https://community.ruckuswireless.com/t5/Unleashed/unleashed-802-11r-802-1x-4-way-handshake-fails-on-first-attempt/m-p/104733#M6842 <P><SPAN>I've setup 802.1x using TLS certificates, with 802.11r (fast transition) enabled on an SSID named BaxterX. I've used two separate Radius servers, one a local freeradius implementation, the other a cloud radius solution. After noticing clients not able to connect on first attempt on both radius servers I moved on to connection troubleshooting.</SPAN></P><P><SPAN>I've noticed that when devices connect to WiFi for the first time they fail to respond to the first frame of the 4-way handshake. If 802.11r is not enabled this failure does not occur.</SPAN></P><P><SPAN>Failure of the 4-way handshake on initial connection results in a poor user experience on Android phones as a full wireless scan needs to be completed again before the client will attempt to connect to WiFi again. It also appears that roaming to a different AP will cause the issue again leading to what appears to be random disconnects on the client device.</SPAN></P><P><SPAN>Sometimes the timeout is short, and sometimes it is several seconds and of course any local resources are no longer accessible during this time.</SPAN></P><P><SPAN>I've taken screenshots of the connection flow, see here: <A href="https://drive.google.com/file/d/11Q2fSB4q-aHz4otdF1ezIK86co4JFhCN/view?usp=sharing" target="_blank">https://drive.google.com/file/d/11Q2fSB4q-aHz4otdF1ezIK86co4JFhCN/view?usp=sharing</A>&nbsp;where '4-Way Handshake - Frame 1' doesn't get a response from the client, the error is 'Reason: (code 18)Timeout expired'.</SPAN></P><P><SPAN>I opened a support ticket to report this as a bug, but without a support contract I'm redirected to the forums.</SPAN></P><P>&nbsp;</P><P>&nbsp;</P> Thu, 24 Apr 2025 03:16:38 GMT steved 2025-04-24T03:16:38Z https://community.ruckuswireless.com/t5/Unleashed/unleashed-802-11r-802-1x-4-way-handshake-fails-on-first-attempt/m-p/104733#M6842 <P><SPAN>I've setup 802.1x using TLS certificates, with 802.11r (fast transition) enabled on an SSID named BaxterX. I've used two separate Radius servers, one a local freeradius implementation, the other a cloud radius solution. After noticing clients not able to connect on first attempt on both radius servers I moved on to connection troubleshooting.</SPAN></P><P><SPAN>I've noticed that when devices connect to WiFi for the first time they fail to respond to the first frame of the 4-way handshake. If 802.11r is not enabled this failure does not occur.</SPAN></P><P><SPAN>Failure of the 4-way handshake on initial connection results in a poor user experience on Android phones as a full wireless scan needs to be completed again before the client will attempt to connect to WiFi again. It also appears that roaming to a different AP will cause the issue again leading to what appears to be random disconnects on the client device.</SPAN></P><P><SPAN>Sometimes the timeout is short, and sometimes it is several seconds and of course any local resources are no longer accessible during this time.</SPAN></P><P><SPAN>I've taken screenshots of the connection flow, see here: <A href="https://drive.google.com/file/d/11Q2fSB4q-aHz4otdF1ezIK86co4JFhCN/view?usp=sharing" target="_blank">https://drive.google.com/file/d/11Q2fSB4q-aHz4otdF1ezIK86co4JFhCN/view?usp=sharing</A>&nbsp;where '4-Way Handshake - Frame 1' doesn't get a response from the client, the error is 'Reason: (code 18)Timeout expired'.</SPAN></P><P><SPAN>I opened a support ticket to report this as a bug, but without a support contract I'm redirected to the forums.</SPAN></P><P>&nbsp;</P><P>&nbsp;</P> Thu, 24 Apr 2025 03:16:38 GMT https://community.ruckuswireless.com/t5/Unleashed/unleashed-802-11r-802-1x-4-way-handshake-fails-on-first-attempt/m-p/104733#M6842 steved 2025-04-24T03:16:38Z https://community.ruckuswireless.com/t5/Unleashed/unleashed-802-11r-802-1x-4-way-handshake-fails-on-first-attempt/m-p/104734#M6843 <P>Firmware: 200.16.7.0.325<SPAN><BR />Hardware: 3 H550's.</SPAN></P> Thu, 24 Apr 2025 03:19:37 GMT https://community.ruckuswireless.com/t5/Unleashed/unleashed-802-11r-802-1x-4-way-handshake-fails-on-first-attempt/m-p/104734#M6843 steved 2025-04-24T03:19:37Z https://community.ruckuswireless.com/t5/Unleashed/unleashed-802-11r-802-1x-4-way-handshake-fails-on-first-attempt/m-p/105140#M6883 <P>What do you see in the RADIUS logs?</P> Tue, 06 May 2025 14:31:52 GMT https://community.ruckuswireless.com/t5/Unleashed/unleashed-802-11r-802-1x-4-way-handshake-fails-on-first-attempt/m-p/105140#M6883 Squozen 2025-05-06T14:31:52Z