WLC 4.0.217.0 reporting Decrypt Errors

Hi,
My customer is using Cisco WLC 4402 running 4.0.217.0 and is reporting that Wireless clients are getting disconnected and reconnected every half hour and when I check for the trapslog I get the following error messages.
Decrypt errors occurred for client 00:19:d2:76:2e:7e using WPA2 key on 802.11b/g interface of AP 0 0:1a:30:2e:c2:b0
AP's Interface:1(802.11a) Operation State Down: Base Radio :00:1a:30:2e:be:90 Cause=Heartbeat
Timeout
I have checked for known issues but couldn't find any pertaining the issue or error message.
Could someody help or share any info to find way out to troubleshoot as what is causing this issue.
Thanks in advance.

so we are now after disabling PEAP fast reconnect seeing tons of these errors. this is the trigger point that started creating these messages. prior to the disabling of the PEAP fast reconnect, we had clients who anywhere from 10-60 minutes would get kicked off associations with their AP. then within 1-3 seconds a reconnect would occur. a cisco TAC case engineer recommended that we take off PEAP fast reconnect.
here is the snmp-trap logs from the controller and our controller is running the following:
Software Version 4.2.112.0
System Name XXXWLC01
Up Time 7 days, 20 hours, 28 minutes
System Time Tue Jul 1 12:54:54 2008
Internal Temperature +33 C
802.11a Network State Disabled
802.11b/g Network State Enabled
Default Mobility Group apples
log output:
Tue Jul 1 12:45:05 2008 Decrypt errors occurred for client 00:19:d2:60:a1:71 using WPA2 key on 802.11b/g interface of AP 00:1c:f9:2e:62:20
1 Tue Jul 1 12:44:34 2008 Decrypt errors occurred for client 00:1d:e0:74:3c:b5 using WPA2 key on 802.11b/g interface of AP 00:1c:f9:2d:1a:00
2 Tue Jul 1 12:44:33 2008 Decrypt errors occurred for client 00:16:6f:6b:38:23 using WPA2 key on 802.11b/g interface of AP 00:1c:f9:2e:60:10
3 Tue Jul 1 12:44:13 2008 Client Association Failure: Client MAC Address:00:13:ce:c3:81:d3, AP Base Radio MAC:00:1c:f9:2d:1a:00, Slot: 0, Reason:Unspecified, ReasonCode: 1
4 Tue Jul 1 12:43:52 2008 Decrypt errors occurred for client 00:16:6f:96:f8:98 using WPA2 key on 802.11b/g interface of AP 00:1c:f9:2e:62:a0
5 Tue Jul 1 12:43:48 2008 Decrypt errors occurred for client 00:1d:e0:32:5b:cb using WPA2 key on 802.11b/g interface of AP 00:1c:f9:2f:26:40
6 Tue Jul 1 12:43:33 2008 Decrypt errors occurred for client 00:15:00:22:d8:31 using WPA2 key on 802.11b/g interface of AP 00:1c:f9:2e:bf:d0
7 Tue Jul 1 12:43:28 2008 Decrypt errors occurred for client 00:15:00:43:10:5a using WPA2 key on 802.11b/g interface of AP 00:1c:f9:2f:97:c0
8 Tue Jul 1 12:43:28 2008 Decrypt errors occurred for client 00:19:d2:27:75:c0 using WPA2 key on 802.11b/g interface of AP 00:1c:f9:2e:5b:50
9 Tue Jul 1 12:43:19 2008 Decrypt errors occurred for client 00:18:de:cf:68:f1 using WPA2 key on 802.11b/g interface of AP 00:1c:f9:2e:cb:e0
10 Tue Jul 1 12:43:19 2008 Decrypt errors occurred for client 00:18:de:d5:39:f2 using WPA2 key on 802.11b/g interface of AP 00:1c:f9:2e:cb:e0
11 Tue Jul 1 12:42:58 2008 Decrypt errors occurred for client 00:18:de:cf:85:0d using WPA2 key on 802.11b/g interface of AP 00:1c:f9:2e:c3:00
12 Tue Jul 1 12:42:51 2008 Decrypt errors occurred for client 00:1d:e0:76:79:27 using WPA2 key on 802.11b/g interface of AP 00:1c:f9:2e:5e:80
13 Tue Jul 1 12:42:35 2008 Decrypt errors occurred for client 00:1b:77:0b:c0:d6 using WPA2 key on 802.11b/g interface of AP 00:1c:f9:2f:78:c0
14 Tue Jul 1 12:42:33 2008 Decrypt errors occurred for client 00:1b:77:0b:d8:4f using WPA2 key on 802.11b/g interface of AP 00:1c:f9:2e:60:10
15 Tue Jul 1 12:42:31 2008 Decrypt errors occurred for client 00:16:6f:8f:52:cc using WPA2 key on 802.11b/g interface of AP 00:1c:f9:2f:0c:f0

Similar Messages

Decrypt Errors occuring in WLC Log

Hi all,
we see a strange message in our WLC logs, which occurs quite often (>10 times a day):
Decrypt errors occurred for client [MAC-Adress] using WPA key on 802.11b/g interface of AP [MAC-Adress]
The MAC-Adresses of the affected clients are varying as well as the APs reporting the error.
The clients are Notebooks, Cisco IP-Phones and Nokia-DualBand-Phones.
Even more frequently we see the following message in the log:
%ETHOIP-3-PING_TRANSMIT_FAILED: ethoip_ping.c:227 send_eoip_ping: Failed to tx Ethernet over IP ping rc=5.
We use TKIP as Encryption and EAP-Fast as well as LEAP as Authentication (Cisco ACS).
The WLC is an 2106, the APs are 1242AG.
We don't recognize any problems placing calls or talking over these phones. It's just these messages in the log that concern me.
Anyone else got these messages (and hopefully fixed them :))
Greets,
Sebastian

Hi Everyone, you can count me in as well for getting the decrypt errors. However the only difference is that I'm not using WPA on the network that this is happening on. The wlan that is reporting this for me is just a simple WEP key. I'm thinking this is related to encryption since TKIP is also based on RC4. I also have other WLANS where I use WPA2 Enterprise with AES (PEAP MS-CHAPv2) and I do not see the decrypt errors for those clients. Also, to further expand on this I haven't noticed any client problems either. Maybe this is a bug that doesn't cause denial of service. I'd love to get rid of them though! This is with a 4402 WLC and 1242AG AP's...

Decrypt Errors on WLC version 7

Hello
I am seeing a lot of the following showing up in the WLC trap log:
Decrypt errors occurred for client <CLIENT-MAC> using WPA2 key on 802.11b/g interface of AP 00:17:0f:81:ad:90
I have done a fair amount of searching about and I cant seem to find a clear explanation for this message. Could someone suggest what might be causing these issues and how to resolve them?
For refernce we are using WLC runninn 7.0.98 and ACS 4.0
Thanks in advance.

Its a fair range of clients across several APs in the building. I havent got an exact list of
clients but I know its both old and new Lenovo/IBM laptops as well as Macbooks and Macbook Pros.
Our APs are the 1131AGs if that helps.

Decrypt Errors - WLC 4404

Hello,
We recently had a few clients being locked down with countermeasures by our WLC 4404 due to TKIP-MIC errors. After doing some reading on the benefits of AES over TKIP I switched our WLAN security settings to AES, and pushed a new wireless policy to our client machines. Every thing appeared to work well, except now the trap log on the 4404 is showing a LOT of WPA decrypt errors. I've checked a few of the clients that appear to have problems, but they've got the right policy and WPA settings to match what is on the WLC.
It's not one particular NIC, it's various clients.
Any thoughts on how I might clear these up?
Rob

One reason for that is configuration of two WEP keys on a single WLAN is not supported. Currently WLAN can only take one WEP key.

Reporting Service Error Code 7403, on SCCM 2012 R2 with SQL 2012 SP1 CU6

Dear All,
I am facing issue to install Reporting Services Point on SCCM 2012 R2 with SQL 2012 SP1 CU6. getting error messages id 7403. please let me know if SQL 2012 SP1 CU6 is supported with SCCM 2012 R2 or not & if you have any solution on it.
Error Message: The report server service is not running on Reporting Service Point server "SCCM2012"; start the service to enable reporting.

I am getting below error msg when trying to browse both sites
1) For Reports
The report server cannot decrypt the
symmetric key that is used to access sensitive or encrypted data in a report
server database. You must either restore a backup key or delete all encrypted
content. (rsReportServerDisabled)
Get Online Help
Keyset does not exist (Exception from
HRESULT:
0x80090016)
2) For Reportserver
Reporting Services Error
The report server cannot decrypt the symmetric key that is used to access
sensitive or encrypted data in a report server database. You must either restore
a backup key or delete all encrypted content. (rsReportServerDisabled)
Get Online Help
Keyset does not exist (Exception from HRESULT: 0x80090016)
SQL Server Reporting Services

WEP Key decrypt error + Symbol 9060

I have a WLC 4400 running ver 3.2.150.6. The LAP is a 1242AG-A-K9. I am getting this error message on the wireless controller log when I try and use my Symbol 9060 RF units the message is:
WEP Key decrypt error. Station MAC Address is 00:a0:f8:ba:b5:36, Base Radio MAC is 00:19:a9:0f:d7:90 and Slot ID is 0.
My setup is WPA using 802.1x and the units do authenicate but then after a random period the users lose their sessions. Actually doesnt seem to matter whether I am using WPA or WEP, i still drop. I havent had this problem with the fat APs. Any ideas?

Cisco is saying the WEP error is a known bug and its a fake message, so that is probably not what is causing the drops. When the clients first started dropping I also noticed another error message but it hasnt show back up till today when i put more client guns back in use. the error is:
WPA MIC Error counter measure activated on Radio with MAC 00:19:a9:0f:bd:80 and Slot ID 0. Station MAC Address is 00:a0:f8:d2:34:98 and WLAN ID is 1.
Any thoughts?

WEP Key decrypt error

We have WPA2 clients and WLC4402, why is the controller reporting this error message. Does anyone know ? It doesn't seem to effect the connection but I'm just concerning.
Tue May 9 12:47:20 2006 WEP Key decrypt error. Station MAC Address is xx:xx:xx:xx:xx:xx, Base Radio MAC is xx:xx:xx:xx:xx:xx and Slot ID is 1.

Hi
We are using 802.1x and 104 bit WEP to authenticate against a ACS Server
(LEAP)
Sporadically we are also getting the same errormessage muliple times:
Wed Nov 1 12:09:01 2006--WEP Key decrypt error. Station MAC Address is 00:40:96:b1:d1:01, Base Radio MAC is 00:0b:85:71:21:01 and Slot ID is 1.
Wed Nov 1 12:05:01 2006--WEP Key decrypt error. Station MAC Address is 00:40:96:b1:d1:01, Base Radio MAC is 00:0b:85:71:21:01 and Slot ID is 1.
It seesms that this error-essage are dieplayed in different configuration cenarios.
Does anyone know what exactly the reason is for this error message is.
(Execpt for the Cisco docu statement "Notification sent when the controller detects a WEP decrypting error.")
Best Regards
Jarle

Decrypt error

Hi
We've got a wireless implementation with Wisms and 1142 LAPs and for a while we've been getting decrypt errors and like other posts here say, I've been ignoring them because they haven't been disconnecting clients but now they are getting disconnected. Errors like the one below seem to be causing the client to be disconnecting:
Decrypt error occurred for client 'xx:xx:xx:xx:xx:xx' using 'WPA' key on '802.11b/g' interface of AP 'xx'. - Controller Name: WLC-1
Its happened to 3 out of 5 laptops in one location plus an iPhone 3GS in another location, all the laptops are the same model and on the same versions of of drivers.
We're on 6.0.188.0.
Any suggestions on what to do?
Thanks

Hi Megz,
This is cosmetic :)
DECRYPT_ERROR_FOR_WRONG_WPA_WPA2
MIB Name
CISCO-LWAPP-DOT11-CLIENT-MIB. CiscoLwappDot11ClientKeyDecryptError.
WCS Message
Decrypt error occurred at AP with MAC "{0}" running TKIP with wrong WPA/WPA2 by client with MAC "{1}."
Symptoms
The controller detects that a user is trying to connect with an invalid security policy for WPA/WPA2 types.
WCS Severity
Minor.
Probable Causes
The user failed to authenticate and join the controller.
Recommended Actions
None.
http://www.cisco.com/en/US/docs/wireless/wcs/4.1/configuration/guide/wcsevent.html#wp1150053
http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Wireless%20-%20Mobility&topic=General&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.1ddf95ef/0#selected_message
http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Wireless%20-%20Mobility&topic=General&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.2cbf340f
Hope this helps!
Rob

Decrypt errors issue

Hi everybody,
I got this trap massage on WLC.
The client failed to communicate, it was still associated wiht WLC though.
the trap massage log is blow
"Decrypt errors occurred for client 00:40:96:ae:38:fe using unknown key on 802.11a interface of AP 00:16:9c:b8:9b:5"
My wirelss environmet is containing WLC2106(5.2) 1131AG, clinet using ADU(v4.4)
Thanks.

We use Dynamic wep key, EAP-TTLS / PEAP.
I attach the output.
WLAN Identifier.................................. 1
Profile Name..................................... kssl
Network Name (SSID).............................. kssl
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Disabled
AAA Policy Override.............................. Disabled
Network Admission Control
NAC-State...................................... Disabled
Quarantine VLAN................................ 0
Number of Active Clients......................... 0
Exclusionlist.................................... Disabled
Session Timeout.................................. 1800 seconds
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ management
WLAN ACL......................................... unconfigured
DHCP Server...................................... Default
DHCP Address Assignment Required................. Disabled
--More-- or (q)uit
Quality of Service............................... Silver (best effort)
WMM.............................................. Disabled
CCX - AironetIe Support.......................... Disabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
IPv6 Support..................................... Disabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... All
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
Authentication................................ 10.10.9.44 1812
Authentication................................ 10.10.9.45 1812
Accounting.................................... 10.10.9.44 1813
Accounting.................................... 10.10.9.45 1813
Local EAP Authentication......................... Disabled
Security
802.11 Authentication:........................ Open System
Static WEP Keys............................... Disabled
802.1X........................................ Enabled
--More-- or (q)uit
Encryption:..................................... 104-bit WEP
Wi-Fi Protected Access (WPA/WPA2)............. Disabled
CKIP ......................................... Disabled
IP Security Passthru.......................... Disabled
Web Based Authentication...................... Disabled
Web-Passthrough............................... Disabled
Conditional Web Redirect...................... Disabled
Splash-Page Web Redirect...................... Disabled
Auto Anchor................................... Disabled
H-REAP Local Switching........................ Disabled
H-REAP Learn IP Address....................... Enabled
Infrastructure MFP protection................. Disabled
Client MFP.................................... Optional but inactive (WPA2 no
t configured)
Tkip MIC Countermeasure Hold-down Timer....... 60
Mobility Anchor List
WLAN ID IP Address Status
Thank you.

Decrypt errors occurred for client

I am getting error messages for clients:
11 Mon Jun 14 09:11:56 2010 Decrypt errors occurred for client 00:13:ce:54:57:3c using WPA key on 802.11b/g interface of AP 00:16:9c:91:97:c0
12 Mon Jun 14 09:11:56 2010 Decrypt errors occurred for client 00:16:6f:91:d8:60 using WPA2 key on 802.11b/g interface of AP 00:16:9c:91:97:c0
These are only occuring for clients that are disconnecting....
They can reconnect after a WLC reboot....
We have swapped APs.....
I have seen this error in other forums but it says not to worry about it. There has to be a connection between this and clients getting disconnected. We have anywhere between 10-50 clients on the system at any one time.
Is this a client issue (nic firmware, version) or is this an error in the controller??
AIR-WLC2106-K9
IOS ver: 6.0.196.0
Thanks

This means that the client is using a different key than the one he agreed on using with the AP. There were bugs about this long time ago but nothing recent.
I've seen this happening a lot with old/not updated clients. It rarely happens on intel adapters with latest drivers for example.
So I'd suggest checking the client pattern (are the clients facing this all having old wireless drivers ?).
It can also happen if you offer funny encryption combinations that client doesn't like (wpa1+aes, wpa2+tkip). Try to only enable wpa2/aes and see if it helps.
Nicolas

WPA2 decrypt errors on controller

I am seeing quite a lot WPA2 decrypt errors on the WLCs. i am running 4.2 code and have 1131 APs deployed in the enterprise.

We have the same problem.
We use Microsoft's WZC with WPA2/AES with mostly Intel 2915 NIC's. They are updated with the latest driver we can find on Intel and/or Lenovo's site --- 9.0.4.39.
We have patched the client with all MS patches we can find
KB893357 - WPA2 patch for SP2 XP clients
KB885453 - PEAP patch (supposed to fix this issue)
KB917021 - enhanced support for WPA2 clients esp. for Group Policy options.
finally my question.... :)
What Aironet extensions are you referring to?
The Aironet IE enable radio button within the WLAN settings?
If so, we already have that disabled and still have the problem.
Don't know what else to try?

Reporting Services Error after Interactive sorting and drill down in pps

Hi
i have a report that has a drill down option that shows all workgroups within a specific parent group and an interactive sorting ass well on both columns parent group & workgroup
This is displayed in pps combined with a SharePoint
---the problem is that after sorting the parent group column by name i then press the drill through icon (+) next to it hopping to see all workgroups related to each parent group
- but instead
i receive this Reporting Services Error :
The value for parameter 'SortItem' is not specified. It is either missing from the function call, or it is set to null. (rsMissingParameter) Get
Online Help
If I don't press the sorting and just drill through it works fine. the sorting itself also works fine.
any suggestions ?

Hi Hyaron,
I am unable to reproduce the issue in my test environment. How did you add the drilldown feature? Were you doing that by setting visibility of the column or of the group? Please ensure to add the drilldown functionality by set the visibility of the workgroup
from the Grouping Pane in the Report Designer.
How did you add the Interactive Sorting on the headers of the two columns? Based on the drilldown functionality, the Interactive Sorting on the second column doesn’t work. So, you can move the Interactive Sorting on the second column. When configuring the
Interactive sorting on the first column, you should set the parent group to sort, and sort by the field that the parent group groups by.
Hope this helps.
Regards,
Mike Yin
TechNet Community Support

EPSON Workforce 310 "scanner reported an error" when using document feeder

I'm having trouble using my EPSON Workforce 310 printer/scanner with my new MacBook Pro (late 2012, 2.5 GHz i5, OS X Mountain Lion 10.8.2).
Using the flatbed I can scan without a problem. But when I try to use the document feeder, I get the following error right after I click Scan and before the scanner has done anything (at least I don't hear anything moving inside the EPSON):
Scanner reported an error
An error occured during scanning
The EPSON's display doesn't show any error or special message.
This is repeated whether I use Image Capture, Preview's Import from Scanner, or the printer's native app (PrinterProxy, the one that shows up in the doc whenever the printer is printing or scanning).
I have no problem doing the scanning from my old iMac (2006, 2GHz Core Duo, Snow Leopard). After scanning to the MacBook fails I can walk over to the iMac and scan from there without problem and without resetting anything on the EPSON.
The EPSON is connected the home network via ethernet to a Time Capsule. Both computers are connected to the network via WiFi.

Syd,
My wife's iMac with 10.6.6 stopped working with her Epson 2480 Photo scanner. Get the error message "SCANNER reported an error. An error has occurred during scanning" I am trying to use it from the Image Capture App or from the print/fax option in Settings which opens Image Capture. I ran the uninstall program and then reinstalled the ICA 13969 .dmg but get the same error. Not sure what else I can do.

5.0 won't work - extensions message is "localized string not found". When I force it to try to load a new window it shows a gray screen with the bookmarks on top then immediately closes and wants to report the error. Has been this way since 5.0 came out.

I first tried downloading Safari when the 5.0 update came out last year. When I choose the app in the dock, I get the blue top bar (Safari, File, etc) but nothing else loads. I uninstalled the app and tried again several times, but no success. For over a year now I've used Firefox as a result. Today I thought I'd try again, but same results. When I choose "new window" in the file menu, I get a small gray window with my bookmarks on top, then in a few seconds, the app quits unexpectedly and the report an error screen appears. I've unchecked all the languages in the information area for the app, cleared all history, cookies, and cache. Still the extensions tab in the preferences area has "LOCALIZED STRING NOT FOUND" in 4 places. It won't show what that means when I click the "?". Will I ever be able to use Safari again?

Perform the suggestions mentioned in the following articles:
* [[Firefox is already running but is not responding]]
-> Profile in use
* [http://kb.mozillazine.org/Profile_in_use]
Check and tell if its working.

Crystal report unexpected error in Web service (IIS)

We are using Crystal report in web service.
We faced some problem due to crystal report unexpected error.
Refer the below error message.
            Xception E NSF      NSFZ1100 20100608 145511565 GPRAB0 : GPRZ10 [GUEC0001] [1] [AbstractService] Showing a modal dialog box or form when the application is not running in UserInteractive mode is not a valid operation. Specify the ServiceNotification or DefaultDesktopOnly style to display a notification from a service application.
            Xception E NSF      NSFZ1100 20100608 145511972 GPRAB0 : GPRZ10 [GUEC0001] [1] [AbstractService]    at System.Windows.Forms.MessageBox.ShowCore(IWin32Window owner, String text, String caption, MessageBoxButtons buttons, MessageBoxIcon icon, MessageBoxDefaultButton defaultButton, MessageBoxOptions options, Boolean showHelp)
               at System.Windows.Forms.MessageBox.Show(String text, String caption, MessageBoxButtons buttons, MessageBoxIcon icon)
               at CrystalDecisions.Windows.Forms.CrystalReportViewer.HandleExceptionEvent(Object eventSource, Exception e, Boolean suppressMessage)
               at CrystalDecisions.Windows.Forms.CrystalReportViewer.HandleExceptionEvent(Object eventSource, Exception e)
               at CrystalDecisions.Windows.Forms.ReportDocumentBase.GetLastPageNumber()
               at CrystalDecisions.Windows.Forms.ReportDocumentBase.GetLastPage()
               at CrystalDecisions.Windows.Forms.DocumentControl.ShowLastPage()
               at CrystalDecisions.Windows.Forms.PageView.ShowLastPage()
               at Biz.Nissan.Cats.CORE.REPORT.LibCrystalReport.TotalPageCount(ReportDocument Rpt)
               at Biz.Nissan.Cats.CORE.REPORT.LibCrystalReport.Print(BaseReport RptDefinition)
               at Biz.Nissan.Cats.CORE.REPORT.MCTLIST260Print.Print(IFData ifData)
               at Biz.Nissan.W3.CATS.BC.Service.DistributeService.ExecuteMpp()
How we get the actual error from crystal report?
Thanks in Advance

What is the workflow
What is the application doing?
Iu2019m guessing you have a windows service application and you're trying to launch a UI (ie the viewer control) from the application or print using the vieweru2019s printing functionality programmatically(?).
If this is a Windows Service running under the local system account, then follow the instructions in the error message. (ie, bring up the properties of the service, go to the logon tab and check the checkbox that says u201CAllow service to interact with desktopu201D.   At least that should allow whatever popup is trying to come up display properly.
Ludek

WLC 4.0.217.0 reporting Decrypt Errors

Similar Messages

Maybe you are looking for