Ap Authentication Failure Status; Figure 316: Ap Authentication Failure Status - D-Link DWL-8600AP User Manual

D-Link UWS User Manual

AP Authentication Failure Status

An AP might fail to associate to the switch due to errors such as invalid packet format or vendor ID, or because
the AP is not configured as a valid AP with the correct local or RADIUS authentication information.
To view a list of APs that failed to associate with the DWS-4000 Series switch, click WLAN > Monitoring >
Access Point > AP Authentication Failure Status.
The AP authentication failure list shows information about APs that failed to establish communication with
the DWS-4000 Series switch. The AP can fail due to one of the following reasons:
• No Database Entry — The MAC address of the AP is not in the local Valid AP database or the external
RADIUS server database, so the AP has not been validated.
• Local Authentication — The authentication password configured in the AP did not match the password
configured in the local database.
• Not Managed — The AP is in the Valid AP database, but the AP Mode in the local database is not set to
Managed.
• RADIUS Authentication — The password configured in the RADIUS client for the RADIUS server was
rejected by the server.
• RADIUS Challenged — The RADIUS server is configured to use the Challenge-Response authentication
mode, which is incompatible with the AP.
• RADIUS Unreachable — The RADIUS server that the AP is configured to use is unreachable.
• Invalid RADIUS Response — The AP received a response packet from the RADIUS server that was not
recognized or invalid.
• Invalid Profile ID — The profile ID specified in the RADIUS database may not exist on the switch. This can
also happen with the local database when the configuration has been received from a peer switch.
• Profile Mismatch-Hardware Type — The AP hardware type specified in the AP Profile is not compatible
with the actual AP hardware.
• AP Relink — The RADIUS server is configured to return the IP address of the switch that manages a specific
AP, but the AP is discovered by a different switch. The switch sends a relink message to the access point
with the IP address of the wireless switch that the AP should be linked with. When the AP gets the relink
message, it modifies or sets the wireless switch IP address to the address assigned by the RADIUS server,
breaks the TCP connection with the current switch, and starts a new discovery process.
If you use the local database for AP Validation, you can click the WLAN > Administration > Basic Setup > Valid
AP tab to modify the AP configuration. If you use a RADIUS server for AP validation, you must add the MAC
address of the AP to the RADIUS server database.
D-Link
Oct. 2015

Figure 316: AP Authentication Failure Status

Monitoring Status and Statistics
Unified Wired and Wireless Access System
Page 486