reason='invalid_auth' on an Open network with CW9166i

boneyard-j
New here

reason='invalid_auth' on an Open network with CW9166i

We have an isolated guest environment with an open-network SSID. As of last week we have started to see issues on CW9166i APs where it will stop accepting clients on the guest open SSID. Under the AP Event Log > Failed Connections is the only place to spot the odd issue. It doesn't show a bad performance or bad onboarding score. Having it reported to IT is how we find out.

Here is the error that's repeated in the AP Event Logs and doesn't seem to appear in the network-wide logs.

reason='invalid_auth' ap_steer_attempts='0' connected='0'

 

Rebooting the AP appears to resolve the issue but each day there's another few CW9166i APs that start showing this behavior and in multiple networks in our Org.

We have not seen this from our MR56 models, only the CW so far. Most importantly absolutely no recent environments changes were made.

This seems like a time based bug of some sort. I will also be opening a support case.

 

Running MR 31.1.7 but I see a newer version is available.

External dhcp and vlan tagging enabled.

We have about 6 sites/networks with about (40) CW9166i per site.

Sites with MR56 do not contain CW so it's not mixed.

3 Replies 3
alemabrahao
Kind of a big deal
Kind of a big deal

One question, what is the average number of clients per access point?

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
boneyard-j
New here

Usually 25 or less.

alemabrahao
Kind of a big deal
Kind of a big deal

I would try the new version as it has fixes for some bugs.

 

Bug fixes

  • General stability, performance, and experience improvements
  • 6GHz/160MHz mesh not forming on MR57, CW9166I, CW9166D1, CW9164I APs
  • APs do not send beacon frames on the 5GHz radio (Wi-Fi 7 APs)
  • Increased CPU & memory utilization on MR57 APs
I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
Get notified when there are additional replies to this discussion.