• State Resolved
  • Locked Locked
  • Replies 13 replies
  • Subscribers 40 subscribers
  • Views 398 views
  • Users 0 members are here
Support feedback
Options
Options
Similar topics

This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

CC3200 cannot work with cisco C9115AX-T

? ??
Prodigy 10 points
Part Number: CC3200

Tool/software:

Hi,

we found that our purduct which has cc3200 installed inside, cannot work with cisco C9115AX-T, same product can work with other AP and no issue at all, and we have also proved that cisco catalyst 9120AX can work with other wifi device. They use enterprise encryption (802.1X WPA2 PEAP). I'm wondering if TI can help to check if CC3200 can work with cisco catalyst 9115AX-T with no issue.

We found error code SL_GENERAL_ERROR_CON_MGMT_STATUS_UNSPECIFIED (-102) and SL_GENERAL_ERROR_CON_MGMT_STATUS_ASSOC_REJECT (-104)

so far, we are still trying to figure out what's going on here, and our customer is trying to work with cisco guys, hope to have update in these days.

thanks.

The images attached are what cc3200 can work other cisco AP

  • 0
    Guru 78485 points

    Hi,

    What TLS versions for EAP security is expected by 9120AX? CC3200 support TLS 1.0 only. Can you check some log from 9120AX to determine reason of connection failure?

    Jan

  • 0 in reply to Jan D
    Prodigy 10 points

    Hi,

    We check  9120AX support TLS 1.0 from CISCO engineer. we try Cisco 9120AX with new contoller 980 can work, but 9120AX with old controller 5520 can not work. The other AP with 5520 can work. so far, our customer is trying to work with cisco guys, and find the answer of the quesion.

  • 0 in reply to ? ??
    Guru 78485 points

    Hi,

    OK. It will be good to know if will be any log prom AP side available. If not, it will be needed to capture packets with WiFi sniffer.

    btw ... what SDK and ServicePack do you use?

    But according my experience is most common issue with EAP security related to TLS 1.0. What I remember at past there were bug at CC3200 with EAP security when was slow responses with RADIUS server. But this was very rare and related to big networks.

    Jan

  • 0 in reply to Jan D
    Prodigy 10 points

    Hi,

    We use SDK CC3200SDK_1.5.0 and ServicePack_1.0.1.15-2.15.0.1. 

    Is there a newer version than this?

    Will
  • 0 in reply to ? ??
    Guru 78485 points

    Hi Will,

    Your SDK and ServicePack should be fine.

    Jan

  • 0 in reply to Jan D
    Prodigy 10 points

    Hi Jan,

    May that promblem be Cisco contoller?

    Will

  • 0 in reply to ? ??
    Guru 78485 points

    Hi Will,

    Who knows... it may to be some kind of interoperability issue. But if I should guess I will blame TLS 1.0 for EAP security. I am not sure if I understand your previous answer properly. You are waiting now for CISCO to confirmation whether TLS 1.0 is supported for EAP. Right?

    Jan

  • 0 in reply to Jan D
    Prodigy 10 points

    Hi Jan

    Cisco controller is TLS 1.2 for EAP security. But we check the paper from user' Guide that cc3200 support TLS 1.2

  • 0 in reply to ? ??
    Guru 78485 points

    Hi,

    TLS 1.2 is supported for socket, but not for EAP. For EAP is supported TLS 1.0 only. No way how this can be changed.

    Jan

  • 0 in reply to Jan D
    Prodigy 10 points

    Hi Jan

    The situations known during today's testing process are as follows.

    1  Cisco controller support TLS 1.0 for EAP security.

    2  we use CC3200SDK_1.5.0/cc3200-sdk/example/scan_policy scan SSID. 

      The CC3200 can successfully detect the SSID when connected to the new Cisco Controller 980 with AP9115. However, it cannot detect the SSID when the AP9115 is connected to the old Cisco Controller 5520. The laptop can detect the SSID when the AP9115 is connected to the old Cisco Controller 5520. 

    So, I wanted to ask if there are other sample programs available to test the issue of not being able to search for the SSID.

  • +1 in reply to ? ??
    Guru 78485 points

    Hi,

    Hard to say what can cause such interoperability issue. It seems that Cisco 5520 is almost EoL (End of SW Maintenance: January 31, 2023; End of Vulnerability/Security Support: January 30, 2025).

    Example scan_policy from CC3200 SDK 1.5 should be perfectly fine for such tests.

    For determining reason of issue it will be needed to provide log from WiFi sniffer and NWP log from CC3200 (see chapter 19 at swru368c). If will be issue at side of Cisco 5520, it will not be fixed due to EoL.

    Jan

  • 0 in reply to Jan D
    Prodigy 10 points

    Hi Jan

    Do you have any recommended WiFi sniffer software?

  • 0 in reply to ? ??
    Guru 78485 points

    Hi,

    For capturing WiFi packets you will need to have WiFi adapter supporting monitor mode. Some recommendation you can find here.

    Jan