<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8" />
<title>Router instability</title>
<style>
html {
font-family: sans-serif;
font-size: 14px;
}
table {
border-collapse: collapse;
}
th, td {
padding: 2px 5px;
border: 1px solid black;
}
td {
white-space: pre;
}
</style>
</head>
<body>
<h1>STA failure breaking whole AP connectivity</h1>
<p>Broken STA fails, after 2nd handshaking the same EAPOL error occurs. This triggers hostapd deauthenticating all STAs and good one not being able to reconnect.</p>
<table>
<thead>
<tr>
<th>hostapd</th>
<th>wpa_supplicant</th>
</tr>
</thead>
<tbody>
<tr>
<th colspan="2">A well working Intel STA connects</th>
</tr>
<tr>
<td>wlan1: STA 88:53:2e:50:50:50 IEEE 802.11: associated
wlan1: STA 88:53:2e:50:50:50 WPA: event 1 notification
wlan1: STA 88:53:2e:50:50:50 WPA: start authentication
wlan1: STA 88:53:2e:50:50:50 IEEE 802.1X: unauthorizing port
wlan1: STA 88:53:2e:50:50:50 WPA: sending 1/4 msg of 4-Way Handshake
wlan1: STA 88:53:2e:50:50:50 WPA: received EAPOL-Key frame (2/4 Pairwise)
wlan1: STA 88:53:2e:50:50:50 WPA: sending 3/4 msg of 4-Way Handshake
wlan1: STA 88:53:2e:50:50:50 WPA: received EAPOL-Key frame (4/4 Pairwise)
wlan1: AP-STA-CONNECTED 88:53:2e:50:50:50
wlan1: STA 88:53:2e:50:50:50 IEEE 802.1X: authorizing port
wlan1: STA 88:53:2e:50:50:50 WPA: pairwise key handshake completed (RSN)</td>
<td></td>
</tr>
<tr>
<th colspan="2">Broken STA connects</th>
</tr>
<tr>
<td>wlan1: STA ba:d0:ba:d0:ba:d0 IEEE 802.11: associated
wlan1: STA ba:d0:ba:d0:ba:d0 WPA: event 1 notification
wlan1: STA ba:d0:ba:d0:ba:d0 WPA: start authentication
wlan1: STA ba:d0:ba:d0:ba:d0 IEEE 802.1X: unauthorizing port
wlan1: STA ba:d0:ba:d0:ba:d0 WPA: sending 1/4 msg of 4-Way Handshake
wlan1: STA ba:d0:ba:d0:ba:d0 WPA: received EAPOL-Key frame (2/4 Pairwise)
wlan1: STA ba:d0:ba:d0:ba:d0 WPA: sending 3/4 msg of 4-Way Handshake
wlan1: STA ba:d0:ba:d0:ba:d0 WPA: received EAPOL-Key frame (4/4 Pairwise)
wlan1: AP-STA-CONNECTED ba:d0:ba:d0:ba:d0
wlan1: STA ba:d0:ba:d0:ba:d0 IEEE 802.1X: authorizing port
wlan1: STA ba:d0:ba:d0:ba:d0 WPA: pairwise key handshake completed (RSN)</td>
<td></td>
</tr>
<tr>
<th colspan="2">Broken STA sends first packet that fails</th>
</tr>
<tr>
<td>wlan1: STA ba:d0:ba:d0:ba:d0 WPA: received EAPOL-Key frame (Request)
wlan1: STA ba:d0:ba:d0:ba:d0 WPA: received EAPOL-Key Error Request (STA detected Michael MIC failure (group=1))
wlan1: STA ba:d0:ba:d0:ba:d0 WPA: sending 1/4 msg of 4-Way Handshake
wlan1: STA ba:d0:ba:d0:ba:d0 WPA: received EAPOL-Key frame (2/4 Pairwise)
wlan1: STA ba:d0:ba:d0:ba:d0 WPA: sending 3/4 msg of 4-Way Handshake
wlan1: STA ba:d0:ba:d0:ba:d0 WPA: received EAPOL-Key frame (4/4 Pairwise)
wlan1: STA ba:d0:ba:d0:ba:d0 IEEE 802.1X: authorizing port
wlan1: STA ba:d0:ba:d0:ba:d0 WPA: pairwise key handshake completed (RSN)
wlan1: STA ba:d0:ba:d0:ba:d0 WPA: received EAPOL-Key frame (Request)
wlan1: STA ba:d0:ba:d0:ba:d0 WPA: received EAPOL-Key Error Request (STA detected Michael MIC failure (group=1))
wlan1: IEEE 802.11 TKIP countermeasures initiated
wlan1: STA ba:d0:ba:d0:ba:d0 MLME: MLME-DEAUTHENTICATE.indication(ba:d0:ba:d0:ba:d0, 14)
wlan1: STA ba:d0:ba:d0:ba:d0 MLME: MLME-DELETEKEYS.request(ba:d0:ba:d0:ba:d0)
wlan1: AP-STA-DISCONNECTED ba:d0:ba:d0:ba:d0
wlan1: STA 88:53:2e:50:50:50 MLME: MLME-DEAUTHENTICATE.indication(88:53:2e:50:50:50, 14)
wlan1: STA 88:53:2e:50:50:50 MLME: MLME-DELETEKEYS.request(88:53:2e:50:50:50)
wlan1: AP-STA-DISCONNECTED 88:53:2e:50:50:50
wlan1: STA ba:d0:ba:d0:ba:d0 IEEE 802.11: disassociated
wlan1: STA 88:53:2e:50:50:50 IEEE 802.11: disassociated</td>
<td>wlan0: Michael MIC failure detected
wlan0: WPA: Sending EAPOL-Key Request (error=1 pairwise=0 ptk_set=1 len=99)
wlan0: WPA: Key negotiation completed with 00:11:22:33:44:55 [PTK=TKIP GTK=TKIP]
wlan0: Michael MIC failure detected
wlan0: WPA: Sending EAPOL-Key Request (error=1 pairwise=0 ptk_set=1 len=99)</td>
</tr>
<tr>
<th colspan="2">Good Intel STA tries to reconnect</th>
</tr>
<tr>
<td>wlan1: STA 88:53:2e:50:50:50 IEEE 802.11: associated
wlan1: STA 88:53:2e:50:50:50 WPA: event 1 notification
wlan1: STA 88:53:2e:50:50:50 IEEE 802.11: disassociated
wlan1: STA 88:53:2e:50:50:50 WPA: event 2 notification
wlan1: STA 88:53:2e:50:50:50 IEEE 802.1X: unauthorizing port</td>
<td></td>
</tr>
<tr>
<th colspan="2">Good Intel STA tries to reconnect</th>
</tr>
<tr>
<td>wlan1: STA 88:53:2e:50:50:50 IEEE 802.11: associated
wlan1: STA 88:53:2e:50:50:50 WPA: event 1 notification
wlan1: STA 88:53:2e:50:50:50 IEEE 802.11: disassociated
wlan1: STA 88:53:2e:50:50:50 WPA: event 2 notification
wlan1: STA 88:53:2e:50:50:50 IEEE 802.1X: unauthorizing port</td>
<td></td>
</tr>
<tr>
<th colspan="2">Good Intel STA tries to reconnect</th>
</tr>
<tr>
<td>wlan1: STA 88:53:2e:50:50:50 IEEE 802.11: associated
wlan1: STA 88:53:2e:50:50:50 WPA: event 1 notification
wlan1: STA 88:53:2e:50:50:50 IEEE 802.11: disassociated
wlan1: STA 88:53:2e:50:50:50 WPA: event 2 notification
wlan1: STA 88:53:2e:50:50:50 IEEE 802.1X: unauthorizing port</td>
<td></td>
</tr>
</tbody>
</table>
</body>
</html>