Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Problems with Verifone VX670 wifi payment terminal

This thread has been viewed 0 times

  • 1.  Problems with Verifone VX670 wifi payment terminal

    Posted May 05, 2012 01:52 PM

    We have deployed AP-105 as RAP stations into several restaurants. SSID is bridged since these devices need to communicate with local cashier system in each location. Security is WPA1-PSK since its the strongest encryption these devices support. Payment terminal also has static IP since it was requirement for cashier system. Aruba shows that these connect with B radio. 

     

    Now the problem is that these terminals seems to be dropping from wlan and not be able to automatically connect again. Signal etc are good when these are connected and I cannot find any real problem. Techincal support I'm getting from local Verifone support is very thin so I'm asking here if theres some special tricks I should do with these?



  • 2.  RE: Problems with Verifone VX670 wifi payment terminal

    Posted May 06, 2012 11:51 AM
    Hmm, that could be a number of things. The first suggestion I have is to put the device into debugging so you can get logs that may point you in a specific direction. Do a "show user-table"; on the controller and copy the Mac address of one of the disconnecting devices. Then type "configure terminal logging level debugging user-debug [mac address]". From there, you can do "show log user-debug all | include [mac address]" after the device does one of its intermittent disconnects. You can post it here for thoughts from the community, but if this is a critical issue, I'd recommend gathering those logs and calling 1-800-WIFI-LAN to open a case with TAC.


  • 3.  RE: Problems with Verifone VX670 wifi payment terminal

    Posted May 06, 2012 03:34 PM

    Is it same as setting debug for client in webgui? I did it earlier, didnt got any results when posting initial question but now there seems to be some:

     

    May 6 06:57:46 	authmgr	MAC=00:0b:4f:CC:CC:CC Station DN: BSSID=d8:c7:c8:23:8e:12 ESSID=ESSID-CENCORED VLAN=1 AP-name=APNAME-CENCORED
May 6 06:57:46 	stm	Station 00:0b:4f:CC:CC:CC: Clearing state
May 6 06:57:46 	stm	Deauth from sta: 00:0b:4f:CC:CC:CC: AP 172.31.20.1-d8:c7:c8:23:8e:12-APNAME-CENCORED Reason 255
May 6 06:57:46 	stm	Station 00:0b:4f:CC:CC:CC: No authentication found trying to de-authenticate to BSSID d8:c7:c8:23:8e:12 on AP APNAME-CENCORED
May 6 06:57:47 	stm	Assoc request @ 06:57:47.394923: 00:0b:4f:CC:CC:CC (SN 1535): AP 172.31.20.1-d8:c7:c8:23:8e:12-APNAME-CENCORED
May 6 06:57:47 	stm	Assoc success @ 06:57:47.399554: 00:0b:4f:CC:CC:CC: AP 172.31.20.1-d8:c7:c8:23:8e:12-APNAME-CENCORED
May 6 06:57:47 	stm	Sending STA 00:0b:4f:CC:CC:CC message to Auth and Mobility Unicast Encr Static WPA Multicast Encr Static WPA,WPA2 PSK TKIP VLAN 0x1, wmm:0, rsn_cap:0
May 6 06:57:47 	mobileip	Station 00:0b:4f:CC:CC:CC, 0.0.0.0: Received association on ESSID: ESSID-CENCORED Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name APNAME-CENCORED Group default BSSID d8:c7:c8:23:8e:12, phy b, VLAN 1
May 6 06:57:47 	authmgr	MAC=00:0b:4f:CC:CC:CC Station UP: BSSID=d8:c7:c8:23:8e:12 ESSID=ESSID-CENCORED VLAN=1 AP-name=APNAME-CENCORED
May 6 06:57:47 	mobileip	Station 00:0b:4f:CC:CC:CC, 0.0.0.0: Mobility trail, on switch 10.0.20.20, VLAN 1, AP APNAME-CENCORED, ESSID-CENCORED/d8:c7:c8:23:8e:12/b
May 6 07:19:03 	stm	Deauth from sta: 00:0b:4f:CC:CC:CC: AP 172.31.20.1-d8:c7:c8:23:8e:12-APNAME-CENCORED Reason 255
May 6 07:19:03 	stm	Sending STA 00:0b:4f:CC:CC:CC message to Auth and Mobility Unicast Encr Static WPA Multicast Encr Static WPA,WPA2 PSK TKIP VLAN 0x1, wmm:0, rsn_cap:0
May 6 07:19:03 	authmgr	MAC=00:0b:4f:CC:CC:CC Station DN: BSSID=d8:c7:c8:23:8e:12 ESSID=ESSID-CENCORED VLAN=1 AP-name=APNAME-CENCORED
May 6 07:19:03 	mobileip	Station 00:0b:4f:CC:CC:CC, 0.0.0.0: Received disassociation on ESSID: ESSID-CENCORED Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name APNAME-CENCORED Group default BSSID d8:c7:c8:23:8e:12, phy b, VLAN 1
May 6 07:19:03 	mobileip	Station 00:0b:4f:CC:CC:CC, 255.255.255.255: Mobility trail, on switch 10.0.20.20, VLAN 1, AP APNAME-CENCORED, ESSID-CENCORED/d8:c7:c8:23:8e:12/b
May 6 07:19:03 	stm	Station 00:0b:4f:CC:CC:CC: Clearing state
May 6 07:19:03 	stm	Deauth from sta: 00:0b:4f:CC:CC:CC: AP 172.31.20.1-d8:c7:c8:23:8e:12-APNAME-CENCORED Reason 255
May 6 07:19:03 	stm	Station 00:0b:4f:CC:CC:CC: No authentication found trying to de-authenticate to BSSID d8:c7:c8:23:8e:12 on AP APNAME-CENCORED
May 6 15:19:22 	stm	Assoc request @ 15:19:22.777338: 00:0b:4f:CC:CC:CC (SN 1582): AP 172.31.20.1-d8:c7:c8:23:8e:12-APNAME-CENCORED
May 6 15:19:22 	stm	Assoc success @ 15:19:22.784418: 00:0b:4f:CC:CC:CC: AP 172.31.20.1-d8:c7:c8:23:8e:12-APNAME-CENCORED
May 6 15:19:22 	stm	Sending STA 00:0b:4f:CC:CC:CC message to Auth and Mobility Unicast Encr Static WPA Multicast Encr Static WPA,WPA2 PSK TKIP VLAN 0x1, wmm:0, rsn_cap:0
May 6 15:19:22 	authmgr	MAC=00:0b:4f:CC:CC:CC Station UP: BSSID=d8:c7:c8:23:8e:12 ESSID=ESSID-CENCORED VLAN=1 AP-name=APNAME-CENCORED
May 6 15:19:22 	mobileip	Station 00:0b:4f:CC:CC:CC, 0.0.0.0: Received association on ESSID: ESSID-CENCORED Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name APNAME-CENCORED Group default BSSID d8:c7:c8:23:8e:12, phy b, VLAN 1
May 6 15:19:22 	mobileip	Station 00:0b:4f:CC:CC:CC, 0.0.0.0: Mobility trail, on switch 10.0.20.20, VLAN 1, AP APNAME-CENCORED, ESSID-CENCORED/d8:c7:c8:23:8e:12/b
May 6 15:39:03 	stm	Deauth from sta: 00:0b:4f:CC:CC:CC: AP 172.31.20.1-d8:c7:c8:23:8e:12-APNAME-CENCORED Reason 255
May 6 15:39:03 	stm	Sending STA 00:0b:4f:CC:CC:CC message to Auth and Mobility Unicast Encr Static WPA Multicast Encr Static WPA,WPA2 PSK TKIP VLAN 0x1, wmm:0, rsn_cap:0
May 6 15:39:03 	mobileip	Station 00:0b:4f:CC:CC:CC, 0.0.0.0: Received disassociation on ESSID: ESSID-CENCORED Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name APNAME-CENCORED Group default BSSID d8:c7:c8:23:8e:12, phy b, VLAN 1
May 6 15:39:03 	mobileip	Station 00:0b:4f:CC:CC:CC, 255.255.255.255: Mobility trail, on switch 10.0.20.20, VLAN 1, AP APNAME-CENCORED, ESSID-CENCORED/d8:c7:c8:23:8e:12/b
May 6 15:39:03 	authmgr	MAC=00:0b:4f:CC:CC:CC Station DN: BSSID=d8:c7:c8:23:8e:12 ESSID=ESSID-CENCORED VLAN=1 AP-name=APNAME-CENCORED
May 6 15:39:03 	stm	Station 00:0b:4f:CC:CC:CC: Clearing state
May 6 15:39:03 	stm	Deauth from sta: 00:0b:4f:CC:CC:CC: AP 172.31.20.1-d8:c7:c8:23:8e:12-APNAME-CENCORED Reason 255
May 6 15:39:03 	stm	Station 00:0b:4f:CC:CC:CC: No authentication found trying to de-authenticate to BSSID d8:c7:c8:23:8e:12 on AP APNAME-CENCORED
May 6 16:02:37 	stm	Assoc request @ 16:02:37.477460: 00:0b:4f:CC:CC:CC (SN 1626): AP 172.31.20.1-d8:c7:c8:23:8e:12-APNAME-CENCORED
May 6 16:02:37 	stm	Assoc success @ 16:02:37.482466: 00:0b:4f:CC:CC:CC: AP 172.31.20.1-d8:c7:c8:23:8e:12-APNAME-CENCORED
May 6 16:02:37 	stm	Sending STA 00:0b:4f:CC:CC:CC message to Auth and Mobility Unicast Encr Static WPA Multicast Encr Static WPA,WPA2 PSK TKIP VLAN 0x1, wmm:0, rsn_cap:0
May 6 16:02:37 	authmgr	MAC=00:0b:4f:CC:CC:CC Station UP: BSSID=d8:c7:c8:23:8e:12 ESSID=ESSID-CENCORED VLAN=1 AP-name=APNAME-CENCORED
May 6 16:02:37 	mobileip	Station 00:0b:4f:CC:CC:CC, 0.0.0.0: Received association on ESSID: ESSID-CENCORED Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name APNAME-CENCORED Group default BSSID d8:c7:c8:23:8e:12, phy b, VLAN 1
May 6 16:02:37 	mobileip	Station 00:0b:4f:CC:CC:CC, 0.0.0.0: Mobility trail, on switch 10.0.20.20, VLAN 1, AP APNAME-CENCORED, ESSID-CENCORED/d8:c7:c8:23:8e:12/b
May 6 16:08:35 	stm	Sending STA 00:0b:4f:CC:CC:CC message to Auth and Mobility Unicast Encr Static WPA Multicast Encr Static WPA,WPA2 PSK TKIP VLAN 0x1, wmm:0, rsn_cap:0
May 6 16:08:35 	authmgr	MAC=00:0b:4f:CC:CC:CC Station DN: BSSID=d8:c7:c8:23:8e:12 ESSID=ESSID-CENCORED VLAN=1 AP-name=APNAME-CENCORED
May 6 16:08:35 	mobileip	Station 00:0b:4f:CC:CC:CC, 0.0.0.0: Received disassociation on ESSID: ESSID-CENCORED Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name APNAME-CENCORED Group default BSSID d8:c7:c8:23:8e:12, phy b, VLAN 1
May 6 16:08:35 	mobileip	Station 00:0b:4f:CC:CC:CC, 255.255.255.255: Mobility trail, on switch 10.0.20.20, VLAN 1, AP APNAME-CENCORED, ESSID-CENCORED/d8:c7:c8:23:8e:12/b
May 6 16:08:35 	stm	Deauth to sta: 00:0b:4f:CC:CC:CC: Ageout AP 172.31.20.1-d8:c7:c8:23:8e:12-APNAME-CENCORED Unspecified Failure
May 6 16:08:35 	stm	Station 00:0b:4f:CC:CC:CC: Clearing state
May 6 16:08:35 	stm	Deauth from sta: 00:0b:4f:CC:CC:CC: AP 172.31.20.1-d8:c7:c8:23:8e:12-APNAME-CENCORED Reason 255
May 6 16:08:35 	stm	Station 00:0b:4f:CC:CC:CC: No authentication found trying to de-authenticate to BSSID d8:c7:c8:23:8e:12 on AP APNAME-CENCORED
May 6 16:08:38 	stm	Assoc request @ 16:08:38.312912: 00:0b:4f:CC:CC:CC (SN 1674): AP 172.31.20.1-d8:c7:c8:23:8e:12-APNAME-CENCORED
May 6 16:08:38 	stm	Assoc success @ 16:08:38.318080: 00:0b:4f:CC:CC:CC: AP 172.31.20.1-d8:c7:c8:23:8e:12-APNAME-CENCORED
May 6 16:08:38 	stm	Sending STA 00:0b:4f:CC:CC:CC message to Auth and Mobility Unicast Encr Static WPA Multicast Encr Static WPA,WPA2 PSK TKIP VLAN 0x1, wmm:0, rsn_cap:0
May 6 16:08:38 	mobileip	Station 00:0b:4f:CC:CC:CC, 0.0.0.0: Received association on ESSID: ESSID-CENCORED Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name APNAME-CENCORED Group default BSSID d8:c7:c8:23:8e:12, phy b, VLAN 1
May 6 16:08:38 	mobileip	Station 00:0b:4f:CC:CC:CC, 0.0.0.0: Mobility trail, on switch 10.0.20.20, VLAN 1, AP APNAME-CENCORED, ESSID-CENCORED/d8:c7:c8:23:8e:12/b
May 6 16:08:38 	authmgr	MAC=00:0b:4f:CC:CC:CC Station UP: BSSID=d8:c7:c8:23:8e:12 ESSID=ESSID-CENCORED VLAN=1 AP-name=APNAME-CENCORED
May 6 16:21:10 	stm	Sending STA 00:0b:4f:CC:CC:CC message to Auth and Mobility Unicast Encr Static WPA Multicast Encr Static WPA,WPA2 PSK TKIP VLAN 0x1, wmm:0, rsn_cap:0
May 6 16:21:10 	mobileip	Station 00:0b:4f:CC:CC:CC, 0.0.0.0: Received disassociation on ESSID: ESSID-CENCORED Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name APNAME-CENCORED Group default BSSID d8:c7:c8:23:8e:12, phy b, VLAN 1
May 6 16:21:10 	mobileip	Station 00:0b:4f:CC:CC:CC, 255.255.255.255: Mobility trail, on switch 10.0.20.20, VLAN 1, AP APNAME-CENCORED, ESSID-CENCORED/d8:c7:c8:23:8e:12/b
May 6 16:21:10 	authmgr	MAC=00:0b:4f:CC:CC:CC Station DN: BSSID=d8:c7:c8:23:8e:12 ESSID=ESSID-CENCORED VLAN=1 AP-name=APNAME-CENCORED
May 6 16:21:10 	stm	Deauth to sta: 00:0b:4f:CC:CC:CC: Ageout AP 172.31.20.1-d8:c7:c8:23:8e:12-APNAME-CENCORED Unspecified Failure
May 6 16:21:10 	stm	Station 00:0b:4f:CC:CC:CC: Clearing state
May 6 16:21:10 	stm	Deauth from sta: 00:0b:4f:CC:CC:CC: AP 172.31.20.1-d8:c7:c8:23:8e:12-APNAME-CENCORED Reason 255
May 6 16:21:10 	stm	Station 00:0b:4f:CC:CC:CC: No authentication found trying to de-authenticate to BSSID d8:c7:c8:23:8e:12 on AP APNAME-CENCORED
May 6 16:21:13 	stm	Assoc request @ 16:21:13.099213: 00:0b:4f:CC:CC:CC (SN 1901): AP 172.31.20.1-d8:c7:c8:23:8e:12-APNAME-CENCORED
May 6 16:21:13 	stm	Assoc success @ 16:21:13.104203: 00:0b:4f:CC:CC:CC: AP 172.31.20.1-d8:c7:c8:23:8e:12-APNAME-CENCORED
May 6 16:21:13 	stm	Sending STA 00:0b:4f:CC:CC:CC message to Auth and Mobility Unicast Encr Static WPA Multicast Encr Static WPA,WPA2 PSK TKIP VLAN 0x1, wmm:0, rsn_cap:0
May 6 16:21:13 	authmgr	MAC=00:0b:4f:CC:CC:CC Station UP: BSSID=d8:c7:c8:23:8e:12 ESSID=ESSID-CENCORED VLAN=1 AP-name=APNAME-CENCORED
May 6 16:21:13 	mobileip	Station 00:0b:4f:CC:CC:CC, 0.0.0.0: Received association on ESSID: ESSID-CENCORED Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name APNAME-CENCORED Group default BSSID d8:c7:c8:23:8e:12, phy b, VLAN 1
May 6 16:21:13 	mobileip	Station 00:0b:4f:CC:CC:CC, 0.0.0.0: Mobility trail, on switch 10.0.20.20, VLAN 1, AP APNAME-CENCORED, ESSID-CENCORED/d8:c7:c8:23:8e:12/b
May 6 16:25:42 	stm	Sending STA 00:0b:4f:CC:CC:CC message to Auth and Mobility Unicast Encr Static WPA Multicast Encr Static WPA,WPA2 PSK TKIP VLAN 0x1, wmm:0, rsn_cap:0
May 6 16:25:42 	mobileip	Station 00:0b:4f:CC:CC:CC, 0.0.0.0: Received disassociation on ESSID: ESSID-CENCORED Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name APNAME-CENCORED Group default BSSID d8:c7:c8:23:8e:12, phy b, VLAN 1
May 6 16:25:42 	mobileip	Station 00:0b:4f:CC:CC:CC, 255.255.255.255: Mobility trail, on switch 10.0.20.20, VLAN 1, AP APNAME-CENCORED, ESSID-CENCORED/d8:c7:c8:23:8e:12/b
May 6 16:25:42 	authmgr	MAC=00:0b:4f:CC:CC:CC Station DN: BSSID=d8:c7:c8:23:8e:12 ESSID=ESSID-CENCORED VLAN=1 AP-name=APNAME-CENCORED
May 6 16:25:42 	stm	Deauth to sta: 00:0b:4f:CC:CC:CC: Ageout AP 172.31.20.1-d8:c7:c8:23:8e:12-APNAME-CENCORED Unspecified Failure
May 6 16:25:42 	stm	Station 00:0b:4f:CC:CC:CC: Clearing state

     I also noticed that these devices seem to drop from associated clients but they may come back if I ping them from the LAN side. 

     

    EDIT:  00:0b:4f:CC:CC:CC is the cencored mac of the client. 

     

    EDIT Controller is 620 and firmware is 6.1.2.7



  • 4.  RE: Problems with Verifone VX670 wifi payment terminal

    Posted May 06, 2012 04:17 PM
    Is "APNAME-CENCORED" representing one AP or multiple APs? You can do "show auth-tracebuf Mac [mac_address]" to see if the are any issues with the WPA key exchanges. You can see there ar several "death from sta"tion messages, indicating that the client is initiating deauthentication from the AP. is the device going idle? What does "show aaa timers" indicate in your configuration? Is the client running the latest available firmware?


  • 5.  RE: Problems with Verifone VX670 wifi payment terminal

    Posted May 07, 2012 03:33 AM 
    #show aaa timers

User idle timeout = 300 seconds
Auth Server dead time = 10 minutes
Logon user lifetime = 5 minutes
User Interim stats frequency = 600 seconds

     

    Auth-tracebuf comes empty. In this case APNAME-CENCORED reprsents single AP. I have several AP's with same SSID but they all are in separate locations. And yes I think the device goes into sleep mode when its not used. I have no control over device firmware, its embedded device:

     

     

    VX670_2.png

     

    I'll contract Aruba Finland guys if they have ever faced these. Company who sells these terminals delivers some cheapest-possible-buffalo-wlan-ap:s (yuck)



  • 6.  RE: Problems with Verifone VX670 wifi payment terminal

    Posted May 07, 2012 09:24 AM

    If it's going to sleep for more than 5min, the controller (based on the user idle timeout) will remove the user from the controller, which I believe correlates with those "deauth to sta" messages.

     

    It may be a matter of device behavior at this point. I'm assuming that the scanner goes to sleep for 5+ minutes and is deleted from the controller. When an employee at the restaurant then goes to swipe a card, what's the order of events? One would hope the device is smart enough to FIRST associate and ensure it has an IP address, THEN attempt to transmit the card swipe data.

     

    I worked with some ticket scanners in the past where they wouldn't wait to ensure connectivity before trying to send data. Of course, the data submission failed and it would display failure on the device. The manufacturer had to address it in the code (i.e., first check for connectivity, then submit).

     

    Good luck!



  • 7.  RE: Problems with Verifone VX670 wifi payment terminal

    Posted May 09, 2012 03:12 AM

    What I see, user puts credit card in -> inserts pin -> device tries to connect bank for card validation and local system for table information. If connection fails only way to resolve is to boot device by removing battery. So it most probably does not verify connectivity. For a bubblegum fix I try to increase Aruba timeout to 15min.



  • 8.  RE: Problems with Verifone VX670 wifi payment terminal

    Posted May 21, 2012 04:54 PM

    Finally got some answers. The payment terminal indeed does not check status of connection before trying to push data to the network. Only way is to press F2 which makes it to check network connection. Reading between lines they most probably wont change this. 

     

    Can I adjust time-out value only for one virtual-AP?



  • 9.  RE: Problems with Verifone VX670 wifi payment terminal

    Posted May 21, 2012 05:05 PM
    :-/ hmm. As far as I know, the aaa timers are global per controller. Perhaps an Aruba PM can comment...?