COS AP-开启WPA后无法关联SSID!

关于新一些的AP,在部署的时候,可能会遇到一些问题,如果客户端比较老的话,或部署的新一些的AP的无线网络的时候,依然使用相对老的一些配置,可能会出现一些异常。

例如:

1、客户端关联不上

2、SSID无法被释放出来

这里举例说明相关问题,以及相应的bug说明。

x800 Series的AP是相对较新的的AP,可能对TKIP类似的算法的支持不是那么好,或计划就是不支持该类低级的算法,以AP1832为例,在配置了WPA+TKIP、WPA2+AES的情况(或者AES和TKIP都选择),客户端无法连接AP释放的SSID。

 

 

通过debug信息抓取,看到了客户端已经到达了DHCP阶段,但是在交互DHCP packet时,无法看到客户端回复的request包。

或者在L2 Security认证阶段就出现异常,此时建议关闭TKIP,甚至关闭WPA测试!

相关的bug:

TKIP support for 1800 series APs
CSCvb94436
Description
Symptom:
A WLAN that is configured for TKIP is not beaconed on a 1800 series AP.

Conditions:
1800 series Wave-2 AP.
WLAN configured with TKIP as one of its supported ciphers.

Workaround:
Remove TKIP from the WLAN, and use only AES (if the clients support it.)

Further Problem Description:
Track this bug for TKIP support on the 1800 series APs.
TKIP support on the 2800/3800 series APs will be implemented via CSCuz96946.
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
1850/1830 won't allow TKIP-only client to associate to WPA/WPA2 WLAN
CSCuu37118
Description
Symptom:A client that is configured for TKIP will attempt to associate to an access point, but the EAP/PSK exchange fails.

Conditions:WLAN is configured for WPA/TKIP and WPA2/AES. AP is an 1850/1830. Client is configured for TKIP not AES.

Workaround:Configure the WLAN for WPA2/AES only and configure the client for AES (if the client supports it.)

More Info:TKIP is not supported on the 1850/1830. The fix for this bug CSCuu37118 is to make sure that WLANs that are configured for both TKIP and AES are not beaconed by 1800 series APs.

Track CSCvb94436 for TKIP support on the 1800 series AP.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
AP2800/3800 doesn't beacon WLAN with WPA+WPA2/AES+TKIP security
CSCuz96946
Description
Symptom:A WLAN is not beaconed by the AP.

Conditions:AP is 2800 or 3800 model.

WLAN is configured with TKIP encryption enabled.

Workaround:If you disable TKIP (AES only), then the AP will beacon the WLAN.

More Info:Track this bug CSCuz96946 for support for TKIP on the 2800/3800 series APs.
Track CSCvb94436 for TKIP support on 1800 series.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

posted @ 2021-09-26 14:13  剪刀石头布Cheers  阅读(375)  评论(0编辑  收藏  举报