Cisco Cisco Aironet 350 Wireless Bridge Manuel Technique

Page de 10
EC F7 43 B5 82 93 57 83 
Apr  7 16:30:01.633: dot11_dot1x_verify_gtk_handshake: verifying GTK msg 2 from 
0030.6527.f74a
Apr  7 16:30:01.633: dot11_dot1x_verify_eapol_header: Warning: Invalid key info 
(exp=0x391, act=0x301
Apr  7 16:30:01.633: dot11_dot1x_verify_eapol_header: Warning: Invalid key len 
(exp=0x20, act=0x0)
Apr  7 16:30:01.633: %DOT11−6−ASSOC: Interface Dot11Radio0, Station   0030.6527.f74a 
Associated KEY_MGMT[WPA]
labap1200ip102#
If no debug outputs appear, verify these items:
The terminal monitor term mon is enabled (if you use a Telnet session).
♦ 
The debugs are enabled.
♦ 
The client is appropriately configured for WPA.
♦ 
If the debug shows that PTK and/or GTK handshakes are built but not verified, check the WPA
supplicant software for the correct configuration and up−to−date version.
debug dot11 aaa authenticator state−machineThis debug shows the various states of negotiations
that a client goes through as it associates and authenticates. The state names indicate these states. This
debug was introduced in Cisco IOS Software Release 12.2(15)JA. The debug obsoletes the debug
dot11 aaa dot1x state−machine
 command in Cisco IOS Software Release 12.2(15)JA and later.
• 
debug dot11 aaa dot1x state−machineThis debug shows the various states of negotiations that a
client goes through as it associates and authenticates. The state names indicate these states. In Cisco
IOS Software releases that are earlier than Cisco IOS Software Release 12.2(15)JA, this debug also
shows the WPA key management negotiation.
• 
debug dot11 aaa authenticator processThis debug is most helpful to diagnose problems with
negotiated communications. The detailed information shows what each participant in the negotiation
sends and shows the response of the other participant. You can also use this debug in conjunction with
the debug radius authentication command. This debug was introduced in Cisco IOS Software
Release 12.2(15)JA. The debug obsoletes the debug dot11 aaa dot1x process command in Cisco IOS
Software Release 12.2(15)JA and later.
• 
debug dot11 aaa dot1x processThis debug is helpful to diagnose problems with negotiated
communications. The detailed information shows what each participant in the negotiation sends and
shows the response of the other participant. You can also use this debug in conjunction with the
debug radius authentication command. In Cisco IOS Software releases that are earlier than Cisco
IOS Software Release 12.2(15)JA, this debug shows the WPA key management negotiation.
• 
Related Information
Configuring Cipher Suites and WEP
• 
Configuring Authentication Types
• 
WPA2 − Wi−Fi Protected Access 2 
• 
Wi−Fi Protected Access 2 (WPA 2) Configuration
• 
Technical Support & Documentation − Cisco Systems
• 
Contacts & Feedback | Help | Site Map
© 2013 − 2014 Cisco Systems, Inc. All rights reserved. Terms & Conditions | Privacy Statement | Cookie Policy | Trademarks of
Cisco Systems, Inc.
Updated: Oct 19, 2009
Document ID: 44721