Authentication issues on Guest SSID

[gs2527]

Hi,

There has been an increase in number of wireless connection issues for a Guest SSID configured. The "failure stage" is "Authentication" and has a bunch of following messages -

Client failed during the authentication step

type='WPA-PSK auth fail' associated='false' radio='1' vap='1'

The PSK is accurate but the connection drops regardless. Any suggestions/advice for troubleshooting?

[Christian_S]

Check the port on the switch that the AP is plugged into and confirm the guest VLAN is allowed on the port. Then also check the uplink port on the same switch/every switch the traffic passes through until it reaches the firewall to make sure the guest vlan is allowed outbound. 

[gs2527]

Guest Vlan is allowed on all AP ports and outbound as well. These messages get logged as the failure on authentication when looked from a wireless health POV. 

What I am also noticing is a lot of roaming even when the client is stationary. Example logs below -

Successful connection to SSID Guest for a minute on access point F01-AP02-Lobby, and then the client roamed to access point F01-AP05.

Roamed from access point F01-AP02-Lobby then had a successful connection to SSID  Guest for a few seconds on access point F01-AP05, and then the client roamed.

Successful connection to SSID Guest for a few seconds on access point F01-AP02-Lobby.

Roamed from access point F01-AP02-Lobby then had a successful connection to SSID  Guest for a minute on access point F02-AP01, and then the client roamed to access point F02-AP18.

Roamed from access point F02-AP01 then had a successful connection to SSID Guest for a few seconds on access point F02-AP18, and then the client roamed to access point F02-AP13.

[alemabrahao]

I suggest you open a support case.