Access Point Radios trying to authenticate via PEAP against ISE

I have a working installation including a 5508 controller with ISE. The ISE is configured for EAP Chaining and clients are authenticating fine.
We are seeing some weird behavior from the Access Points. We see authentication failures from devices trying to authenticate via PEAP, the funny thing is that the username and endpoint ID are the MAC addresses of our APs. we see it once or twice a day from several of the APs.
Any ideas on what would cause this and what function of the AP is causing this?

Hi Rasika,
kindly advice. running on 7.6.130 and Cisco ISE 1.2.1.198, but my case is rejected the authentication, why radio base mac address is try to authenticating to ISE?
Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 7.6.130.0
Bootloader Version............................... 1.0.20
Field Recovery Image Version..................... 7.6.101.1
Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2
Build Type....................................... DATA + WPS
(Cisco Controller) >show radius summary
Vendor Id Backward Compatibility................. Disabled
Call Station Id Case............................. lower
Acct Call Station Id Type........................ Mac Address
Auth Call Station Id Type........................ Mac Address
Aggressive Failover.............................. Enabled
Keywrap.......................................... Disabled
Fallback Test:
    Test Mode.................................... Off
    Probe User Name.............................. Radius_KeepAlive
    Interval (in seconds)........................ 300
MAC Delimiter for Authentication Messages........ hyphen
MAC Delimiter for Accounting Messages............ hyphen
Authentication Servers
Idx Type      Server Address        Port    State     Tout MgmtTout RFC3576 IPSec - AuthMode/Phase1/Group/Lifetime/Auth/Encr
1    NM    x.x.x.x              1645    Enabled   2     2         Disabled Disabled - none/unknown/group-0/0 none/none
2    NM  x.x.x.x               1812    Enabled   2     2         Enabled   Disabled - none/unknown/group-0/0 none/none <-- ISE
3    NM    x.x.x.x             1645    Enabled   2     2         Disabled Disabled - none/unknown/group-0/0 none/none
4    NM    x.x.x.x               1812    Enabled   2     2         Enabled   Disabled - none/unknown/group-0/0 none/none <-- ISE
Accounting Servers
Idx Type      Server Address        Port    State     Tout MgmtTout RFC3576 IPSec - AuthMode/Phase1/Group/Lifetime/Auth/Encr
2      N    x.x.x.x               1813    Enabled   2     2         N/A       Disabled - none/unknown/group-0/0 none/none
3      N     x.x.x.x               1813    Enabled   2     2         N/A       Disabled - none/unknown/group-0/0 none/none

Similar Messages

Cisco 1142 Wireless access point intermittently will not authenticate

Hi all,
We have a Cisco 1142 standalone access point, and from time to time I will come into the office and it will not authenticate any users to either our guest or corporate networks. I then have to go in and reboot the access point. After that, it begins to work. Any advice? Here's my configuration below:
Current configuration : 6450 bytes
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname cisco-chiap01
logging monitor errors
enable secret 5 $1$fsD8$CU42/3/Up5AAlL4hQWvvg0
aaa new-model
aaa group server radius rad_eap
server 172.17.16.12 auth-port 1645 acct-port 1646
server 172.17.21.10 auth-port 1812 acct-port 1813
aaa group server radius rad_mac
aaa group server radius rad_acct
aaa group server radius rad_admin
aaa group server tacacs+ tac_admin
aaa group server radius rad_pmip
aaa group server radius dummy
server 172.17.21.10 auth-port 1812 acct-port 1813
aaa group server radius rad_eap2
server 172.17.16.12 auth-port 1645 acct-port 1646
server 172.17.21.10 auth-port 1812 acct-port 1813
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authentication login eap_methods2 group rad_eap2
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
aaa session-id common
login on-failure log
login on-success log
dot11 syslog
dot11 vlan-name Admin vlan 100
dot11 vlan-name DevNetwork vlan 20
dot11 vlan-name Guest vlan 150
dot11 vlan-name Network vlan 16
dot11 ssid DevNetwork
vlan 20
authentication open eap eap_methods2
authentication network-eap eap_methods2
authentication key-management wpa version 2
dot11 ssid Guest
vlan 150
authentication open
authentication key-management wpa version 2
guest-mode
mbssid guest-mode
wpa-psk ascii 7 142407060101380B013A3A2670435642
information-element ssidl advertisement
dot11 ssid Network
vlan 16
authentication open eap eap_methods2
authentication network-eap eap_methods2
authentication key-management wpa version 2
username monkeyman privilege 15 secret 5 $1$ZZ7C$rqimu2FNONdfeacMNGAD/.
bridge irb
interface Dot11Radio0
no ip address
ip helper-address 172.17.19.10
no ip route-cache
encryption mode ciphers aes-ccm
encryption vlan 16 mode ciphers aes-ccm
encryption vlan 150 mode ciphers aes-ccm
encryption vlan 20 mode ciphers aes-ccm
ssid DevNetwork
ssid Guest
ssid Network
antenna gain 0
parent timeout 120
speed 5.5 11.0 basic-6.0 9.0 12.0 36.0 48.0 54.0
packet retries 128 drop-packet
channel 2462
station-role root
rts threshold 512
rts retries 128
interface Dot11Radio0.11
encapsulation dot1Q 11
no ip route-cache
interface Dot11Radio0.16
encapsulation dot1Q 16 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface Dot11Radio0.20
encapsulation dot1Q 20
no ip route-cache
bridge-group 20
bridge-group 20 subscriber-loop-control
bridge-group 20 block-unknown-source
no bridge-group 20 source-learning
no bridge-group 20 unicast-flooding
bridge-group 20 spanning-disabled
interface Dot11Radio0.150
encapsulation dot1Q 150
no ip route-cache
bridge-group 150
bridge-group 150 subscriber-loop-control
bridge-group 150 block-unknown-source
no bridge-group 150 source-learning
no bridge-group 150 unicast-flooding
bridge-group 150 spanning-disabled
interface Dot11Radio1
no ip address
ip helper-address 172.17.19.10
no ip route-cache
encryption vlan 16 mode ciphers aes-ccm
encryption vlan 150 mode ciphers aes-ccm
encryption vlan 20 mode ciphers aes-ccm
ssid DevNetwork
ssid Guest
ssid Network
antenna gain 0
traffic-metrics aggregate-report
dfs band 3 block
mbssid
parent timeout 120
speed 6.0 12.0 basic-24.0 36.0 48.0 54.0
channel width 40-above
channel dfs
station-role root access-point
interface Dot11Radio1.11
encapsulation dot1Q 11
no ip route-cache
interface Dot11Radio1.16
encapsulation dot1Q 16 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface Dot11Radio1.20
encapsulation dot1Q 20
no ip route-cache
bridge-group 20
bridge-group 20 subscriber-loop-control
bridge-group 20 block-unknown-source
no bridge-group 20 source-learning
no bridge-group 20 unicast-flooding
bridge-group 20 spanning-disabled
interface Dot11Radio1.150
encapsulation dot1Q 150
no ip route-cache
bridge-group 150
bridge-group 150 subscriber-loop-control
bridge-group 150 block-unknown-source
no bridge-group 150 source-learning
no bridge-group 150 unicast-flooding
bridge-group 150 spanning-disabled
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
no keepalive
interface GigabitEthernet0.11
encapsulation dot1Q 11
no ip route-cache
interface GigabitEthernet0.16
encapsulation dot1Q 16 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
interface GigabitEthernet0.20
encapsulation dot1Q 20
no ip route-cache
bridge-group 20
no bridge-group 20 source-learning
bridge-group 20 spanning-disabled
interface GigabitEthernet0.100
encapsulation dot1Q 100
ip address 192.168.100.3 255.255.255.0
no ip route-cache
bridge-group 100
no bridge-group 100 source-learning
bridge-group 100 spanning-disabled
interface GigabitEthernet0.150
encapsulation dot1Q 150
no ip route-cache
bridge-group 150
no bridge-group 150 source-learning
bridge-group 150 spanning-disabled
interface BVI1
ip address 172.17.16.251 255.255.255.0
no ip route-cache
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface GigabitEthernet0
access-list 1 permit 172.17.16.1
access-list 1 remark Admin network access
access-list 1 permit 192.168.100.0 0.0.0.255
radius-server attribute 32 include-in-access-req format %h
radius-server host 172.17.21.10 auth-port 1812 acct-port 1813 key 7 047958071C3561410D4A44
radius-server host 172.17.16.12 auth-port 1645 acct-port 1646 key 7 08045E471A48574446
radius-server host 172.17.21.10 auth-port 1645 acct-port 1646 key 7 1320051B185D56797F
radius-server timeout 15
radius-server vsa send accounting
bridge 1 route ip
line con 0
line vty 0 4
access-class 1 in
end

When the issue occurs does that affect both 2.4GHz & 5GHz devices ? I would see which band operating devices affected.
I noticed you have set CH11 under Radio 0 statically. I would prefer to configure it as below so AP can change the channel depend on the environment.
int d0
channel least-congested
HTH
Rasika
**** Pls rate all useful responses ****

FlexConnect Access Point - Wired 802.1X or MAB Authentication

Hi all,
We are piloting wired 802.1X but have hit a snag - FlexConnect AP switchport configuration requires the port be configured as trunk, with the native VLAN for management and access VLAN(s) for client data.
I know 802.1X cannot be configured on trunk port, but how can we configure MAB on trunk ports such as these?
Otherwise, is there another way we can authenticate these FlexConnect APs on a switch using ISE?
Thanks in advance.
Regards,
Stephen.

Hi Stephen. You are correct, 802.1x should not be configured on a trunk port. Moreover, you would run into an issue with clients if you are running local switching mode. Here is the flow:
1. AP, authenticates via MAB and profiling
2. Client authenticates via PEAP/EAP-TLS, etc
3. Now the client's traffic is locally switched, thus, the client mac address is showing on the same port where the AP is connected. The NAD (Switch) sees this new mac address and it is expecting it to perform 802.1x or MAB based authentication. The supplicant, however, does not know that and as far it is concerned it was already authenticated.
So I have ran into this issue in my deployments and you have the following options (listed in preference order):
1. Eliminate FlexConnect :)
2. Utilize AutoSmartPorts where:
- If an AP is connected, then 802.1x configuration is removed, port-security is enabled and locked to a single MAC address and trunk configuration is enabled
- If the AP is removed, then port is configured as standard access port, port-security is removed and 802.1x is configured
More info on auto smart ports:
http://www.cisco.com/c/en/us/td/docs/switches/lan/auto_smartports/15-0_1_se/configuration/guide/asp_cg.html
3. You can configure the port in a "multi-host" mode where after the first device is authenticated all subsequent devices are allowed on the network.
Hope this helps!
Thank you for rating helpful posts!

How to get a new Access Point to be seen by the controller

Hello All,
I have a Cisco Series 4400 WLAN controller and I'm trying to connect a lightweight AP to the controller. I have already assigned the switch port to use my wi-fi VLAN, and have connected the AP to the switch. After a few minutes, the light on the AP goes from green to light blue (indicating it's serving clients). Looks encouraging so far.
Here is where I am stuck...
When I log into he wi-fi controller to look for the Ethernet mac address of the new AP, I do not see its Mac Address. I want to be able to rename the AP to reflect where it will be used, but need to select the AP via its Ethernet mac address before I can make any edits like changing its name etc.
I've gone through the "monitoring" menu, selected "All" and still do not see it in their via its MAC address. I also will select the "wireless menu" which lists all the AP's on my network, listing in order from on the longest running, to just powered on.
Is there something I'm missing like a "re-scan" that scan's all devices?
The AP is an AP 1131 AG
Thanks,
Jon

For console connetion you need console cable i attached image of it so you know which cable we are talking about. Just connet eithernet side to the connector i think on 1131 console port is on the right if you seeing it form back. Plug other side of cable to a laptop on serial connetor and use windows hyper terminal to access your access point. Once you connected via console you should be able to see whats going on on the console. Here is a quick link for setting up console connection with correct settings.
http://ciscogeek.org/setup-windows-hyper-terminal-to-access-routerfirewall-console/
Hope this helps you

Cisco Access Point Configuration to support 802.11b & 802.11g protocol

How do i Configure access point to support both 802.11b & 802.11g clients on a Cisco 1121G series access point(AIR-AP1121G-A-K9)
Regards
Hitesh

Hi Hitesh,
Check out this excerpt from the 1121g AP Installation guide section on enabling the 802.11b and 802.11g radios.
In Cisco IOS Release 12.3(4)JA and later, the access point radios are disabled by default, and there is no default SSID. You must create an SSID and enable the radios before the access point will allow wireless associations from other devices. These changes to the default configuration improve the security of newly installed access points. Refer to the "Configuring Basic Security Settings" section for instructions on configuring the SSID.
In Cisco IOS Release 12.3(2)JA or earlier, the access point radio is enabled by default, and the default SSID is tsunami.
To enable the radio interfaces, follow these instructions:
Step 1 Use your web-browser to access your access point.
Step 2 When the Summary Status page displays, click Network Interfaces > Radio0-802.11B or Radio0-802.11G and the radio status page displays.
Step 3 Click Settings and the radio settings page displays
Step 4 Click Enable in the Enable Radio field.
Step 5 Click Apply.
Here is a link to the actual document:
http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_installation_guide_chapter09186a00804d2b73.html
Hope this helps!
Rob
Please remember to rate helpful posts....

Bridge to bridge and bridge to access-point via wireless is it possible.

here;s my topology i am trying to configure. i have a router whose ethernet is connected to a bridge.this bridge 1 is connected to a bridge 2 via wireless. now i am trying to connect a access-point via wireless to this bridge2. is it possible for bridge 2 to support connectivity to the bridge1 and the access-point both of them via wireless.
can someone pls help me on this.
waiting for someone to reply.
regards
sebastan

You can set up each radio in the access point for different functionality. Considering the scenario, this can be done by setting up the SSID for the G radio and another SSID for the A radio. Then, set the role in the radio network parameter for the G radio to access point and for the A radio to the root bridge role.
ou can prevent unauthorized users from reconfiguring your access point/bridge and viewing configuration information. Typically, you want network administrators to have access to the access point/bridge while you restrict access to users who connect through a terminal or workstation from within the local network.
To prevent unauthorized access to your access point/bridge, you should configure one of these security features:
Username and password pairs, which are locally stored on the access point/bridge. These pairs authenticate each user before that user can access the access point/bridge. You can also assign a specific privilege level (read only or read/write) to each username and password pair.
http://www.cisco.com/en/US/products/ps5861/products_configuration_guide_chapter09186a00804ed6d4.html

Can I disable my Verizon Fios Router Wireless radio, connect it to a switch and use my airport express as my wireless access point connected to an in wall ethernet port?

Here's the deal. I have a Verizon Fios MI424WR router. My house has CAT5 throughout the house. The media panel is located in the garage. I want to take the Verizon Fios Router and cannot it in the media panel so I can connect a switch to it, that way, all my CAT5 can fire throughout the house. Verizon being Verizon decided to connect the router directly in the office.
Can I go this route (Router in media panel, switch cross connect to it) and use Airport Express, connected to one of the in-wall CAT5 ports in my house and then set it up as my wireless access point to provide wifi to my portable devices (iPad, iPhone, Macbook)? Is this possible? Will Airport Express comminicate with my verizon router via ethernet in-wall? Do I have to turn off the wireless radio in the Verizon router? Any help would be greatly appreciated!

That is right, by hard wired I was just making clear wired vs wireless attachment. AirPort family of devices will only act in a repeater mode with their own family members, not FiOS routers. they have to be wired to work.
There are some useful docs you can download from Apple, Support, Manuals, Peripherals, AirPort (just follow thos links from the Support button on the top bar):
Apple AirPort Networks
Designing AirPort Networks
AirPort Express Setup Guide
The last has a diagram of what you are trying to do, though without the house wiring, etc., but the basic principle.

Problem with creating an Infrastructure Network (via Access Point) for WLS 9163.

Hi,
I am trying to connect the WLS 9163 to an Infrastructure Network (via an Access Point). I have connected it via an Ethernet cable and am using MAX to configure it.
The setting are as below:
Obtain IP Address through: DHCP
Country: US
Radio On: Yes
SSID: wireless (selected from drop down implying the wireless network is detected)
Wireless Mode: Infrastructure
Authentication: Open
After doing these settings, I click on Save Settings. The device reboots itself and takes the IP address, Subnet mask and default Gateway automatically. The WLS link LED on the device is also turned on. The System State is 'Connected' and both the Wired and Wireless Connection Status is shown as 'UP'.
So far so good.
Now if I remove the wired connection and refresh the device, it does not get connected via wireless (which I believe it ideally should). The System State is shown as Disconnected.
I am using a Phoenix Contact WAP and have set the authentication as Open.
Please suggest some solution.

I had this exact same problem and it took me a while to figure out. As strange as this sounds, I figured out that for some reason if I had the WLS-9163 too close to the router and I pulled the wired connection, the wireless connection could drop. I read on a post in a different forum about someone removing their antenna and it working just fine so I tried that and it worked off and on but mostly off. So I figured out that the further distance away I was the better the connection stability was and I got far enough away from the router to where it was a steady solid wireless connection. This sounds really backwards from what it should be and was really bizarre but I tried different routers, used all different types of settings, had the latest firmware and had all of the equipment sitting on my desk and could not get it working once I removed the wired connection. This may not solve your problem but this worked for me so I thought I'd share that info. I was just so shocked to figure out being too close to the router seemed to be screwing my stuff up.

Finding the manufacture date on an access point via software

I'd like to determine the manufacture date of our access points because we plan on converting to LWAPP? Can someone tell me the what CLI command to use and which field has the answer. thanks.

Hi Thomas,
Not sure about finding the Manufacture date (maybe you are trying to find out about the presence of a MIC certificate) but we did go through this coversion from Autonomous to Lightweight on our infrastructure last summer.In this process we did convert about 70 1121's and 1231's to LWAPP and it worked very well. Here are some relevant docs;
Upgrading Autonomous Cisco Aironet Access Points to Lightweight Mode
From this excellent doc;
http://www.cisco.com/en/US/products/hw/wireless/ps430/prod_technical_reference09186a00804fc3dc.html
The following Cisco Aironet access points have the ability to operate as autonomous access points or lightweight access points:
Cisco Aironet 1240 AG Series Access Points
Cisco Aironet 1230 AG Series Access Points
Cisco Aironet 1200 Series Access Points that contain 802.11g (AIR-MP21G-x-K9) and/or second-generation 802.11a radios (AIR-RM21A-x-K9 or AIR-RM22A-x-K9)
Cisco Aironet 1130 AG Series Access Points
Cisco Aironet 1100 Series Access Points that contain 802.11g radios (AIR-AP1121G-x-K9)
Cisco Aironet 1300 Series Access Points/Bridges (AIR-BR1310G-x-K9 or AIR-BR1310G-x-K9-R).
From this doc;
http://www.cisco.com/en/US/products/ps6521/prod_bulletin0900aecd80321a2c.html
Guidelines and Tools for Migrating to the Cisco Unified Wireless Network
http://www.cisco.com/en/US/netsol/ns340/ns394/ns348/ns337/networking_solutions_white_paper0900aecd804f1a23.shtml
Self-Signed Certificate Manual Addition to the Controller for LWAPP-Converted APs
LWAPP secures the control communication between the AP and the WLC by means of a secure key distribution. The secure key distribution requires already provisioned X.509 digital certificates on both the LAP and the WLC. Factory-installed certificates are referenced with the term "MIC", which is an acronym for Manufacturing Installed Certificate. Aironet APs that shipped before July 18, 2005, do not have MICs. So these APs create an SSC when they are converted to operate in lightweight mode. Controllers are programmed to accept SSCs for the authentication of specific APs.
http://www.cisco.com/en/US/products/ps6521/products_configuration_example09186a00806a426c.shtml
LWAPP Upgrade Tool Troubleshoot Tips
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_tech_note09186a008072d9a1.shtml
Also, 5 points for Eric! For all your great work here lately.
Hope this helps!
Rob

Connection via access point to my pc via Bluetooth

Pls, kindly guide me on how to connect my laptop to the network access point on the new c2-00 nokia via bluetooth. I have been trying, but couldnt get through. My pc did not see any network device, with the bluetooth on. Is that not because it is dual sim? Pls, guide me. Anticipating positive response.

Hub_apprentice wrote:
Thank you John46. You have clarified the settings that I need to plug in to the access point. Just to confirm re the channel I need to set the channel on the access point to be different from the BT Hub.
Your assistance is much appreciated
I think you meant me.
Make sure that the home hub is set to a fixed wireless channel, not smart wireless. Try 1,6 or 11.
See http://bt.custhelp.com/app/answers/detail/a_id/14094/kw/change%20wireless%20channel/c/346,407,410
Set the additional access point to one of the other two frequencies. So if the hub is on 6, put the access point on 1 or 11.
This gives plenty of separation without any overlap.
If you read my document, you will see that I recommend setting the IP of the access point to 192.168.1.15, to avoid the DHCP range of the home hub.
Keith
There are some useful help pages here, for BT Broadband customers only, on my personal website.
BT Broadband customers - help with broadband, WiFi, networking, e-mail and phones.

No of client supported per radio on Cisco Access Points?

Hi Experts,
Is their any documentation that lists out the number of clients that can be handled efficiently per radio against a particular model of access points?
The question might appear quite ambiguos considering the fact that the wireless communication works on the principal of air time and shared medium. However still curious to know if latest model of access points make the enhancement any better.
Learnt quite some time back that 1262 WAP supports 15 clients per radio while 3700 would easily do with over 128 client per radio. Not sure on what basis we distinguish this?
Appreciate if someone could share their knowledge on same. Would be grateful if we a pointer to any doc is shown as well giving the comparision.
Thanks and Regards,
Adnan

Hello Scott,
Glad to see your response.
Does this rule of thumb(of 25 APs per radio) applies to all the access points models?
Little confused from document( http://www.cisco.com/c/en/us/products/wireless/buyers-guide.html#~indoor ) which lists different client count values against different models. Suppose we are having 600 series of WAP, the doc says it has client count value of 15. So I made my own conclusion that only 15 clients active association is possible at any given instant in time and if the 16th client tries association, it will fail and would be able to succeed only when the already associated client count goes a little under 15.
Can you please throw some light on the document claims?
Thanks,
Muhammed Adnan

Looking for an Access Point with 2 Ethernet ports and powered via PoE

Hi Gurus,
I am looking for an Access Point with 2 Ethernet ports and the access point can be powered via PoE. I have been assigned with a requirement where the rooms need to have access point as well as an Ethernet Cable provided from the Access Point as a backup for connectivity.
The room only has one data cable coming from the main IT room as well does not have a spare power socket to power the Access Point. Will be good if it can be centrally controlled or controller based.
Any recommendations?
Regards
J

For the backup plan, the cheapest solution may be to just run a couple new cat5e drops to the room(est cost $250). If not then purchase a small Cisco POE switch for the room(est cost $2k). For wireless I would purchase a POE enabled Cisco AP. But you will need to verify the POE switch/blade you will be connecting the AP to can power the AP you buy. I got burned by that issue when we purchased some Cisco 1251 AP's with dual radios and they needed more power than our 4500 POE blades could handle. We were told we would need to purchase new 48 port 10/100/1000 blades or power injectors. Our Cisco sales vendor took the heat for that mistake.
Posted by WebUser Steven Kinney from Cisco Support Community App

An Error Occurred while trying to join "my wireless access point"

Hi,
I've been using wireless access for a year and never had a problem connecting.
But starting yesterday I get a +*An Error Occurred while trying to join "my wireless access point", Please try again.+* Message.
I have 2 Mac's and have no problem connecting with the other one. It’s just the IMac.
I tried everything including resetting router, changing password, adding a $ to the password, accessing without password, deleting the whole air port and create a new one, but still getting the same message.
I might need to add, while I was working with the IMac I didn’t use wireless for a few hours, but when I got back to my browser I noticed that I was connected to a different wireless service. (FONFREEINTERNET if it matters) I have no idea why, since I didn’t change it.
Anyways, I tried to switch back to my access point, but it wouldn’t let me. It’ll just give me the +*An Error Occurred while trying to join "my wireless access point", Please try again.+* Message.
Funny is when I use the FONFREEINTERNET access point the internet seems to work fine.
I could look up Google without a problem, but when I tried to connect to Facebook for example it won’t let me. Instead a FONFREEINTERNET page will pop up with some options on how to pay! (by minute/or day/or week…)
I get the strange feeling that they planted some kind of bug/virus!!!
I don’t know what else to do.
Anyone knows that problem? What can I do?
Any help is greatly appreciated!
I researched on FONFREEINTERNET, there’s a spot close to my house/guess that’s the one I used…
http://maps.fon.com/ ZIP CODE 904-0113 and you’ll see a coffee pod, which is about 2 minutes walk from my house.

Hello Tesserax,
I get the same error message again...
I tried the 3 suggested steps again, but unfortunately it did not work.
After a Restart, Sleep or just the awaking from Screensaver mode I’m disconnected from my wireless Network anymore.
Even if the Computer was asleep for just a second!
I am able to fix the problem temporarily with Network Preferences → Assist me → Diagnostics
Choose Airport → Choose network → Enter Password (Even if I check safe password it’ll ask me every time) → and than usually all lights on the left menu switch from red to green and I get the popup message “A Network Change has been detected. Your Internet seems to work fine.” (similar - I’m at work and don’t remember exactly)
And it works fine…until the screensaver comes on or it sleeps again
I have the Problem with my IMac and Mini but the IMac at least remembers my password…
Any Ideas
I’m connected through a Buffalo WZR2-G300N wireless router

Home sharing works on primary wifi but not via Access Point

I have two wifi routers set up at either ends of the house. The primary router (Netgear DGN2000) is connected to an Access Point (Edimax EW-7416APN) via a D-link Powerline ethernet connection. Both are configured with identical SSID names/passwords meaning I get seamless switching between the units when walking from one end of the house to the other. Internet connectivity works fine when connected to either unit on laptop, phone and ipad.
The only issue I am having is with itunes Home Sharing. My main PC is connected to the primary router via a further D-link Powerline ethernet connection. When I am within the wifi signal of the primary router, the Home Sharing library from the Main PC shows on my ipad2 and I can access all music no problem. However, if I walk to the other end of the house whilst playing a track then as soon as the wifi connection switches to the AP then the track will stop. When I search for libraries then the Home Sharing library doesn't show.
The Access Point is set to be in AP mode. The latest version of itunes is installed. The PC is running Windows XP
Any pointers anyone can give with this issue would be very welcomed as our main entertaining room is in the range of the AP wifi.

Do the old "forget this network" while on your home wifi, then reconnect to it. If that doesn't fix it, it's prob a router/internet issue at your home. Would need some more info to help futher troubleshoot.

Apple TV as Airport access point if connected via LAN

Hi!
I thought about the possibility to use the new Apple TV as Airport/WLAN access point in the case that it is connected via LAN. You don't need an Airport Express and you got Airport/WLAN/HDMI/Audio in all rooms (and around that room) you connect an Apple TV to. Nice and best for hotels!
Vice versa: If you connect it via Airport to use the ethernet port as a hub/switch to connect devices. I think this should be possible and hope that it's only a firmware update...
Next step is not only to playback videos/photos from other devices. Just use it as a main or second screen for all kind of devices (Computer Extensions forMac OS X/Windows other will follow...).
You don't have to connect a notebook to a beamer anymore. There's only the AppleTV connected to a beamer. The video comes via Airport/WLAN /LAN.
Make the USB Plug useful to connect printers or storage devices!!!
That should be great and makes Apple TV the most useful device ton install it in every room in the house!!!
I think, if the Apple TV can be connected to any kind of device, it shouldn't be Apple's hobby anymore.
Regards,
Michael

send your suggestions to Apple via _*Apple TV Feedback*_.
JGG

Access Point Radios trying to authenticate via PEAP against ISE

Similar Messages

Maybe you are looking for