When the AR router functions as the AC and uses the WPA or WPA2 authentication, the terminal cannot go online

18

Root cause analysis: Through the analysis, when the AR is used as the AC and the Layer 3 interface is used as the downlink interface to connect to the AP, the AR does not support WPA or WPA2 authentication. Detailed information is as follows:
1. Interaction verification of WEP authentication is performed only between the AP and the STA. Therefore, when the AR uses the Layer 3 interface as the downlink interface to connect to the AP, the terminal can go online normally.
2. Layer 2 packets of WPA/WPA2 authentication are used and need to reach the AC. When the AR uses the Layer 3 interface as the downlink interface to connect to the AP, the terminal cannot go online because the Layer 3 interface on the AR cannot process the exchanged authentication packets. As a result, the terminal cannot go online.
Summary and suggestion: In customer's networking, if the AR is used as the AC, you are advised to install the LAN card on the AR to connect to APs. In this case, the authentication mode is not limited.

Other related questions:
When the AR router functions as the AC and uses the WPA or WPA2 authentication, the terminal cannot go online
Root cause analysis: Through the analysis, when the AR is used as the AC and the Layer 3 interface is used as the downlink interface to connect to the AP, the AR does not support WPA or WPA2 authentication. Detailed information is as follows: 1. Interaction verification of WEP authentication is performed only between the AP and the STA. Therefore, when the AR uses the Layer 3 interface as the downlink interface to connect to the AP, the terminal can go online normally. 2. Layer 2 packets of WPA/WPA2 authentication are used and need to reach the AC. When the AR uses the Layer 3 interface as the downlink interface to connect to the AP, the terminal cannot go online because the Layer 3 interface on the AR cannot process the exchanged authentication packets. As a result, the terminal cannot go online. Summary and suggestion: In customer's networking, if the AR is used as the AC, you are advised to install the LAN card on the AR to connect to APs. In this case, the authentication mode is not limited.

Whether the AR router used as the AC can use the Layer 3 interface to implement WPA or WPA2 authentication
When an AR router functions as the AC, APs must connect to LAN interfaces of the AR router if APs need to be directly connected to the AR router. Therefore, the Layer 3 interface cannot implement WPA or WPA2 authentication.

Why cannot an AP go online when the AR functions as an AC
#NAME?

WLAN security of AR routers
WLAN security is as follows: User access security: Link authentication, access authentication, and data encryption are used to ensure validity and security of user access on wireless networks. Service security: This feature protects service data of authorized user from being intercepted by unauthorized users during transmission. For details, see WLAN Security Configuration.

WPA/WPA2 has been configured on the AR router successfully but does not take effect
The troubleshooting procedure is as follows: 1. Check whether you have run the dot1x enable command to enable 802.1x authentication globally. 2. Check whether the configuration of WPA/WPA2 is complete. 3. Check whether the user name and password are correct.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top