To elaborate, you might want to look for MIC key errors in WCS.
Here's one from my logs: The AP '00:0b:85:62:05:80' received a WPA MIC error on protocol '1' from Station '00:20:4a:89:25:d8'. Counter measures have been activated and traffic has been suspended for 60 seconds -----Original Message----- From: Jorge Bodden [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 24, 2007 12:47 PM To: [email protected] Subject: Re: [WIRELESS-LAN] Changing signal strength on Cisco LWAPP aps Peter, On WCS you can generate a report that lets you know the power level of a particular AP for an extended period of time. Does this report, indicate what you saw on the floor? Is it a specific type of client MAC or Windows based? Are the areas in question falling back to the same controller? What do the controller logs indicate for that given time for that given Mac address? If the users are getting disconnected there should be something in the controller logs that indicate an error. You have to turn the message logs on to a higher level than 'critical'. You could use the following command at the prompt, 'config msglog level critical'. This should log the MAC address in question. Please let me know if this helps out or if you need any more assistance. Jorge Bodden Peter Arbouin wrote: > Hello, > > We have a Cisco LWAPP installation running Wireless Control System > Version 4.1.83.0 and WiSM's running 4.1.171.0 > Recently we have been experiencing lseveral ocations where the signal > strength goes from excellent to 0, causing clients to lose asociations. > > > Has anyone else experienced this and have you found a solution? > > Thanks in advance. > > Peter. > > > *Peter Arbouin* > > Network Engineer > > Network Operations Centre, ITS > > Queensland Universtity of Technology > > Brisbane, QLD, Australia > > PH: (07) 313 81030 > > > > > > ------------------------------------------------------------------------ > *From:* Lee H Badman [mailto:[EMAIL PROTECTED] > *Sent:* Tuesday, 24 July 2007 8:33 AM > *To:* [email protected] > *Subject:* Re: [WIRELESS-LAN] ARP floods with Cisco APs - could this > be the bug? > > Check with TAC-- I'm told this morning that new WiSM code is pushed > out until an undeclared date in August. > > -Lee > > ------------------------------------------------------------------------ > *From:* David Pifer [mailto:[EMAIL PROTECTED] > *Sent:* Mon 7/23/2007 6:00 PM > *To:* [email protected] > *Subject:* Re: [WIRELESS-LAN] ARP floods with Cisco APs - could this > be the bug? > > It is unclear to me if the solution provided was a configuration > correction or update to the current revision of code or beta code or > something else. It is worded so vague it could be anything. Only thing > clear is Cisco helped them fix it. > > Besides with Networkers going on this week, any new code is probably > going to be announced this week or next. We are waiting on new code > for our LWAP environment to fix some issues with Controllers dropping > channels and going "dumb". > > > > > David L. Pifer - N9YNF > Indiana State University > Office of Information Technology > 210 N. 7th St. > Rankin Hall R044 > Terre Haute, IN 47809 > 812.237.2923 office > 812.237.4361 fax > > This email, and any attachments, thereto, is intended only for use by > the addressee(s) named herein and may contain privileged and/or > confidential information. If you are not the intended recipient of > this email, you are hereby notified that any dissemination, > distribution or copying of this email, and any attachments thereto, is > strictly prohibited. > ********** Participation and subscription information for this > EDUCAUSE Constituent Group discussion list can be found at > http://www.educause.edu/groups/. ********** Participation and > subscription information for this EDUCAUSE Constituent Group > discussion list can be found at http://www.educause.edu/groups/. -------------------- This electronic message is intended to be for the use only of the named recipient, and may contain information that is confidential or privileged. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of the contents of this message is strictly prohibited. If you have received this message in error or are not the named recipient, please notify us immediately by contacting the sender at the electronic mail address noted above, and delete and destroy all copies of this message. Thank you. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
