× NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Reply

Disconnect issues with WAX630 (802.1X)

yawm
Tutor

Disconnect issues with WAX630 (802.1X)

In our offices, we are using 8 of WAX630 devices (previous and latest firmware
9.6.2.8 and 9.6.3.2), all connected through Ethernet Cables to our Mikrotik Router (MikroTik Cloud Core Router CCR1009-7G-1C-1S+PC).

 

The connections using the WPA or WPA2 with clients (Android, iOS, MacOS, Windows) were working perfect. Even when moving through the building, we've never saw the clients disconnecting. 

 

Recently, we've integrated the RADIUS server and added the configuration through Insight Portal. The newly created SSID was correctly connected to the RADIUS, everything seem to be working fine. 

 

After a while, all users started reporting the disconnection issues with the "No IP Address" error OR connection still being shown as active, but internet or intranet isn't working at all until the user manually reconnects. This issue happen only, when the users start roaming through the offices. 

 

To get more information, we've activated SysLog server. These are the lines when the issue start occurring (I've replaced some specific strings for safety):

 

Jun 13 09:42:12 hostname.acme hostapd: SSID ROAM: sta 13:37:89:67:a8:87 included 1 PMKIDs in WPAIE
Jun 13 09:42:12 hostname.acme hostapd: wifi2vap3: STA 13:37:89:67:a8:87 IEEE 802.11: associated (aid 1)
Jun 13 09:42:12 hostname.acme hostapd: [11R-DVLAN] ieee802_1x_new_station: Got the match for the station, upating VLAN ID [0] and username []
Jun 13 09:42:12 hostname.acme hostapd: [11R-DVLAN] ieee802_1x_new_station: Invalid DVLAN params [0]
Jun 13 09:42:12 hostname.acme hostapd: wifi2vap3: STA 13:37:89:67:a8:87 WPA: FT authentication already completed - do not start 4-way handshake
Jun 13 09:42:12 hostname.acme hostapd: wifi2vap3: STA 13:37:89:67:a8:87 IEEE 802.1X: authenticated - EAP type: 0 (unknown)
Jun 13 09:42:12 hostname.acme hostapd: SSID ROAM: Sending connection update for sta 13:37:89:67:a8:87
Jun 13 09:42:12 hostname.acme hostapd: send_garp: Index for interface br-lan is 23
Jun 13 09:42:12 hostname.acme nddmp[3613]: alarm : seqNo-[6621], level-[INFO], info-[specific.user (13-37-89-67-A8-87) wireless client connected]
Jun 13 09:42:12 hostname.acme hostapd: SSID ROAM: Tx connect update for sta 13:37:89:67:a8:87
Jun 13 09:42:12 hostname.acme hostapd: SSID ROAM: Received station connect update for sta 13:37:89:67:a8:87
Jun 13 09:42:12 hostname.acme hostapd: SSID ROAM: Received station connect update for sta 13:37:89:67:a8:87
Jun 13 09:42:12 hostname.acme hostapd: SSID ROAM: Received station connect update for sta 13:37:89:67:a8:87
Jun 13 09:42:12 hostname.acme hostapd: SSID ROAM: Received station connect update for sta 13:37:89:67:a8:87
Jun 13 09:42:12 hostname.acme hostapd: SSID ROAM: Received station connect update for sta 13:37:89:67:a8:87
Jun 13 09:42:12 hostname.acme hostapd: SSID ROAM: Received station connect update for sta 13:37:89:67:a8:87
Jun 13 09:42:12 hostname.acme hostapd: SSID ROAM: Received station connect update for sta 13:37:89:67:a8:87
Jun 13 09:42:12 hostname.acme hostapd: SSID ROAM: Sent Gratious ARP for sta: 13:37:89:67:a8:87 | WPA Enterprise Authentication
Jun 13 09:42:12 hostname.acme hostapd: ####[ieee802_1x_finished] [11R-DVLAN] Transmitting SSID [our_ssid] of len [8], vlanid [0], username []
Jun 13 09:42:12 hostname.acme hostapd: [sta_pmk_transmit] : Transmitting VLAN Data [our_ssid|8||0]
Jun 13 09:42:12 hostname.acme hostapd: [sta_pmk_receive] : Receiving VLAN Data [our_ssid|8||0]
Jun 13 09:42:12 hostname.acme hostapd: SSID ROAM: Tx PMKSA for sta 13:37:89:67:a8:87
Jun 13 09:42:12 hostname.acme hostapd: SSID ROAM: Received PMKSA for sta 13:37:89:67:a8:87, SSID our_ssid
Jun 13 09:42:12 hostname.acme hostapd: [sta_pmk_receive] : Receiving VLAN Data [our_ssid|0||0]
Jun 13 09:42:12 hostname.acme hostapd: SSID ROAM: Received PMKSA for sta 13:37:89:67:a8:87, SSID our_ssid
Jun 13 09:42:12 hostname.acme hostapd: [sta_pmk_receive] : Receiving VLAN Data [our_ssid|0||0]
Jun 13 09:42:12 hostname.acme hostapd: SSID ROAM: Received PMKSA for sta 13:37:89:67:a8:87, SSID our_ssid
Jun 13 09:42:12 hostname.acme hostapd: SSID ROAM: Received PMKSA for sta 13:37:89:67:a8:87, SSID our_ssid
Jun 13 09:42:12 hostname.acme hostapd: [sta_pmk_receive] : Receiving VLAN Data [our_ssid|0||0]
Jun 13 09:42:12 hostname.acme hostapd: [sta_pmk_receive] : Receiving VLAN Data [our_ssid|0||0]
Jun 13 09:42:12 hostname.acme hostapd: SSID ROAM: Received PMKSA for sta 13:37:89:67:a8:87, SSID our_ssid
Jun 13 09:42:12 hostname.acme hostapd: [sta_pmk_receive] : Receiving VLAN Data [our_ssid|0||0]
Jun 13 09:42:12 hostname.acme hostapd: SSID ROAM: Received PMKSA for sta 13:37:89:67:a8:87, SSID our_ssid
Jun 13 09:42:12 hostname.acme hostapd: [sta_pmk_receive] : Receiving VLAN Data [our_ssid|0||0]
Jun 13 09:42:12 hostname.acme hostapd: SSID ROAM: Received PMKSA for sta 13:37:89:67:a8:87, SSID our_ssid
Jun 13 09:42:12 hostname.acme hostapd: [sta_pmk_receive] : Receiving VLAN Data [our_ssid|0||0]
Jun 13 09:42:13 hostname.acme nddmp[3613]: alarm : seqNo-[6622], level-[OTHER], info-[{"ip":"10.10.10.247","mac":"13-37-89-67-A8-87","hname":"specific.user","txR":"0 Kbps","rxR":"0 Kbps","ssid":"our_ssid","dOs":"Unknown Device OS","dType":"Unknown Device Type","mode":"11AX","status":"Authenticated","bssid":"80-CC-9C-A7-67-A4","chnl":"104","chWidth":"20/40/80 MHz","rssi":"21","state":"QOS/HT/VHT/HE","type":"wpa2","idle":"0","time":"00:00:00","txB":"0","rxB":"0","pmf":"none","vlanID":"1","Username":"Unknown Username","radio":"2"}]
Jun 13 09:42:13 hostname.acme hostapd: SSID ROAM: sta 13:37:89:67:a8:87 roamed elsewhere. Removing it.
Jun 13 09:42:13 hostname.acme kernel: [1042889.460816] wlan: [23339:I:ANY]  ieee80211_ioctl_kickmac[8812] 
Jun 13 09:42:13 hostname.acme kernel: [1042889.460816] 
Jun 13 09:42:13 hostname.acme kernel: [1042889.565146] wlan: [23362:I:ANY]  ieee80211_ioctl_kickmac[8812] 
Jun 13 09:42:13 hostname.acme kernel: [1042889.565146] 
Jun 13 09:42:13 hostname.acme hostapd: wifi2vap4: STA 74:e1:b6:92:35:b4 WPA: sending 1/2 msg of Group Key Handshake
Jun 13 09:42:14 hostname.acme kernel: [1042889.669958] wlan: [23367:I:ANY]  ieee80211_ioctl_kickmac[8812] 
Jun 13 09:42:14 hostname.acme kernel: [1042889.669958] 
Jun 13 09:42:14 hostname.acme hostapd: wifi2vap4: STA 74:e1:b6:92:35:b4 WPA: sending 1/2 msg of Group Key Handshake
Jun 13 09:42:14 hostname.acme hostapd: wifi2vap4: STA 74:e1:b6:92:35:b4 WPA: received EAPOL-Key frame (2/2 Group)
Jun 13 09:42:15 hostname.acme hostapd: wifi2vap3: STA 13:37:89:67:a8:87 IEEE 802.11: disassociated
Jun 13 09:42:15 hostname.acme hostapd: wifi2vap3: STA 13:37:89:67:a8:87 IEEE 802.11: disconnected
Jun 13 09:42:15 hostname.acme hostapd: wifi2vap3: STA 13:37:89:67:a8:87 RADIUS: stopped accounting session 519B4AD831512191
Jun 13 09:42:15 hostname.acme nddmp[3608]: alarm : seqNo-[4308], level-[INFO], info-[specific.user (13-37-89-67-A8-87) wireless client disconnected]
Jun 13 09:42:15 hostname.acme configd[3535]: Trigger Count 2G 0
Jun 13 09:42:15 hostname.acme configd[3535]: Trigger Count 5G 0
Jun 13 09:42:15 hostname.acme configd[3535]: Trigger Count 5G Ext 0
Jun 13 09:42:16 hostname.acme configd[3536]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:17 hostname.acme configd[3540]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:17 hostname.acme configd[3537]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:17 hostname.acme configd[3539]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:17 hostname.acme configd[3538]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:17 hostname.acme configd[3535]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:17 hostname.acme configd[3536]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:18 hostname.acme configd[3539]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:18 hostname.acme configd[3536]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:18 hostname.acme configd[3538]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:18 hostname.acme configd[3535]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:18 hostname.acme configd[3537]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:18 hostname.acme configd[3536]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:18 hostname.acme configd[3540]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:21 hostname.acme configd[3538]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:21 hostname.acme configd[3537]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:21 hostname.acme configd[3540]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:21 hostname.acme configd[3536]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:21 hostname.acme configd[3539]: Received  fdebug2: channel 0: window 991246 sent adjust 57330
rom Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:21 hostname.acme configd[3535]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:21 hostname.acme configd[3536]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:22 hostname.acme configd[3537]: Trigger Count 2G 0
Jun 13 09:42:22 hostname.acme configd[3537]: Trigger Count 5G 0
Jun 13 09:42:22 hostname.acme configd[3537]: Trigger Count 5G Ext 0
Jun 13 07:42:22 ip-10-10-10-180 dhclient[2863]: XMT: Solicit on eth0, interval 109290ms.
Jun 13 09:42:27 hostname.acme configd[3536]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:27 hostname.acme configd[3535]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:27 hostname.acme configd[3538]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:27 hostname.acme configd[3539]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:27 hostname.acme configd[3536]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:27 hostname.acme configd[3540]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user
Jun 13 09:42:27 hostname.acme configd[3537]: Received  from Other AP MAC 13-37-89-67-A8-87 HOSTNAME specific.user

 

 

We are unable to figure out what is causing the issue or how to fix them. Can your please help us out?

 

 

 

Message 1 of 5
RaghuHR
NETGEAR Expert

Re: Disconnect issues with WAX630 (802.1X)

Hi @yawm  Welcome to the NETGEAR community !

 

Could you please share the diagnostic logs from the Insight and send me via PM to download. You can use any cloud storage to upload the diagnostic logs.  Please take the logs at the time of the issue from all the APs so that we can match with timestamps and understand if there is any issues with roaming. Mention the MAC address of the affected wireless client to trace from the logs.

 

Thanks,

Raghu,

Message 2 of 5
yawm
Tutor

Re: Disconnect issues with WAX630 (802.1X)

Diagnostics sent. Thank you!

Message 3 of 5
yawm
Tutor

Re: Disconnect issues with WAX630 (802.1X)

Hi,

 

did you got time to check the diagnostics files sent? Have you been able to figure out where the issues come from?

 

Thank you and kind regards,

Message 4 of 5
RaghuHR
NETGEAR Expert

Re: Disconnect issues with WAX630 (802.1X)

Hi @yawm 

 

Yes I've received your logs. We are investigating it still. Will update you soon with our findings.

 

Thanks for your patience.

 

Raghu.

Message 5 of 5
Top Contributors
Discussion stats
  • 4 replies
  • 2202 views
  • 5 kudos
  • 2 in conversation
Announcements