topic Re: Can't connect to SSID with PPSK in Aerohive Migrated Content

Can't connect to SSID with PPSK

ewoud_denbreeij — Fri, 21 Sep 2018 17:12:32 GMT

I am not able to connect to an SSID that requires an PPSK. I am able to with WPA2-Personal and Enterprise though.

I did a troubleshoot/diagnostic within the Hivemanager NG and it simply messages:

Sta(at if=wifi0.1) is de-authenticated because of notification of driver
Rx deauth (reason 1 <unspecified>, rssi -63dB)

I upgraded to AP to the latest firmware and update my WiFi driver to the latest version. No success.

The PPSK's are gathered from the cloud user database on Hivemanager NG.

Multiple AP's show this problem.

Re: Can't connect to SSID with PPSK

ewoud_denbreeij — Fri, 21 Sep 2018 17:59:49 GMT

When I use the command '_debug auth basic'

I do get:

Re: Can't connect to SSID with PPSK

erivai — Fri, 21 Sep 2018 20:39:11 GMT

Ewoud,

Please run the following command on the AP.

exec aaa idm-test radsec-proxy

Expected results:

AP not running RadSec proxy

The Aerohive device establish a TCP session with the ID Manager auth gateway successfully

AP running RadSec proxy

The RadSec proxy is connected to the ID Manager auth gateway.

Thank you,

Eastman

Re: Can't connect to SSID with PPSK

ewoud_denbreeij — Fri, 21 Sep 2018 21:12:50 GMT

No matter what AP, if it's defined as RADSEC proxy or not. I always get the reply that it's not an RADSEC proxy. Running the command you gave me.

Re: Can't connect to SSID with PPSK

erivai — Fri, 21 Sep 2018 21:22:54 GMT

What is the AP model and version?

Do you have the output of show IDM (on the AP running RadSec)?

Thank you,

Re: Can't connect to SSID with PPSK

ewoud_denbreeij — Mon, 24 Sep 2018 15:07:41 GMT

All AP's are AP130 running 8.4r2. It's not happening on just a few AP's, it's on all 500+ of them, across 20 networks.

Re: Can't connect to SSID with PPSK

ewoud_denbreeij — Mon, 24 Sep 2018 15:10:07 GMT

IDM client: Enabled Per SSID

IDM Proxy IP: (hidden on purpose)

IDM proxy: Enabled

IDM server: cloud-ie-idmauth.aerohive.com

IDM server IP: 34.253.190.201

RUN state: Connected securely to the IDM server

IDM transport mode: TCP

Server destination Port: 2083

RadSec Certificate state: Valid

RadSec Certificate Issued: 2018-06-04 11:56:51 GMT

RadSec Certificate Expires: 2019-06-04 11:56:51 GMT

Re: Can't connect to SSID with PPSK

AnonymousM — Wed, 21 Nov 2018 10:16:50 GMT

Hi Aerohive Support,

Same problem here, I use the Aerohive Classic.

MESHDEMOAP#exec aaa idm-test radsec-proxy

The RadSec proxy is connected to the ID Manager auth gateway.

MESHDEMOAP#show idm

IDM client: Enabled Per SSID

IDM Proxy IP: 192.168.6.23

IDM proxy: Enabled

IDM server: auth.aerohive.com

IDM server IP: 54.171.185.94

RUN state: Connected securely to the IDM server

IDM transport mode: TCP

Server destination Port: 2083

RadSec Certificate state: Valid

RadSec Certificate Issued: 2018-11-18 02:01:24

RadSec Certificate Expires: 2019-11-21 02:01:24

MESHDEMOAP#show version

Version: HiveOS 8.2r4 build-207023

Build time: Wed Aug 22 03:19:27 UTC 2018

Build cookie: 1808212019-207023

Platform: AP1130

Bootloader ver: v0.0.4.1a

TPM ver: v1.2.37.17

Uptime: 0 weeks, 0 days, 0 hours, 17 minutes, 49 seconds

But still when I connect the SSID with IDM enable, it will show my Iphone "Incorrect password for network "SSID"

Please help us sorted out the issue.

Hope we could fix this problem.

Re: Can't connect to SSID with PPSK

ewoud_denbreeij — Wed, 21 Nov 2018 22:42:03 GMT

Oh yes, I totally forgot about this thread. I fixed it a while ago by creating an new hive within the hivemanager and setting this up to all the existing policies. After that I updated the firmware of all AP's with an restart. It then worked flawlessly again.

Re: Can't connect to SSID with PPSK

minhminhtu96 — Fri, 30 Nov 2018 10:16:59 GMT

how to create SSID with type authentication WPA2-(WPA2-persionnal)-key??

Re: Can't connect to SSID with PPSK

AnonymousM — Tue, 19 Feb 2019 05:59:39 GMT

Anyone else solve this without a new hive?