WLAN-Probleme nach Update auf 9.510-5 - "WPA IE from (Re)AssocReq did not match with msg 2/4" - STA WPA failure

 

Hallo zusammen,

 

nach dem Update auf 9.510-5 bei einem meiner Kunden haben wir starke Probleme mit der Stabilität des WLANs.

Aufbau: 11 AP55C - WPA2 Enterprise - (aktuell) 2,4Ghz

 

Ohne (bisher) erkennbares Muster werden die Clients mehrmals pro Stunde abgemeldet, bzw. versuchen sich an einem anderen AP anzumelden, was dann aber fehlschlägt. Teilweise wird die Verbindung nach einigen Sekunden / Minuten wieder automatisch neu aufgebaut, im extremsten Fall ist ein Neustart des betroffenen AP (insgesamt 11 im Einsatz) notwendig.

 

Zum Zeitpunkt der Verbindungsprobleme lassen sich folgende Einträge mehrfach im Log finden:

 

/var/log/wireless.log:2018:09:03-10:55:10 A4004712113XXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX WPA: WPA IE from (Re)AssocReq did not match with msg 2/4

/var/log/wireless.log:2018:09:03-10:55:10 A4004712113XXXX awelogger[605]: id="4105" severity="info" sys="System" sub="WiFi" name="STA WPA failure" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX" reason_code="2"

 

Der Fehler "STA WPA failure - reason_code="2"" sollte laut Changelog durch 9.510-5 behoben worden sein.

 

Wir haben bereits folgende Maßnahmen unternommen:

 

- Neustart der SOPHOS UTM SG

- mehrfacher Neustart aller APs

- Neustart eines APs, wenn die Verbindungsprobleme um diesen AP sich häufen

- Änderung der Frequenz von 5Ghz auf 2,4 Ghz

- Aktivierung und Deaktivierung "Dyn Chan"

 

Alles leider ohne Erfolg.

 

Ich wundere mich besonders über die Meldung: "WPA IE from (Re)AssocReq did not match with msg 2/4", kann aber nicht zu 100% zuordnen, ob AP oder Client die Fehlerursache ist.

 

Ist jemandem dieses Problem bekannt?

 

 

Vollständiger Log von heute morgen (nur ein Client):

 

/var/log/wireless.log:2018:09:03-08:43:19 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.11: authenticated
/var/log/wireless.log:2018:09:03-08:43:19 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.11: associated (aid 4)
/var/log/wireless.log:2018:09:03-08:43:19 A40047121XXXXXX awelogger[605]: id="4103" severity="info" sys="System" sub="WiFi" name="STA authentication" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX" status_code="0"
/var/log/wireless.log:2018:09:03-08:43:19 A40047121XXXXXX awelogger[605]: id="4104" severity="info" sys="System" sub="WiFi" name="STA association" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX" status_code="0"
/var/log/wireless.log:2018:09:03-08:43:19 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.1X: STA identity 'host/PC.domain.local'
/var/log/wireless.log:2018:09:03-08:43:19 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX WPA: pairwise key handshake completed (RSN)
/var/log/wireless.log:2018:09:03-08:43:19 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX RADIUS: starting accounting session 5B8CCDF8-0000000E
/var/log/wireless.log:2018:09:03-08:43:19 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.1X: authenticated - EAP type: 25 (unknown)
/var/log/wireless.log:2018:09:03-08:43:19 A40047121XXXXXX awelogger[605]: id="4101" severity="info" sys="System" sub="WiFi" name="STA connected" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX"
/var/log/wireless.log:2018:09:03-10:53:31 A40047121XXXXXX awelogger[605]: id="4102" severity="info" sys="System" sub="WiFi" name="STA disconnected" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX"
/var/log/wireless.log:2018:09:03-10:55:07 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.11: authenticated
/var/log/wireless.log:2018:09:03-10:55:07 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.11: associated (aid 3)
/var/log/wireless.log:2018:09:03-10:55:07 A40047121XXXXXX awelogger[605]: id="4103" severity="info" sys="System" sub="WiFi" name="STA authentication" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX" status_code="0"
/var/log/wireless.log:2018:09:03-10:55:07 A40047121XXXXXX awelogger[605]: id="4104" severity="info" sys="System" sub="WiFi" name="STA association" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX" status_code="0"
/var/log/wireless.log:2018:09:03-10:55:08 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.1X: STA identity 'host/PC.domain.local'
/var/log/wireless.log:2018:09:03-10:55:10 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX WPA: WPA IE from (Re)AssocReq did not match with msg 2/4
/var/log/wireless.log:2018:09:03-10:55:10 A40047121XXXXXX awelogger[605]: id="4105" severity="info" sys="System" sub="WiFi" name="STA WPA failure" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX" reason_code="2"
/var/log/wireless.log:2018:09:03-10:55:10 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.11: authenticated
/var/log/wireless.log:2018:09:03-10:55:10 A40047121XXXXXX awelogger[605]: id="4103" severity="info" sys="System" sub="WiFi" name="STA authentication" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX" status_code="0"
/var/log/wireless.log:2018:09:03-10:55:10 A40047121XXXXXX awelogger[605]: id="4104" severity="info" sys="System" sub="WiFi" name="STA association" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX" status_code="0"
/var/log/wireless.log:2018:09:03-10:55:10 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.11: associated (aid 3)
/var/log/wireless.log:2018:09:03-10:55:10 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.1X: STA identity 'host/PC.domain.local'
/var/log/wireless.log:2018:09:03-10:55:10 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX WPA: pairwise key handshake completed (RSN)
/var/log/wireless.log:2018:09:03-10:55:10 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX RADIUS: starting accounting session 5B8CCDF8-00000017
/var/log/wireless.log:2018:09:03-10:55:10 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.1X: authenticated - EAP type: 25 (unknown)
/var/log/wireless.log:2018:09:03-10:55:10 A40047121XXXXXX awelogger[605]: id="4101" severity="info" sys="System" sub="WiFi" name="STA connected" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX"
/var/log/wireless.log:2018:09:03-11:12:07 A40047121XXXXXX awelogger[605]: id="4102" severity="info" sys="System" sub="WiFi" name="STA disconnected" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX"
/var/log/wireless.log:2018:09:03-11:12:21 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.11: authenticated
/var/log/wireless.log:2018:09:03-11:12:21 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.11: associated (aid 3)
/var/log/wireless.log:2018:09:03-11:12:21 A40047121XXXXXX awelogger[605]: id="4103" severity="info" sys="System" sub="WiFi" name="STA authentication" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX" status_code="0"
/var/log/wireless.log:2018:09:03-11:12:21 A40047121XXXXXX awelogger[605]: id="4104" severity="info" sys="System" sub="WiFi" name="STA association" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX" status_code="0"
/var/log/wireless.log:2018:09:03-11:12:21 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.1X: STA identity 'host/PC.domain.local'
/var/log/wireless.log:2018:09:03-11:12:21 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX WPA: WPA IE from (Re)AssocReq did not match with msg 2/4
/var/log/wireless.log:2018:09:03-11:12:21 A40047121XXXXXX awelogger[605]: id="4105" severity="info" sys="System" sub="WiFi" name="STA WPA failure" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX" reason_code="2"
/var/log/wireless.log:2018:09:03-11:12:21 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.11: authenticated
/var/log/wireless.log:2018:09:03-11:12:21 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.11: associated (aid 3)
/var/log/wireless.log:2018:09:03-11:12:21 A40047121XXXXXX awelogger[605]: id="4103" severity="info" sys="System" sub="WiFi" name="STA authentication" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX" status_code="0"
/var/log/wireless.log:2018:09:03-11:12:21 A40047121XXXXXX awelogger[605]: id="4104" severity="info" sys="System" sub="WiFi" name="STA association" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX" status_code="0"
/var/log/wireless.log:2018:09:03-11:12:22 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.1X: STA identity 'host/PC.domain.local'
/var/log/wireless.log:2018:09:03-11:12:22 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX WPA: pairwise key handshake completed (RSN)
/var/log/wireless.log:2018:09:03-11:12:22 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX RADIUS: starting accounting session 5B8CCDF8-00000019
/var/log/wireless.log:2018:09:03-11:12:22 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.1X: authenticated - EAP type: 25 (unknown)
/var/log/wireless.log:2018:09:03-11:12:22 A40047121XXXXXX awelogger[605]: id="4101" severity="info" sys="System" sub="WiFi" name="STA connected" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX"
/var/log/wireless.log:2018:09:03-11:13:26 A40047121XXXXXX awelogger[605]: id="4102" severity="info" sys="System" sub="WiFi" name="STA disconnected" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX"
/var/log/wireless.log:2018:09:03-11:13:32 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.11: authenticated
/var/log/wireless.log:2018:09:03-11:13:32 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.11: associated (aid 3)
/var/log/wireless.log:2018:09:03-11:13:32 A40047121XXXXXX awelogger[605]: id="4103" severity="info" sys="System" sub="WiFi" name="STA authentication" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX" status_code="0"
/var/log/wireless.log:2018:09:03-11:13:32 A40047121XXXXXX awelogger[605]: id="4104" severity="info" sys="System" sub="WiFi" name="STA association" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX" status_code="0"
/var/log/wireless.log:2018:09:03-11:13:33 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.1X: STA identity 'host/PC.domain.local'
/var/log/wireless.log:2018:09:03-11:13:34 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX WPA: WPA IE from (Re)AssocReq did not match with msg 2/4
/var/log/wireless.log:2018:09:03-11:13:34 A40047121XXXXXX awelogger[605]: id="4105" severity="info" sys="System" sub="WiFi" name="STA WPA failure" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX" reason_code="2"
/var/log/wireless.log:2018:09:03-11:13:34 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.11: authenticated
/var/log/wireless.log:2018:09:03-11:13:34 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.11: associated (aid 3)
/var/log/wireless.log:2018:09:03-11:13:34 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.1X: STA identity 'host/PC.domain.local'
/var/log/wireless.log:2018:09:03-11:13:34 A40047121XXXXXX awelogger[605]: id="4103" severity="info" sys="System" sub="WiFi" name="STA authentication" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX" status_code="0"
/var/log/wireless.log:2018:09:03-11:13:34 A40047121XXXXXX awelogger[605]: id="4104" severity="info" sys="System" sub="WiFi" name="STA association" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX" status_code="0"
/var/log/wireless.log:2018:09:03-11:13:34 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX WPA: pairwise key handshake completed (RSN)
/var/log/wireless.log:2018:09:03-11:13:34 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX RADIUS: starting accounting session 5B8CCDF8-0000001A
/var/log/wireless.log:2018:09:03-11:13:34 A40047121XXXXXX hostapd: wlan1: STA ac:2b:6e:XX:XX:XX IEEE 802.1X: authenticated - EAP type: 25 (unknown)
/var/log/wireless.log:2018:09:03-11:13:34 A40047121XXXXXX awelogger[605]: id="4101" severity="info" sys="System" sub="WiFi" name="STA connected" ssid="SSID" ssid_id="WLAN1.0" bssid="00:1a:8c:XX:XX:XX" sta="ac:2b:6e:XX:XX:XX"