Wireless Access

• It happens almost everywhere (doesn't matter what AP or AP group he's connecting).
• It happened to both GUEST VAP and Dot1x VAP we have. GUEST IP pool is /16 . The other has a limited IP space but we know it's never full.
• He and his friend seem to be the only ones having this out of 10,000+ clients. We still have to contact his friend and make sure he has the same issue though.
• The Client device OS is Win 7.
• Reccuring words in log "Dropping EAPOL, Valid Client Not Using Encryption, Block ACK DoS Attack"

Logs attached.

Attachment(s)

Client IP conflict.txt   74 KB 1 version

You have your IDS settings too high.

I would execute the following to see if that is the case:

wms client <mac address> of client mode interfering

If he can connect temporarily to the guest network after executing that, that is the problem.

Hello,

I got this 

Controller1#wms client c8:xx:33:xx:xx:x6 mode interfering 

Database is disabled. Command not allowed

thanks.

Type "show ap blacklist-clients" and see if his client is listed there.  If so, remove it by typing "stm remove-blacklist-client <mac address of client>"

Thanks but I found none.

(cpp-098b-aruba-wc1) #show ap blacklist-clients

Blacklisted Clients
-------------------
STA  reason  block-time(sec)  remaining time(sec)
---  ------  ---------------  -------------------

(cpp-098b-aruba-wc1) #

The messages you posted before were IDS messages.  You should revert your IDS settings to the defaults. 

The messages you posted before were IDS messages.  You should revert your IDS settings to the defaults. 

Hello,

The IDS profile we're using is default. Should I untick Detect Block Ack Dos?

Also, is it smart to lower IDS setting for one guy? My concern here is that we have over 10k clients and yet he's the only one experiencing this (one more that he claims but unconfirmed). I am just wondering  if his device is doing something bad hence getting filtered.

Thanks.

Anything that has "Detect" does not cause any issues.  Anything that has "Protect" *could* cause issues.

What wireless adapter does the client have and what driver version?

Hello,

My WiFi card is:

Intel Centrino Advanced-N 6235

Driver: 15.0.1.1

Thank you.

He should try upgrading to the latest driver.

Hi Ktstov,

Please try these new driver https://downloadcenter.intel.com/download/24847

thanks.

---

@ktstov wrote:

Hello,

 

My WiFi card is:

 

Intel Centrino Advanced-N 6235

Driver: 15.0.1.1

 

Thank you.

---

Hello,

I attempted to install that driver, however, it will error out when attempting to uninstall previous Bluetooth drivers for the newer ones and will not finish. I have no options to choose to skip the bluetooth installation. I even took the step of uninstalling all the drivers for the WiFi and Bluetooth as well as uninstalling the Intel Wireless application, however, it still brought up the same error.

I went to a previous update and used this one: https://downloadcenter.intel.com/download/24652/Intel-PROSet-Wireless-Software-and-Drivers-for-Windows-7-

That one brought the update to 15.15.0.1

The new update for my driver did not solve the issue, I am still getting the IP address conflict.

If this is a Windows laptop, the mac address of the conflicting device should be in the event viewer message.