2 Replies Latest reply on Jul 4, 2013 3:07 PM by Andrew Pengelly

    MC9190 not performing WPA2 handshake at startup (case 2865063)

    Andrew Pengelly

      We have a Motorola WiFi network incorporating RFS7000 switches, AP6532's and a couple of AP300's.  We have had problems with the new MC9190's on this network and it also appears to extend to the odler MC9090's.  Analysis of the WiFi traffic shows that when the MC9x90's are first powered on they appear to connect to the local AP but DO NOT estabish a proper WPA or WPA2 connection.  There is no WPA handshake performed at all.  Our temporary work around is to force the MC9x90 to roam to the next AP which forces a WPA or WPA2 handshake and all works well until next time we power down the MC9x90.

       

      The very old MC9060's do not have this probelm as they always renegotiate their WPA keys on start up.

       

      Motorola support have been advised but don't have an answer yet so be interested to anyone in this forum has any answers.  Is there a way to force a WPA handshake on power on or clear the network cache during power off.

      Software we are using on teh MC9x90's is WaveLink if that makes a difference.

        • MC9190 not performing WPA2 handshake at startup (case 2865063)
          Andrew Pengelly

          Here's some further explaination of the fault after gettting an Airmagent capture ...

           

          - It shows an MC9190 directly after the PWR button is pressed to ON.

          - The mobile associates to the same Access Point that it was previously connected to a few moments earlier.

          - The Log on the MC9190 shows the following type of error

            

          07:59:55  Unbinding adapter.

          08:00:05  Binding adapter.

          08:00:05  Disabling IPv6.

          08:00:06  Regulatory table downloaded to radio.

          08:00:06  Enabling 802.11d.

          08:00:09  Country code acquired: NZ

          08:00:09  Using profile: PDT_*****

          08:00:09  Setting SSID: ************

          08:00:11  Associated with b4:c7:99:**:**:27

          08:00:11  Authentication not required.

          08:00:11  Connected to network.

          08:00:26  Renewing IP address.

          08:00:41  Renewing IP address.

          08:00:56  Renewing IP address.

          08:01:11  Renewing IP address.

           

          - Although the MC9190 log shows "Renewing IP address" it isn't actually sending any wireless packets, however it is sending Probes in the background.

          - As soon as the MC9190 roams to another Access point, it negotiates a new key, obtains an ip address and then works perfectly.

          - Log from MC9190 below shows a roam, negotiate a key, obtain an ip address, then it works fine.

           

          08:09:24  Renewing IP address.

          08:09:39  Renewing IP address.

          08:09:54  Renewing IP address.

          08:10:22  Associated with b4:c7:99:**:**:20

          08:10:22  Negotiating keys.

          08:10:22  Connected to network.

          08:10:26  IP Address: 172.***.***.***

            • MC9190 not performing WPA2 handshake at startup (case 2865063)
              Andrew Pengelly

              We may have made progress.  It seems the Motorola WiFi products have a neat feature called Fast Roaming.  From the RFS Series Wireless LAN Switch Reference Guide -

               

              Fast Roaming

              Using 802.11i can speed up the roaming process from one AP to another. Instead of doing a complete 802.1x authentication each time a MU roams between APs, 802.11i allows a MU to re-use previous PMK

              authentication credentials and perform a four-way handshake. This speeds up the roaming process. In addition to reusing PMKs on previously visited APs, Opportunistic Key Caching allows multiple APs to share PMKs amongst themselves. This allows an MU to roam to an AP it has not previously visited and reuse a PMK from another AP to skip the 802.1x authentication.

               

              This seems to work really well until you power off your MC9190 (MU).  When you power the MC9190 back on the Fast Roaming feature appears to fall over with the result that the MC9190 does not reconnect properly to the AP.  Interestingly enough the older MC9060 model does not appear to be affected.

               

              However the answer appears to be to turn the Fast Roam feature off and all works again.  Live testing still to be done but early test result look positive.