This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SG115w WLAN Problem - STA WPA failure

Hallo,

ich habe bei einer SG115W bei allen WLAN's welche in das AP Lan gemappt sind folgenden Fehler.

Firmware: 9.705-3

Ich weiß nicht wie lange der FEhler schon besteht, aber gestern vor Ort hat es mit mehreren Endgeräten nicht funktioniert.

Im Log ist folgender Fehler:

2021:04:21-12:55:41 sophos hostapd: id="4105" severity="info" sys="System" sub="WiFi" name="STA WPA failure" ssid="TEST" ssid_id="WLAN2" bssid="00:1a:8c:0a:55:02" sta="94:e9:79:bd:8b:cb" reason_code="2"

2021:04:21-12:55:41 sophos hostapd: wifi2: STA 94:e9:79:bd:8b:cb WPA: event 3 notification

2021:04:21-12:55:41 sophos hostapd: wifi2: STA 94:e9:79:bd:8b:cb IEEE 802.1X: unauthorizing port

2021:04:21-12:55:41 sophos hostapd: wifi2: STA 94:e9:79:bd:8b:cb MLME: MLME-DEAUTHENTICATE.indication(94:e9:79:bd:8b:cb, 2)

2021:04:21-12:55:41 sophos hostapd: wifi2: STA 94:e9:79:bd:8b:cb MLME: MLME-DELETEKEYS.request(94:e9:79:bd:8b:cb)

2021:04:21-12:55:41 sophos hostapd: wifi2: STA 94:e9:79:bd:8b:cb IEEE 802.11: authentication OK (open system)

2021:04:21-12:55:41 sophos hostapd: wifi2: STA 94:e9:79:bd:8b:cb WPA: event 0 notification

2021:04:21-12:55:41 sophos hostapd: wifi2: STA 94:e9:79:bd:8b:cb MLME: MLME-AUTHENTICATE.indication(94:e9:79:bd:8b:cb, OPEN_SYSTEM)

2021:04:21-12:55:41 sophos hostapd: wifi2: STA 94:e9:79:bd:8b:cb MLME: MLME-DELETEKEYS.request(94:e9:79:bd:8b:cb)

2021:04:21-12:55:41 sophos hostapd: wifi0: AP-STA-AUTH 94:e9:79:bd:8b:cb0

2021:04:21-12:55:41 sophos hostapd: wifi2: STA 94:e9:79:bd:8b:cb IEEE 802.11: authenticated

2021:04:21-12:55:41 sophos hostapd: wifi2: STA 94:e9:79:bd:8b:cb IEEE 802.11: association OK (aid 1)

2021:04:21-12:55:41 sophos hostapd: wifi0: AP-STA-ASSOC 94:e9:79:bd:8b:cb0

2021:04:21-12:55:41 sophos hostapd: wifi2: STA 94:e9:79:bd:8b:cb IEEE 802.11: associated (aid 1)

2021:04:21-12:55:41 sophos hostapd: wifi2: STA 94:e9:79:bd:8b:cb MLME: MLME-REASSOCIATE.indication(94:e9:79:bd:8b:cb)

2021:04:21-12:55:41 sophos hostapd: wifi2: STA 94:e9:79:bd:8b:cb MLME: MLME-DELETEKEYS.request(94:e9:79:bd:8b:cb)

2021:04:21-12:55:41 sophos hostapd: wifi2: STA 94:e9:79:bd:8b:cb WPA: event 1 notification

2021:04:21-12:55:41 sophos hostapd: wifi2: STA 94:e9:79:bd:8b:cb WPA: sending 1/4 msg of 4-Way Handshake

2021:04:21-12:55:42 sophos hostapd: wifi2: STA 94:e9:79:bd:8b:cb WPA: EAPOL-Key timeout

2021:04:21-12:55:42 sophos hostapd: wifi2: STA 94:e9:79:bd:8b:cb WPA: sending 1/4 msg of 4-Way Handshake

2021:04:21-12:55:43 sophos hostapd: handle_probe_req: send failed

2021:04:21-12:55:43 sophos hostapd: wifi2: STA 94:e9:79:bd:8b:cb WPA: EAPOL-Key timeout

2021:04:21-12:55:43 sophos hostapd: wifi2: STA 94:e9:79:bd:8b:cb WPA: sending 1/4 msg of 4-Way Handshake

2021:04:21-12:55:44 sophos hostapd: wifi2: STA 94:e9:79:bd:8b:cb WPA: EAPOL-Key timeout

2021:04:21-12:55:44 sophos hostapd: wifi2: STA 94:e9:79:bd:8b:cb WPA: sending 1/4 msg of 4-Way Handshake

2021:04:21-12:55:45 sophos hostapd: wifi2: STA 94:e9:79:bd:8b:cb WPA: EAPOL-Key timeout

2021:04:21-12:55:45 sophos hostapd: wifi2: STA 94:e9:79:bd:8b:cb WPA: PTKSTART: Retry limit 4 reached

2021:04:21-12:55:45 sophos hostapd: wifi0: AP-STA-WPA-DISCONNECT 94:e9:79:bd:8b:cb2

Würde mich über euere Hilfe freuen!

This thread was automatically locked due to age.

Parents

0 BAlfson over 3 years ago

Hallo Josef,

Herzlich willkommen hier in der Community !

(Sorry, my German-speaking brain isn't creating thoughts at the moment. )

What happens if you replace the Ethernet cable to the AP and connect it to a different port on your switch?

MfG - Bob (Bitte auf Deutsch weiterhin.)

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Josef Maier3 over 3 years ago in reply to BAlfson

Hallo Bob,

das ist ein wlan im Router. Da gibt es kein Kabel ;-)

viele Grüße
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 3 years ago in reply to Josef Maier3

Oh - the problem is with the built-in access point? Please show a picture of the Edit of the 'Wireless Access Point' with 'Advanced' open. Also, picture(s) of the Edit(s) of the related Interface(s).

MfG - Bob (Bitte auf Deutsch weiterhin.)

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Josef Maier3 over 3 years ago in reply to BAlfson

Anbei die Fotos ;-)

https://ibb.co/2W2KrJq https://ibb.co/vcVjbpY https://ibb.co/712BKhz https://ibb.co/KWpfP2r https://ibb.co/JRnLnD6https://ibb.co/2W2KrJq https://ibb.co/vcVjbpY https://ibb.co/712BKhz https://ibb.co/KWpfP2r https://ibb.co/JRnLnD6
Cancel
Vote Up 0 Vote Down

Cancel
0 Josef Maier3 over 3 years ago in reply to BAlfson

Anbei die Fotos. Ich kann es irgendwie nicht hinzufügen.

https://ibb.co/2W2KrJq
https://ibb.co/vcVjbpY
https://ibb.co/712BKhz
https://ibb.co/KWpfP2r
https://ibb.co/JRnLnD6
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 3 years ago in reply to BAlfson

You should be able to cut-and-paste or drag-and-drop, but there's always:

I'll open those links in a sandbox. We can't know if that external site is properly protected. The only malware I've gotten in over 10 years was from an external link to a picture in this forum several years ago.

MfG - Bob (Bitte auf Deutsch weiterhin.)

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Josef Maier3 over 3 years ago in reply to BAlfson

Vielen Dank ;) Anbei die Fotos
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 3 years ago in reply to Josef Maier3

I see that you have two WLAN-Netzwerken that are 'Bridge ins AP LAN' - what happens if you disable the other one - does TEST then function correctly?

MfG - Bob (Bitte auf Deutsch weiterhin.)
PS The sandbox I use is Sandboxie (it's free) which Sophos now owns because they bought that company to create their Sandstorm offering.

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Josef Maier3 over 3 years ago in reply to BAlfson

Hallo Bob,

leider nein. Es existiert normal nur das eine. Test habe ich diese Woche erst erstellt.

Viele Grüße
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 3 years ago in reply to Josef Maier3

Ich bin der Meinung, Josef, daß man nur ein WLAN-Netzwerk 'Bridge ins AP LAN' per LAN haben kann.

MfG - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Josef Maier3 over 3 years ago in reply to BAlfson

Hallo Bob,

ich habe die Firewall letzte Woche neu installiert wegen einem anderen Problem.

Leider funktioniert das WLAN aber noch nicht. Das Gast-Wlan funktioniert, aber das was in das AP gebridged wird wird nicht angezeigt am PC / Handy.

Die Konfig sieht jetzt so aus:
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Josef Maier3 over 3 years ago in reply to BAlfson

Hallo Bob,

ich habe die Firewall letzte Woche neu installiert wegen einem anderen Problem.

Leider funktioniert das WLAN aber noch nicht. Das Gast-Wlan funktioniert, aber das was in das AP gebridged wird wird nicht angezeigt am PC / Handy.

Die Konfig sieht jetzt so aus:
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 BAlfson over 3 years ago in reply to Josef Maier3

I see now, Josef, that the second WLAN is on a separate VLAN - I missed that before. Do you have a firewall rule like 'Clients -> Any -> Clients : Allow'? I don't think that will affect the appearance of the Clients wireless connection on the PC/Handy as everything looks correct to me. What does Sophos Support say about this?

MfG - Bob (Bitte auf Deutsch weiterhin.)

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Josef Maier3 over 3 years ago in reply to BAlfson

Hi Bob,

ja es gibt diese Firewall Regel. :-)

Sophos Support werde ich heute kontaktieren. Sehr merkwürdig!

Viele Grüße
Cancel
Vote Up 0 Vote Down

Cancel