https://community.extremenetworks.com/t5/extremewireless-wing/ap6522-log-comprehensions/m-p/20538#M1309 For me it sound like a client problem or a wifi design problem.<BR /> <BR /> Capturing is running like this:<BR /> remote-debug live-pktcap rf-domain <YOUR-RF> write tftp://<TFTP-SERVER>/filename.pcap radio all count 1000 filter ether host <CLIENT-MAC><BR /> <BR /> This write 1000 packages to your TFTP Server for the client <CLIENT-MAC> include all wireless packages with the client mac.<BR /> <BR /> With this pcap you can check what happens.<BR /></CLIENT-MAC></CLIENT-MAC></TFTP-SERVER></YOUR-RF> Wed, 11 Oct 2017 12:33:00 GMT Timo1 2017-10-11T12:33:00Z https://community.extremenetworks.com/t5/extremewireless-wing/ap6522-log-comprehensions/m-p/20529#M1300 Hello,<BR /> <BR /> We have 12 AP6522 and a RFS4000 Wireless Controller. All of them are in version 5.5.1.0-017R. The peripherals connected to the AP are 25 MC90XX.<BR /> <BR /> Since september, we started to check the logs of the AP and I need some help to understand some message or to solve some alerts.<BR /> <BR /> There are the message : <BR /> <BR /> <OL> <LI>KERN-3-ERR: 0| bridge.c:1598 Warning: Filtering MAC address 00-00-00-00-00-00 on vlan 1 port up1 from FDB. </LI><LI>DOT11-5-WPA_WPA2_FAILED: Client 00-23-68-00-00-00 failed group key handshake on wlan TerminauxMobiles radio ap6522-AP1:R1 </LI><LI>DOT11-6-CLIENT_DISASSOCIATED: Client 00-23-68-00-00-00 disassociated from wlan TerminauxMobiles radio ap6522-AP9:R1: client initiated (reason code:3) </LI><LI>DOT11-6-CLIENT_DISASSOCIATED: Client 00-23-68-00-00-00 disassociated from wlan TerminauxMobiles radio ap6522-AP3:R1: dot11i 4way handshake timeout (reason code:15) </LI><LI>DOT11-6-CLIENT_DISASSOCIATED: Client 00-23-68-00-00-00 disassociated from wlan TerminauxMobiles radio ap6522-AP8:R1: dot11i group handshake timeout (reason code:16) </LI></OL> I found in the FAQ a similar message for KERN-3-ERR but it's slighty different.<BR /> <BR /> I understand with the second message that there is a problem between the AP and the peripheral.<BR /> <BR /> In the manual for the Wing Wireless Reason Code, reason code says "station has left ess" but it doesn't help me.<BR /> <BR /> For the reason code 15 &amp; 16, the manual says that the problem come from the AP or the client. But the wireless cover is excellent and this messages concern all peripheral.<BR /> <BR /> Some peripherals are in 2,4GHz and some in 5GHz. The AP are at 10m high. I think the height may be the problem.<BR /> <BR /> Can you help me with this alerts ?<BR /> <BR /> Best regards.<BR /> <BR /> <BR /> Wed, 11 Oct 2017 12:15:00 GMT https://community.extremenetworks.com/t5/extremewireless-wing/ap6522-log-comprehensions/m-p/20529#M1300 tech_ori 2017-10-11T12:15:00Z https://community.extremenetworks.com/t5/extremewireless-wing/ap6522-log-comprehensions/m-p/20530#M1301 The dissass reason codes are per 802.11 standard - here a list of a KB article with the list....<BR /> <BR /> <A href="https://gtacknowledge.extremenetworks.com/articles/Q_A/What-s-mean-of-802-11-Deauth-Reason-Codes" target="_blank" rel="nofollow noreferrer noopener">https://gtacknowledge.extremenetworks.com/articles/Q_A/What-s-mean-of-802-11-Deauth-Reason-Codes</A><BR /> Wed, 11 Oct 2017 12:33:00 GMT https://community.extremenetworks.com/t5/extremewireless-wing/ap6522-log-comprehensions/m-p/20530#M1301 Ronald_Dvorak 2017-10-11T12:33:00Z https://community.extremenetworks.com/t5/extremewireless-wing/ap6522-log-comprehensions/m-p/20531#M1302 Thank you, I had a file but I don't look at the FAQ for the reason code. It 's similar to my file content. <BR /> Could you give some explanation of some terms like "group-key handshake" or "ess" ? I search for "group-key handshake". I see it's a communication protocol between 2 systems.<BR /> Thanks. Wed, 11 Oct 2017 12:33:00 GMT https://community.extremenetworks.com/t5/extremewireless-wing/ap6522-log-comprehensions/m-p/20531#M1302 tech_ori 2017-10-11T12:33:00Z https://community.extremenetworks.com/t5/extremewireless-wing/ap6522-log-comprehensions/m-p/20532#M1303 <A href="https://en.wikipedia.org/wiki/IEEE_802.11i-2004" target="_blank" rel="nofollow noreferrer noopener">https://en.wikipedia.org/wiki/IEEE_802.11i-2004</A>\<BR /> The group key is for broadcast/multicast messages between the AP-client.<BR /> <BR /> I'd recommend to read this book to get a better unterstanding..<BR /> <A href="https://www.amazon.fr/Cwna-Certified-Wireless-Administrator-Official/dp/1118893700/" target="_blank" rel="nofollow noreferrer noopener">https://www.amazon.fr/Cwna-Certified-Wireless-Administrator-Official/dp/1118893700/</A><BR /> Wed, 11 Oct 2017 12:33:00 GMT https://community.extremenetworks.com/t5/extremewireless-wing/ap6522-log-comprehensions/m-p/20532#M1303 Ronald_Dvorak 2017-10-11T12:33:00Z https://community.extremenetworks.com/t5/extremewireless-wing/ap6522-log-comprehensions/m-p/20533#M1304 Thanks for additional information.<BR /> <BR /> Do you know this alert : KERN-3-ERR: 0| bridge.c:1598 Warning: Filtering MAC address 00-00-00-00-00-00 on vlan 1 port up1 from FDB ?<BR /> I can't find a good explanation. I see a similar message in the FAQ but it's diffrent.<BR /> <BR /> Thanks.<BR /> Wed, 11 Oct 2017 12:33:00 GMT https://community.extremenetworks.com/t5/extremewireless-wing/ap6522-log-comprehensions/m-p/20533#M1304 tech_ori 2017-10-11T12:33:00Z https://community.extremenetworks.com/t5/extremewireless-wing/ap6522-log-comprehensions/m-p/20534#M1305 I get the same 00-00-00-00-00-00 MAC message with a RFS6000 and WiNG 5.8.4. But don't see any of this packages.<BR /> <BR /> For the reason code 15 and 16 you can do a packet capture to understand the problem. Maybe do a spectrum analyst, of the signal strength is perfect. Wed, 11 Oct 2017 12:33:00 GMT https://community.extremenetworks.com/t5/extremewireless-wing/ap6522-log-comprehensions/m-p/20534#M1305 Timo1 2017-10-11T12:33:00Z https://community.extremenetworks.com/t5/extremewireless-wing/ap6522-log-comprehensions/m-p/20535#M1306 We get an intervention to check the Wifi signal and the strengh is good on the entire warehouse. The AP cover very well the building.<BR /> <BR /> For the pocket capture, did you advice me a soft in particular ?<BR /> Thanks.<BR /> <BR /> Wed, 11 Oct 2017 12:33:00 GMT https://community.extremenetworks.com/t5/extremewireless-wing/ap6522-log-comprehensions/m-p/20535#M1306 tech_ori 2017-10-11T12:33:00Z https://community.extremenetworks.com/t5/extremewireless-wing/ap6522-log-comprehensions/m-p/20536#M1307 Do you also check the warehouse for SNR, Channel plan and CCI?<BR /> <BR /> Just checking for Signal say's mostly nothing Wed, 11 Oct 2017 12:33:00 GMT https://community.extremenetworks.com/t5/extremewireless-wing/ap6522-log-comprehensions/m-p/20536#M1307 Timo1 2017-10-11T12:33:00Z https://community.extremenetworks.com/t5/extremewireless-wing/ap6522-log-comprehensions/m-p/20537#M1308 Yes, the channel plan and CCI are good.<BR /> For the SNR too. There a pertubation an AP and the controller. For the rest of the AP, there is no noise.<BR /> The intervention was carry out by a Wireless specialist. <BR /> Wed, 11 Oct 2017 12:33:00 GMT https://community.extremenetworks.com/t5/extremewireless-wing/ap6522-log-comprehensions/m-p/20537#M1308 tech_ori 2017-10-11T12:33:00Z https://community.extremenetworks.com/t5/extremewireless-wing/ap6522-log-comprehensions/m-p/20538#M1309 For me it sound like a client problem or a wifi design problem.<BR /> <BR /> Capturing is running like this:<BR /> remote-debug live-pktcap rf-domain <YOUR-RF> write tftp://<TFTP-SERVER>/filename.pcap radio all count 1000 filter ether host <CLIENT-MAC><BR /> <BR /> This write 1000 packages to your TFTP Server for the client <CLIENT-MAC> include all wireless packages with the client mac.<BR /> <BR /> With this pcap you can check what happens.<BR /></CLIENT-MAC></CLIENT-MAC></TFTP-SERVER></YOUR-RF> Wed, 11 Oct 2017 12:33:00 GMT https://community.extremenetworks.com/t5/extremewireless-wing/ap6522-log-comprehensions/m-p/20538#M1309 Timo1 2017-10-11T12:33:00Z https://community.extremenetworks.com/t5/extremewireless-wing/ap6522-log-comprehensions/m-p/20539#M1310 I'll try that and reply if I need help. Thanks for your help. Wed, 11 Oct 2017 12:33:00 GMT https://community.extremenetworks.com/t5/extremewireless-wing/ap6522-log-comprehensions/m-p/20539#M1310 tech_ori 2017-10-11T12:33:00Z