WPA Authentication Timeout or Failure

WPA Authentication Timeout or Failure

49 Reply
Re:WPA Authentication Timeout or Failure
2024-01-03 22:04:06 - last edited 2024-01-03 22:05:11

For the record, here are my relevant settings where I every now and then get 33k WPA association errors reported and several of my IoT devices knocked out until I reboot both EAP 650's:

 

SETUP

 

2 EAP 650's on opposite sides of a 2300 sqf detached home on dif floors. Hooked into Firewalla Gold. No other Omada gear.

 

NETWORK SETTINGS

 

2 networks, one 2.4 only, one 2.4 + 5.0

 

WPA-Personal

WPA/WPA2-PSK/Auto

MLO Disabled

PMF Disabled (now)

80211r Disabled

Multicast All Disabled

 

SITE SETTINGS

 

Mesh Disabled

Fast Roaming Enabled

AI Roaming Enabled

Dual Band Report Enabled

Force Disassociation Disabled

Band Steering Prefer 5G

 

WLAN AI Optimization Enabled and run weekly

  1  
  1  
#32
Options
Re:WPA Authentication Timeout or Failure
2024-01-14 12:08:33 - last edited 2024-01-14 17:02:42

  @Silvaire 

 

Exacly the same issue. I found something interesting in my investigation.

90% incorrect devices connections are from iOS.  

 

Questions:

 

Is there an firmware update of apple or tplink ?

 

I tried everything I found on internet, stop 6GHz, switch to WPA/WPA2-PSK / Auto, disable PMF, change DTIM period to 3, create a separate SSID with 2,4 GHz but nothing work.

 

The support let me alone. 

 

The things is, in my business I dont have acces to internet without internet Wifi connection so its an huge problem for me (walls are too heavy to receive 4G).

 

If you have somes clues, I ll be thankfull.

 

 

  0  
  0  
#33
Options
Re:WPA Authentication Timeout or Failure
2024-01-14 21:48:39 - last edited 2024-01-16 02:54:38

I have the same issue on a single 670. Every few days the access point ssid is visible but nothing can connect to 2.4GHz.

 

Probably just going to return the device as it didn't seem like there is a good resolution. Sounds like the 660 didn't have this issue? 

  0  
  0  
#34
Options
Re:WPA Authentication Timeout or Failure
2024-01-14 22:35:27
I got eight 660 devices on my business. I dont think its devices issues but more with configuration of them (I guess). @tplink need you guys.
  0  
  0  
#35
Options
Re:WPA Authentication Timeout or Failure
2024-01-15 02:19:28 - last edited 2024-01-15 02:19:37

  @Max31 

 

What's the signal strength on ios devices?

Just striving to develop myself while helping others.
  0  
  0  
#36
Options
Re:WPA Authentication Timeout or Failure
2024-01-15 08:00:47

  @Virgo the signal is very good, I tryed to connect my self just under the EP.

 

Many "wrong password" and then I can connect.

  0  
  0  
#37
Options
Re:WPA Authentication Timeout or Failure-Solution
2024-01-15 09:53:44 - last edited 2024-01-15 09:57:58

Hi All,

 

Upon summary, the issue that everyone encountered basically occurs only in the 2.4G clients, but someone can be solved by disable the PMF, and some cannot be solved, and it is now considered that the probability of the problem is still related to the PMF setting.

 

The PMF feature was supported since Omada Controller v5.7, which requires to upgrade the EAP device firmware to take effect. The previous firmware you used is not adapted to controller 5.7, that is, the previous firmware doesn't support the PMF feature, thus the PMF configuration with "Mandatory" won't affect the connection of non-PMF-capable clients.

It seems that your IoT client is non-PMF-capable, so disable PMF for the IoT network may fix it.

 

 

Please disable the PMF settings on all SSIDs you set on the controller, we suspect the PMF settings will affect all SSIDs, so please try it for testing.

You can go to Settings > Wireless Networks > WLAN, choose the SSID and go to Advanced Settings, here you can change the PMF option. The 6GHz band mandates WPA Mode as WPA2-PSK/WPA3-SAE/AES, and WPA2-PSK/WPA3-SAE/AES enables PMF by default. So you can uncheck the 6GHz band and change the WPA Mode to WPA/WPA2-PSK/Auto. After doing that, you can disable PMF.

 

Thanks all for your cooperation and understanding.

Best Regards! >> Omada EAP Firmware Trial Available Here << >> Get the Latest Omada SDN Controller Releases Here << *Try filtering posts on each forum by Label of [Early Access]*
Recommended Solution
  0  
  0  
#38
Options
Re:WPA Authentication Timeout or Failure
2024-01-15 10:35:29

  @Hank21 

 

Thanks for your reply,

 

Here's my setup of my business and OMADA configuration :

1 x SSID

6 x EAP 660HD

1 x ER605  v2

1 x OC200

 

2,4GHZ/5GHZ activated

Channels: I tryed to let IA find the best/ I tryed to auto / I tryed manual canals and bands. Still the same

Strenght canal: Strong

 

 

 

I tryed your solution one week ago and I still got the same problem.

 

 

 

  0  
  0  
#39
Options
Re:WPA Authentication Timeout or Failure
2024-01-16 02:02:56 - last edited 2024-01-16 02:03:08

Hi @Max31

 

Based on your description, your issue seems like different from the issues with 2.4G clients as mentioned by others.

Did your all IOS devices have the drop-out issue and how many client devices in your network in total?

 

If the issue is not specific to the 2.4G clients only described in this thread, I'd encourage you click here to start a new thread to avoid misleading other community members who saw this thread. Starting with a new thread will help you get the answers or solutions quickly, which may also help others who may have the same issues to join the topic easily and find solutions. Thanks and see you in the forums soon!

Best Regards! >> Omada EAP Firmware Trial Available Here << >> Get the Latest Omada SDN Controller Releases Here << *Try filtering posts on each forum by Label of [Early Access]*
  0  
  0  
#40
Options
Re:WPA Authentication Timeout or Failure
2024-01-16 03:04:38 - last edited 2024-01-16 03:15:30

I've disabled the pmf as outlined above and I'll see how it goes over the next few days.

 

Is there a known issue with the pmf firmware implementation?

  0  
  0  
#41
Options