AP250 PPSK handshake random failure

  • 1
  • Question
  • Updated 1 year ago
  • (Edited)
HM 6.8r7, AP 250, OS 7.1r1.

Experiencing strange behaviour at customer site with AP 250. Clients on the 2 configured WPA/WPA2 personal PSK SSIDs are experiencing random reauth problem. After monitoring, the recurrent issue has been captured in this form

1- most of the times 4 way handshake deos not get thru the 1 request
2- sometimes the 4 way handshake does not complete in the 4/4

Various clients, various OS, WIN, Android, IOs, is widespread

Config is very basic, SSID with PPSK, WPA-WPA2, CCMP ( AES)... really nothing special

Thanks in advance

Franco

01/09/2017 03:48:25 PM 44783EADE64F C413E2118255 ITBUF2AP18313 INFO (558)Rx deauth (reason 1 , rssi -69dB)
01/09/2017 03:48:25 PM 44783EADE64F C413E2118255 ITBUF2AP18313 BASIC (559)Sta(at if=wifi0.2) is de-authenticated because of notification of driver
01/09/2017 03:48:25 PM 44783EADE64F C413E2118255 ITBUF2AP18313 BASIC (560)Sta(at if=wifi0.2) is de-authenticated because of notification of driver
01/09/2017 03:48:27 PM 44783EADE64F C413E2118254 ITBUF2AP18313 DETAIL (561)Rx probe req (rssi -67dB)
01/09/2017 03:48:27 PM 44783EADE64F C413E2118254 ITBUF2AP18313 BASIC (562)Tx probe resp (pwr 12dBm)

.... various probes......

01/09/2017 03:48:30 PM 44783EADE64F C413E2118255 ITBUF2AP18313 DETAIL (595)Rx probe req (rssi -66dB)
01/09/2017 03:48:30 PM 44783EADE64F C413E2118255 ITBUF2AP18313 BASIC (596)Tx probe resp (pwr 12dBm)
01/09/2017 03:48:30 PM 44783EADE64F C413E2118254 ITBUF2AP18313 BASIC (597)Tx probe resp (pwr 12dBm)
01/09/2017 03:48:30 PM 44783EADE64F C413E2118255 ITBUF2AP18313 BASIC (598)Rx auth (frame 1, rssi -65dB)
01/09/2017 03:48:30 PM 44783EADE64F C413E2118255 ITBUF2AP18313 BASIC (599)Tx auth (frame 2, status 0, pwr 12dBm)
01/09/2017 03:48:30 PM 44783EADE64F C413E2118255 ITBUF2AP18313 BASIC (600)Rx assoc req (rssi -65dB)
01/09/2017 03:48:30 PM 44783EADE64F C413E2118255 ITBUF2AP18313 BASIC (601)Tx assoc resp (status 0, pwr 12dBm)
01/09/2017 03:48:30 PM 44783EADE64F C413E2118255 ITBUF2AP18313 INFO (602)WPA-PSK auth is starting (at if=wifi0.2)
01/09/2017 03:48:30 PM 44783EADE64F C413E2118255 ITBUF2AP18313 INFO (603)Sending 1/4 msg of 4-Way Handshake (at if=wifi0.2)
01/09/2017 03:48:34 PM 44783EADE64F C413E2118255 ITBUF2AP18313 INFO (604)Sending 1/4 msg of 4-Way Handshake (at if=wifi0.2)
01/09/2017 03:48:38 PM 44783EADE64F C413E2118255 ITBUF2AP18313 INFO (605)Sending 1/4 msg of 4-Way Handshake (at if=wifi0.2)
01/09/2017 03:48:40 PM 44783EADE64F C413E2118255 ITBUF2AP18313 INFO (606)Rx deauth (reason 1 , rssi -66dB)
01/09/2017 03:48:40 PM 44783EADE64F C413E2118255 ITBUF2AP18313 BASIC (607)Sta(at if=wifi0.2) is de-authenticated because of notification of driver
01/09/2017 03:48:40 PM 44783EADE64F C413E2118255 ITBUF2AP18313 BASIC (608)Sta(at if=wifi0.2) is de-authenticated because of notification of driver

******

another event...

01/09/2017 03:51:59 PM 44783EADE64F C413E2118255 ITBUF2AP18313 INFO (1249)WPA-PSK auth is starting (at if=wifi0.2)
01/09/2017 03:51:59 PM 44783EADE64F C413E2118255 ITBUF2AP18313 INFO (1250)Sending 1/4 msg of 4-Way Handshake (at if=wifi0.2)
01/09/2017 03:52:03 PM 44783EADE64F C413E2118255 ITBUF2AP18313 INFO (1251)Sending 1/4 msg of 4-Way Handshake (at if=wifi0.2)
01/09/2017 03:52:07 PM 44783EADE64F C413E2118255 ITBUF2AP18313 INFO (1252)Sending 1/4 msg of 4-Way Handshake (at if=wifi0.2)
01/09/2017 03:52:10 PM 44783EADE64F C413E208F794 ITBUF2AP18120 DETAIL (180)Rx probe req (rssi -88dB)
01/09/2017 03:52:10 PM 44783EADE64F C413E208F794 ITBUF2AP18120 BASIC (181)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:10 PM 44783EADE64F C413E208F794 ITBUF2AP18120 BASIC (182)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:10 PM 44783EADE64F C413E208F795 ITBUF2AP18120 DETAIL (183)Rx probe req (rssi -88dB)
01/09/2017 03:52:10 PM 44783EADE64F C413E208F795 ITBUF2AP18120 BASIC (184)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:10 PM 44783EADE64F C413E208F794 ITBUF2AP18120 BASIC (185)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:10 PM 44783EADE64F C413E208F796 ITBUF2AP18120 DETAIL (186)Rx probe req (rssi -88dB)
01/09/2017 03:52:10 PM 44783EADE64F C413E208F796 ITBUF2AP18120 BASIC (187)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:10 PM 44783EADE64F C413E208F794 ITBUF2AP18120 BASIC (188)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118254 ITBUF2AP18313 DETAIL (1253)Rx probe req (rssi -64dB)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118254 ITBUF2AP18313 BASIC (1254)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118254 ITBUF2AP18313 BASIC (1255)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118255 ITBUF2AP18313 DETAIL (1256)Rx probe req (rssi -64dB)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118255 ITBUF2AP18313 BASIC (1257)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118254 ITBUF2AP18313 BASIC (1258)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118256 ITBUF2AP18313 DETAIL (1259)Rx probe req (rssi -64dB)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118256 ITBUF2AP18313 BASIC (1260)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118254 ITBUF2AP18313 BASIC (1261)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118254 ITBUF2AP18313 DETAIL (1262)Rx probe req (rssi -64dB)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118254 ITBUF2AP18313 BASIC (1263)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118254 ITBUF2AP18313 BASIC (1264)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118255 ITBUF2AP18313 DETAIL (1265)Rx probe req (rssi -64dB)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118255 ITBUF2AP18313 BASIC (1266)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118254 ITBUF2AP18313 BASIC (1267)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118256 ITBUF2AP18313 DETAIL (1268)Rx probe req (rssi -64dB)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118256 ITBUF2AP18313 BASIC (1269)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118254 ITBUF2AP18313 BASIC (1270)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118254 ITBUF2AP18313 DETAIL (1271)Rx probe req (rssi -62dB)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118254 ITBUF2AP18313 BASIC (1272)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118254 ITBUF2AP18313 BASIC (1273)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118255 ITBUF2AP18313 DETAIL (1274)Rx probe req (rssi -62dB)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118255 ITBUF2AP18313 BASIC (1275)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118254 ITBUF2AP18313 BASIC (1276)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118256 ITBUF2AP18313 DETAIL (1277)Rx probe req (rssi -62dB)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118256 ITBUF2AP18313 BASIC (1278)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:10 PM 44783EADE64F C413E2118254 ITBUF2AP18313 BASIC (1279)Tx probe resp (pwr 12dBm)
01/09/2017 03:52:11 PM 44783EADE64F C413E2118255 ITBUF2AP18313 BASIC (1280)Sta(at if=wifi0.2) is de-authenticated because of 4way handshake failure
01/09/2017 03:52:11 PM 44783EADE64F C413E2118255 ITBUF2AP18313 INFO (1281)Tx disassoc (reason 4 , pwr 12dBm)
01/09/2017 03:52:11 PM 44783EADE64F C413E2118255 ITBUF2AP18313 BASIC (1282)Sta(at if=wifi0.2) is de-authenticated because of notification of driver

*****

a bit later a successful connection...
01/09/2017 03:57:54 PM 44783EADE64F C413E2118255 ITBUF2AP18313 INFO (1608)WPA-PSK auth is starting (at if=wifi0.2)
01/09/2017 03:57:54 PM 44783EADE64F C413E2118255 ITBUF2AP18313 INFO (1609)Sending 1/4 msg of 4-Way Handshake (at if=wifi0.2)
01/09/2017 03:57:58 PM 44783EADE64F C413E2118255 ITBUF2AP18313 INFO (1610)Sending 1/4 msg of 4-Way Handshake (at if=wifi0.2)
01/09/2017 03:57:58 PM 44783EADE64F C413E2118255 ITBUF2AP18313 INFO (1611)Received 2/4 msg of 4-Way Handshake (at if=wifi0.2)
01/09/2017 03:57:58 PM 44783EADE64F C413E2118255 ITBUF2AP18313 INFO (1612)Sending 3/4 msg of 4-Way Handshake (at if=wifi0.2)
01/09/2017 03:57:59 PM 44783EADE64F C413E2118255 ITBUF2AP18313 INFO (1613)Received 4/4 msg of 4-Way Handshake (at if=wifi0.2)
01/09/2017 03:57:59 PM 44783EADE64F C413E2118255 ITBUF2AP18313 INFO (1614)PTK is set (at if=wifi0.2)
01/09/2017 03:57:59 PM 44783EADE64F C413E2118255 ITBUF2AP18313 BASIC (1615)Authentication is successfully finished (at if=wifi0.2)
01/09/2017 03:57:59 PM 44783EADE64F C413E2118255 ITBUF2AP18313 INFO (1616)station sent out DHCP REQUEST message
01/09/2017 03:57:59 PM 44783EADE64F C413E2118255 ITBUF2AP18313 INFO (1617)DHCP server sent out DHCP ACKNOWLEDGE message to station
01/09/2017 03:57:59 PM 44783EADE64F C413E2118255 ITBUF2AP18313 BASIC (1618)DHCP session completed for station
01/09/2017 03:57:59 PM 44783EADE64F C413E2118255 ITBUF2AP18313 BASIC (1619)IP 192.168.80.248 assigned for station

****

Later another handshake failure...

01/09/2017 04:04:33 PM 44783EADE64F C413E2118256 ITBUF2AP18313 INFO (1697)WPA-PSK auth is starting (at if=wifi0.3)
01/09/2017 04:04:33 PM 44783EADE64F C413E2118256 ITBUF2AP18313 INFO (1698)Sending 1/4 msg of 4-Way Handshake (at if=wifi0.3)
01/09/2017 04:04:33 PM 44783EADE64F C413E2118256 ITBUF2AP18313 INFO (1699)Received 2/4 msg of 4-Way Handshake (at if=wifi0.3)
01/09/2017 04:04:33 PM 44783EADE64F C413E2118256 ITBUF2AP18313 INFO (1700)Sending 3/4 msg of 4-Way Handshake (at if=wifi0.3)
01/09/2017 04:04:33 PM 44783EADE64F C413E2118256 ITBUF2AP18313 INFO (1701)Rx deauth (reason 1 , rssi -62dB)
01/09/2017 04:04:33 PM 44783EADE64F C413E2118256 ITBUF2AP18313 BASIC (1702)Sta(at if=wifi0.3) is de-authenticated because of notification of driver
01/09/2017 04:04:33 PM 44783EADE64F C413E2118256 ITBUF2AP18313 BASIC (1703)Sta(at if=wifi0.3) is de-authenticated because of notification of driver
01/09/2017 04:04:33 PM 44783EADE64F C413E2118256 ITBUF2AP18313 BASIC (1704)Sta(at if=wifi0.3) is de-authenticated because of notification of driver
01/09/2017 04:04:34 PM 44783EADE64F C413E2118254 ITBUF2AP18313 DETAIL (1705)Rx probe req (rssi -62dB)
Photo of Franco Gobbetti

Franco Gobbetti

  • 45 Posts
  • 0 Reply Likes

Posted 1 year ago

  • 1

There are no replies.