cancel
Showing results for 
Search instead for 
Did you mean: 

EAP failure in Analytics

tommy_kreutzfe1
New Contributor

I have a few of these EAP failures in Analytics, and I can't seem to find out what is causing it.

If I look at the "Connection Event Details" the client suddenly gets a 802.11 Deauthentication after frame 4 in the 4-way handshake.

Image_ images_messages_5fb6320daec5215cfaaf65da_347e1428cc63f1c985e8b4fecaef9c78_EAPfailure-a7c3741a-47bc-4dbf-894c-1d0a622ee1af-1392120233.JPG

The SSID is just setup with a simple WPA2 preshared key, so no radius authentication.

3 REPLIES 3

syamantakomer
Community Admin
Community Admin

Hi Tommy,

You will need a OTA (radio) packet capture or AP support information to find the disconnection reason. On Analytics it will not show you the reason for disconnection/Deauthentication beyond this point.


Syamantak Omer
Sr.Staff TSE | CWNA | CCNA | RCWA | RASZA | RICXI
RUCKUS Networks, CommScope!
Follow me on LinkedIn

Hi Syamantak

Thanks for your reply 🙂 

I have the support log from one of the AP, but can't really find anything that explains to me why the Deauthentication is sent to the client, could you maybe enlighten me to what to look for ??

Hi Tommy,

AP support logs has very limited memory and may not keep the logs for a longer time span. Check the time stamp of AP support log start and end, see if that is covering the time of your client failure, if yes, search for "reason=" this will list up any log entry for any deauth/disconnection with client MAC.

If same client is failing again and again, it is better to connect the client again and run packet captures on the AP (direct option is available only in GUI of v/SZ) or quickly pull the support logs, after client gets disconnected.


Syamantak Omer
Sr.Staff TSE | CWNA | CCNA | RCWA | RASZA | RICXI
RUCKUS Networks, CommScope!
Follow me on LinkedIn