Wireless Access

 View Only
last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

PTK Challenge

This thread has been viewed 5 times
  • 1.  PTK Challenge

    Posted 21 days ago

    Hello Experts, 

    I find issue "PTK Challenge Failed" issue in random clients which always complain we lost our connection.

    We have MM with running version 8.10.0.6 LSR with 2 controller (Model7502) and 158 APs with same image version.

    I would like to get rid of this issue, Could you please share with me your experience in this regards? 

    is disabling OKC and Prohibit IP spoofing can help ? 

    I used these commands but still did not find answer:

    show ap client trail-info

    show ap debug radio-stats ap-name xxxx radio 0 advanced

    show auth-tracebuf mac

    show ap debug client-table ap-name xxxx

    show ap debug client-deauth-reason-counters 

     
    (MC1) [MDC] *#show ap debug client-deauth-reason-counters
     
    Deauth Reason Counters
    ----------------------
    Name                                              Value
    ----                                              -----
    Denied; Ageout                                    8
    Unspecified Failure                               451895
    No STA                                            36
    Prior authentication is not valid                 909
    UAC Changed                                       74
    STA has left and is deauthenticated               10474
    Inactive Timer expired and STA was disassociated  1196
    Class 2 frames from non authenticated STA         42
    C-STM deauthed STA; AID mismatch                  18
    Class 3 frames from non associated STA            109
    STA has left and is disassociated                 58550
    STA has roamed to another AP                      912463
    Auth STA up failed                                69
    Station Up Message to Controller Timed Out        15
    Requested authentication algorithm not supported  23991
    Response to challenge failed                      15716
    APAE Disconnect                                   4090
    Response to EAP Challenge Failed                  12864
    Key Propagation Failed                            840
    Wlan driver wireless client out of range          30024
    Client Match                                      578
    Ptk Challenge Failed                              3276870
    Sapcp Ageout (internal ageout)                    9847
    Denied; AP Going Down                             406

    MC2

    (MC2) [MDC] *#show ap debug client-deauth-reason-counters
     
    Deauth Reason Counters
    ----------------------
    Name                                              Value
    ----                                              -----
    Denied; Ageout                                    16
    Unspecified Failure                               292038
    Prior authentication is not valid                 80
    No STA                                            36
    UAC Changed                                       77
    STA has left and is deauthenticated               13220
    Inactive Timer expired and STA was disassociated  1272
    Class 2 frames from non authenticated STA         24
    C-STM deauthed STA; AID mismatch                  28
    Class 3 frames from non associated STA            72
    STA has left and is disassociated                 71600
    STA has roamed to another AP                      895613
    Auth STA up failed                                205
    Station Up Message to Controller Timed Out        14
    Requested authentication algorithm not supported  24817
    Response to challenge failed                      13195
    APAE Disconnect                                   11174
    Response to EAP Challenge Failed                  35616
    Key Propagation Failed                            866
    Wlan driver wireless client out of range          37470
    Client Match                                      621
    Ptk Challenge Failed                              2960195
    Sapcp Ageout (internal ageout)                    9830
    Denied; AP Going Down                             477
    (MC2) [MDC] *#

    Any Hint? 

    Thank you

    Gh



  • 2.  RE: PTK Challenge

    EMPLOYEE
    Posted 21 days ago

    Would recommend opening a case with TAC.



    ------------------------------
    Carson Hulcher, ACEX#110
    ------------------------------