Wireless
Participate in insightful discussions regarding issues related to Intel® Wireless Adapters and technologies
7368 Discussions

Warning Error in Event Log - deauth after EAPOL key exchange sequence

TMcCl
Beginner
48,125 Views

Hello,

I require information regarding the following errors in the Windows 10 event log. Client is using Intel 8265 with 20.30.1 driver.

3/23/2018 12:35 Warning System 6105 6105 - deauth after EAPOL key exchange sequence

3/23/2018 12:35 Warning System 6105 6105 - deauth after EAPOL key exchange sequence

3/23/2018 11:30 Warning System 6105 6105 - deauth after EAPOL key exchange sequence

3/23/2018 11:30 Warning System 6105 6105 - deauth after EAPOL key exchange sequence

3/23/2018 12:35 11005 Information Wireless security succeeded.

Network Adapter: Intel(R) Dual Band Wireless-AC 8265

Interface GUID: {4349BDC9-0E67-481C-B419-6675A33B73C9}

Local MAC Address: CC:2F:71:D2:3D:3B

Network SSID: *snip*

BSS Type: Infrastructure

3/23/2018 12:35 12012 Information Wireless 802.1x authentication succeeded.

Network Adapter: Intel(R) Dual Band Wireless-AC 8265

Interface GUID: {4349BDC9-0E67-481C-B419-6675A33B73C9}

Local MAC Address: CC:2F:71:D2:3D:3B

Network SSID: *snip*

BSS Type: Infrastructure

Identity: host/MCBL-UTP-BSHL03.uthouston.edu

User:

Domain:

3/23/2018 12:35 12011 Information Wireless 802.1x authentication started.

Network Adapter: Intel(R) Dual Band Wireless-AC 8265

Interface GUID: {4349BDC9-0E67-481C-B419-6675A33B73C9}

Local MAC Address: CC:2F:71:D2:3D:3B

Network SSID: *snip*

BSS Type: Infrastructure

Eap Information: Type 25, Vendor ID 0, Vendor Type 0, Author ID 0

3/23/2018 12:35 12014 Information Wireless 802.1x authentication was restarted.

Network Adapter: Intel(R) Dual Band Wireless-AC 8265

Interface GUID: {4349BDC9-0E67-481C-B419-6675A33B73C9}

Local MAC Address: CC:2F:71:D2:3D:3B

Network SSID: *snip*

BSS Type: Infrastructure

Eap Information: Type 25, Vendor ID 0, Vendor Type 0, Author ID 0

Restart Reason: Peer Initiated

3/23/2018 12:35 12014 Information Wireless 802.1x authentication was restarted.

Network Adapter: Intel(R) Dual Band Wireless-AC 8265

Interface GUID: {4349BDC9-0E67-481C-B419-6675A33B73C9}

Local MAC Address: CC:2F:71:D2:3D:3B

Network SSID: *snip*

BSS Type: Infrastructure

Eap Information: Type 25, Vendor ID 0, Vendor Type 0, Author ID 0

Restart Reason: Peer Initiated

3/23/2018 12:35 11010 Information Wireless security started.

Network Adapter: Intel(R) Dual Band Wireless-AC 8265

Interface GUID: {4349BDC9-0E67-481C-B419-6675A33B73C9}

Local MAC Address: CC:2F:71:D2:3D:3B

Network SSID: *snip*

BSS Type: Infrastructure

Authentication: WPA2-Enterprise

Encryption: AES-CCMP

FIPS Mode: Disabled

802.1x Enabled: Yes

3/23/2018 12:35 11004 Information Wireless security stopped.

Network Adapter: Intel(R) Dual Band Wireless-AC 8265

Interface GUID: {4349BDC9-0E67-481C-B419-6675A33B73C9}

Local MAC Address: CC:2F:71:D2:3D:3B

Network SSID: *snip*

BSS Type: Infrastructure

Security Hint: The operation was successful.

3/23/2018 12:35 11005 Information Wireless security succeeded.

Network Adapter: Intel(R) Dual Band Wireless-AC 8265

Interface GUID: {4349BDC9-0E67-481C-B419-6675A33B73C9}

Local MAC Address: CC:2F:71:D2:3D:3B

Network SSID: *snip*

BSS Type: Infrastructure

3/23/2018 12:35 11010 Information Wireless security started.

Network Adapter: Intel(R) Dual Band Wireless-AC 8265

Interface GUID: {4349BDC9-0E67-481C-B419-6675A33B73C9}

Local MAC Address: CC:2F:71:D2:3D:3B

Network SSID: *snip*

BSS Type: Infrastructure

Authentication: WPA2-Enterprise

Encryption: AES-CCMP

FIPS Mode: Disabled

802.1x Enabled: Yes

3/23/2018 12:35 11004 Information Wireless security stopped.

Network Adapter: Intel(R) Dual Band Wireless-AC 8265

Interface GUID: {4349BDC9-0E67-481C-B419-6675A33B73C9}

Local MAC Address: CC:2F:71:D2:3D:3B

Network SSID: *snip*

BSS Type: Infrastructure

Security Hint: The operation was successful.

Thank you

0 Kudos
13 Replies
idata
Employee
29,504 Views

Hello TJMcClintic,

We understand you would like more information regarding some warning events on Device Manager related to your Intel® Dual Band Wireless-AC 8265.

We can see that you're using 802.1x with PEAP on a WPA2-Enterprise network. In most cases it's normal to see deauthentication after EAP over LAN key exchange warnings as the adapters attempts to roam or renews it's authentication. The problem comes if these are frequent or if your system is entirely unable to authenticate causing a disconnection.

 

In order to better assist you we would like the following information:
  1. Do the errors result in loss of connectivity?
  2. What is your wireless router/access point brand and model?
  3. How long ago did the issue start?
  4. Please share your wireless Autoconfig report
    1. Right click your start menu icon and select Command Prompt (Admin) from the list.
    2. Enter: netsh wlan show wlanreport
    3. Go to C:\ProgramData\Microsoft\Windows\WlanReport\
    4. Upload the wlan-report-latest.html file along with your reply.

Also, there is a newer driver available. Is it possible for you to update to this driver and see if the issue persists?

- https://www.intel.com/content/www/us/en/support/articles/000005559/network-and-i-o/wireless-networking.html Download the Latest Driver for Your Intel® Wireless Adapter

Best regards,

 

Carlos A.
0 Kudos
BJord
Beginner
29,504 Views

We are having a similar issues that spans upwards of 2500 unique endpoints in our environment.

We essentially have 2500 Lenovo Endpoints with a variety of Intel Wireless Adapters DOS'ing our ISE and Active Directory infrastructure daily.

Same error in event log -

Warning Error in Event Log - deauth after EAPOL key exchange sequence

Were talking at times 30 to 50 thousand successful re-authentication requests (yes successful) from a single endpoint in a day multiplied 2500 endpoints.

So far we have seen the problem on the following wireless adapters 7260,8260, 8265, 7265 and Centrino 6205 and various driver versions:

18.33.9.3

20.30.0.7

19.50.1.6

20.50.2.1

19.50.1.6

20.50.1.1

15.18.0.1

19.51.12.3

15.16.0.2

0 Kudos
TMcCl
Beginner
29,504 Views
  1. Do the errors result in loss of connectivity?
    1. This we are not sure as the log shows the error and Citrix seems to be impacted.
  2. What is your wireless router/access point brand and model?
    1. Aruba 335 with 7240 controller
  3. How long ago did the issue start?
    1. After upgrading to driver version 20.30.1
  4. Please share your wireless Autoconfig report
    1. Right click your start menu icon and select Command Prompt (Admin) from the list.
    2. Enter: netsh wlan show wlanreport
    3. Go to C:\ProgramData\Microsoft\Windows\WlanReport\
    4. Upload the wlan-report-latest.html file along with your reply.
      1. I would prefer to send direct as to not post the details of this host information. Is that possible?
0 Kudos
idata
Employee
29,504 Views

Hello TJMcClintic,

 

 

Thank you for this information. I've send you a message for you to reply with the report privately.

 

 

Best regards,

 

Carlos A.
0 Kudos
TMcCl
Beginner
29,504 Views

Hello,

I am not seeing a private message to send the data requested.

0 Kudos
idata
Employee
29,504 Views

Hello TJMcClintic,

The private messages sent through Communities don't have an option for attachments. We sent you an email instead. Please check your Junk/Spam inbox for a message coming from mailto:supportreplies@intel.com supportreplies@intel.com

Let me know if we need to resend this.

Best regards,

 

Carlos A.
0 Kudos
idata
Employee
29,504 Views

Hello TJMcClintic,

 

 

We haven't heard back from you in a while.

 

 

Has your issue been resolved? If not, have you tested our 20.40.0 https://downloadcenter.intel.com/download/27615 Intel® PROSet/Wireless Software and Drivers?

 

 

Best regards,

 

Carlos A.
0 Kudos
idata
Employee
29,504 Views

Hello bjordan,

 

Thank you for contacting us; it will be more than a pleasure to assist you.

 

I can see that you already have another ticket number through our web support (03508666) which is being handled by one of our staff representatives (Esteban Ch.).

 

We are waiting for you answer in that ticket. In order to expedite your request, please stick to that case number.

 

We are coordinating the support with our team member so you will receive assistance as soon as we receive your answer.

 

We are currently closing this case; please do not hesitate on reaching us back if you have any doubt.

 

I hope to hear from you soon.

 

Regards,

 

Diego S.

 

0 Kudos
User1576074347012453
29,504 Views

We do have this problem in the company, we use Lenova various model laptop and got the intel 8265 with version 20.70.12.5. this issue we have seen acorss the glob.

We have Cisco Wirless Network infrastrcture in our company. we did tried updating driver/WLC sw version upgrade, many fins-tuneing.. so far no luck.. our employees lose the hope with IT related to the wireless Network.

if anyone have any fix or suggession please let me know.. it will be great help for us.

 

KHyvö
Beginner
29,504 Views

Hi,

was this issue resolved?

We have Lenovo thinkpads, which has the same issue.

 

So far it seems that affected machines are T480 with driver version 20.70.11.3

0 Kudos
User1576074347012453
29,504 Views
Unfortunately the issue is not yet resolved, or we are yet to find the smoking gun. I have case opened with Microsoft as well. Regards, Sajish
0 Kudos
KHyvö
Beginner
29,503 Views

Hi,

a little bit more info:

Also Lenovo T490 model seems to be affected, saw the same behavior today first time with two T490 laptops

* reboot does not help

* event viewer has events 6105 "deauth after EAPOL key exchange sequence", source netwtw08

* if you wait 20-30min, the laptop usually can connect without problems

affected driver version for T490 21.30.2.1

 

We have Ruckus wireless R500 APs with firmware version 200.7.10.202.94

 

Lenovo support has suggested turning on "Wireless auto disconnection" feature from bios, this did not help.

0 Kudos
Tuuksu
Beginner
25,017 Views

Try disabling 802.11r (Fast Transition). Our issue was solved when I disabled it from the WLAN we are using.

0 Kudos
Reply