Support Info Massage meaning

  • 2
  • Question
  • Updated 2 months ago
There are a lot of following messages and degraded the performance of AP.

Oct 16 05:52:21 RuckusAP daemon.warn Eved: MLME-REPLAYFAILURE.indication(wlan3 AES-CCM keyid=100 unicast RA:addr=50:a7:33:f7:c9:68 TA:addr=e8:99:c4:aa:0e:2a) (pkt-rsc:10879 k->rsc[1]:10885

Could you please let me know the meaning of the "REPLAYFAILURE" and the condition of generation?

Thank you.
Matsuura
Photo of Mitsui Electronics

Mitsui Electronics

  • 1 Post
  • 0 Reply Likes

Posted 3 years ago

  • 2
Photo of Primož Marinšek

Primož Marinšek, AlphaDog

  • 413 Posts
  • 48 Reply Likes
Kicking in the dark here, but this could be due to this particular station having reporting of events enabled and it most likely didn't send the report to the AP for some reason and the AP is reporting that.

Is the performance degradation due to this messages? What kind of performance issues?
Photo of Michael Brado

Michael Brado, Official Rep

  • 2116 Posts
  • 297 Reply Likes
Engineering says the msg is not important, and is removed in current firmware versions.
Photo of Kiyoshi Matsuura

Kiyoshi Matsuura

  • 14 Posts
  • 0 Reply Likes
Thank you for your answer. We are trying to isolate suspected problem. So we would like to know the meaning of the message in order to relation between the message and the symptom. I see that the msg is not important and no relation with the suspected problem. The symptom we are faced on is client throughput degradation. (less than 300kbps). I know there is a lot of factors so I try to isolate again and submit a support issue later. Thank you for your suggestions.
Beat Regards,
Matsuura
Photo of Primož Marinšek

Primož Marinšek, AlphaDog

  • 413 Posts
  • 48 Reply Likes
If you haven't made a validation survey yet I suggest you do that first. Also do a L1 analysis of the site and the areas where the problem is occurring.

You can also do a packet analysis and look for retries and the client and AP behaviour when they happen.
Photo of Kiyoshi Matsuura

Kiyoshi Matsuura

  • 14 Posts
  • 0 Reply Likes
Thank you for your suggestion.
Customer already did several examination such as packet capture on radio etc.
In this first investigation, they found a lot of messages that I asked then simply asking what is the meaning. In order to get a clue, we are analysing the log and some capture data. It looks like an environment dependant issue.
If we would not get a clue or not to isolate a problem, we will submit a support case with our analysis result.
Photo of Michael Brado

Michael Brado, Official Rep

  • 2116 Posts
  • 297 Reply Likes
Ruckus Development Engineering manager made a comment in ER-1702:

My understanding is this is mainly caused by STA's re-transmission. It is normal to see replay failure in this case. I believe these messages are suppressed to avoid confusion in later releases.

You can ignore this as non-issue.

and

Yes, you can ignore the following message:

"Aug 22 12:56:41 HSK 1220-042 daemon.warn Eved: MLME-REPLAYFAILURE.indication(wlan15 AES-CCM keyid=68 unicast RA:addr=c4:10:8a:ff:3a:7d TA:addr=c4:10:8a:bf:3b:1d) (pkt-rsc:21846880 k->rsc[6]:21846928 "

This message is caused due to retransmissions and is displayed in case of WPA/WPA2 security being used. It is completely safe to ignore this message.
Photo of Kiyoshi Matsuura

Kiyoshi Matsuura

  • 14 Posts
  • 0 Reply Likes
Thank you for your information. They are very helpful to see a supportInfo for us.
We are trying to got a clue from investigation of RF environment.

Best Regards,
Matsuura
Photo of Michael Brado

Michael Brado, Official Rep

  • 2108 Posts
  • 297 Reply Likes
Yes, that is correct, and you are most welcome.