Log assistance

  • 2
  • Question
  • Updated 4 weeks ago
  • Acknowledged
Over All Problem: We have an AP that is causing us issues.  Randomly, when you connect to it, one of 3 things will happen...

1. Connects, no problems
2. No IP address, but you're able to connect to the AP
3. The user is told that their password is incorrect and they need to input the correct password

Scenario:
- We are utilizing a Zone Director 3025 appliance (Ver: 10.0.1.0, UpTime: 24d)
- We have approx 75 AP's (r7982, r700, r510...All restarted within the past 24 days)
- We are utilizing PSK's
- We are utilizing dynamic vlans where users are placed on one of 5 vlans based upon conditions setup in RADIUS

Troubleshooting
- I have been unable to narrow down the AP(s) causing the issue
- The issue doesn't happen all the time, it seems to happen randomly to random devices at random intervals of the day.
- All switch ports have been verified 

Things we know
- There isn't a known DHCP issue.  If the user wanders to a different AP, then they will receive a valid IP address.
- The user's PSK is good.  If the user wanders to another AP, it connects to the AP & network with no issues


Requested Assistance:
I am looking at AP's that are around the affected area in an attempt to narrow down what may be causing this.  We had an issue with a device and I captured the log from one of the AP's the user connected to, but I can't find any information on interpreting the AP log data.  Any help interpreting the logs below would be greatly appreciated!!  Thanks!!

Kevin


**********************************************
Oct 17 14:03:04 EW-A-1171-O local2.err syslog: lwapp_proc_add_mobile_apend_dvc_type: send device type to zd, rc 26, station 5c:f7:e6:bb:41:5e 

Oct 17 14:03:04 EW-A-1171-O local2.err syslog: lwapp_update_role_based_access_pcy_me: error: attached role based policy_id :0, policy6_id :0 to station ,rc = 255 me_type=6 5c:f7:e6:bb:41:5e 

Oct 17 14:03:04 EW-A-1171-O user.info kernel: net80211_tac_cfg_sta_set_param(): set station 5c:f7:e6:bb:41:5e vlan_id = 600

Oct 17 14:03:28 EW-A-1171-O daemon.warn Eved: STA-DISASSOC-REASON [ieee80211_input(),2076,received IEEE80211_FC0_SUBTYPE_DISASSOC] 5c:f7:e6:bb:41:5e rx_rssi=15,ack_rssi=0,reason=8,freq=2412,chan=1,rx pkt,byte;tx pkt,byte=(524,65243,686,557786)

Oct 17 14:03:38 EW-A-1171-O user.info kernel: net80211_tac_cfg_sta_set_param(): set station 5c:f7:e6:bb:41:5e vlan_id = 600

 Oct 17 14:04:56 EW-A-1171-O local2.err syslog: lwapp_proc_add_mobile_apend_dvc_type: send device type to zd, rc 26, station 5c:f7:e6:bb:41:5e 

Oct 17 14:04:56 EW-A-1171-O local2.err syslog: lwapp_update_role_based_access_pcy_me: error: attached role based policy_id :0, policy6_id :0 to station ,rc = 255 me_type=6 5c:f7:e6:bb:41:5e 

Oct 17 14:04:56 EW-A-1171-O user.info kernel: net80211_tac_cfg_sta_set_param(): set station 5c:f7:e6:bb:41:5e vlan_id = 600

Oct 17 14:05:03 EW-A-1171-O daemon.warn Eved: MLME-REPLAYFAILURE.indication(wlan0 AES-CCM keyid=101 unicast RA:addr=e0:10:7f:3b:63:38 TA:addr=5c:f7:e6:bb:41:5e) (pkt-rsc:54 k->rsc[1]:56




Photo of k cr

k cr

  • 4 Posts
  • 0 Reply Likes

Posted 4 weeks ago

  • 2
Photo of Michael Brado

Michael Brado, Official Rep

  • 2570 Posts
  • 351 Reply Likes
The STA Dissassociation for reason=8, indicates that the client roamed away from the AP it was on.I don't know what MLME-REPLAYFAILURE relates too...
Photo of Electa Smith

Electa Smith

  • 8 Posts
  • 0 Reply Likes
My user name and password will not work even did a factory hard reset using super and sp-admin cany do anything
Photo of k cr

k cr

  • 4 Posts
  • 0 Reply Likes
Electa,

I think you may have meant to post this in the forum as opposed to this conversation.  

Kevin
Photo of Michael Brado

Michael Brado, Official Rep

  • 2570 Posts
  • 351 Reply Likes
If you have held the indented hard reset button for 8 seconds after letting it fully power up, it should go to factory default.
If you cannot login to an AP that has been factory defaulted with userid = super, password = sp-admin, it may be an OEM model of our AP, that cannot be accessed except with the OEM company uid/pw.
(Edited)
Photo of Electa Smith

Electa Smith

  • 8 Posts
  • 0 Reply Likes
What's a OEM company uid/pw
Photo of Michael Brado

Michael Brado, Official Rep

  • 2570 Posts
  • 351 Reply Likes
They are private licensed ISPs who have the right to configure the APs soley for use of their customers who sign up for local service. 

If these are purchased on eBay/Amazon they are not supported by Ruckus, and because of the OEM proprietary configurations, can only be administered with their provided username/password.
Only buy Ruckus products from Ruckus resellers.
Photo of k cr

k cr

  • 4 Posts
  • 0 Reply Likes
Another grouping of logs to consider....

 Oct 17 14:04:59 matrix: Adding peer AP.58:B6:33:0F:89:D0 (10.0.17.196) for PID 525 (func=avpd_roam_sync_req, line=994) ... 

Oct 17 14:04:59 kernel:  Keydata=0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0  

Oct 17 14:04:59 kernel: Keyix=0 Keylen=16 Keyflags=0 Cipher=0  

Oct 17 14:04:59 kernel: wmi_unified_vdev_install_key_send Setting Key for Macaddress:0x14cbb33da3d4 
 
Oct 17 14:04:55 kernel: ieee80211_vlan_clr_filter 146 wlan2 del vlan 255 

Oct 17 14:04:55 Eved: SMARTROAM-KICKOFF: addr=5c:f7:e6:bb:41:5e rx_tot_cnt=149 rx_rssilo_cnt=150 

Oct 17 14:04:55 kernel: Mac 0 - 5c:f7:e6:bb:41:5e      2147436400 

Oct 17 14:04:55 kernel: ProbeMac filter List: used 1
Photo of Michael Brado

Michael Brado, Official Rep

  • 2566 Posts
  • 351 Reply Likes
Hi Craig, please open a ticket with our Tech Support, and ask them to investigate your issues against bug ER-6341.We may need a deeper look at the logs, and a TSE can assist best over our Forums replies.