo of Phil storey

Phil storey

  • 1,152 Points 1k badge 2x thumb
I will try tomorrow, 

thanks for your assistance
Photo of Phil storey

Phil storey

  • 1,152 Points 1k badge 2x thumb
hi, I have created a smart RF policy,, and that seems to have settled things down for,
thanks for your help