Figure 68: Client Authentication Failure Status; Table 55: Failed Client Status - D-Link DWS-3000 Series User Manual

D-Link Unified Access System
To view a list of clients that fail to associate or authenticate with the a D-Link Access Point, click the Failed Clients page.
• To delete all clients from the list, click Delete All.
• To block a failed client from WLAN access, select the check box next to the MAC address of the client and click Deny
MAC. The MAC address is added to the MAC Authentication Deny MAC List for all AP Profiles where the default action
is Deny.
• To add the client to the MAC Authentication Allow MAC List for all profiles where the default action is Allow, select the
client and click Allow MAC. You must re-apply the AP profiles in order for the changes to be applied to the APs.
Note: If the Deny MAC button is not available, it means all profiles use Allow as the default MAC Authentication
action. Likewise, if the Allow MAC button is not available, no profiles have an Allow default action.
Note: If you use RADIUS for MAC authentication in one or more AP profiles, you must add the MAC Address to
the RADIUS database.
Table 55 shows the fields on the summary page for failed client status.
Field
MAC Address
BSSID
SSID
Last Failure Type
Age
• Click Refresh to update the screen with the most current information.
Click the MAC address of the failed client to view additional information about a client.
Note: If a wrong password is entered on a client for WEP, this page may not list that authentication failed client.
This issue actually arises from a known problem with the IEEE 802.11 specification. The specification says that
if the AP is unable to decode the third frame (containing the encrypted challenge text), it should send an
unsuccessful result. However, if the AP is unable to decode a WEP frame, it does not know whether that frame
is actually the third frame, or even a Shared Key frame at all, and does not send a result. This issue only applies
to WEP (which is not recommended due to security issues) that uses Shared Key authentication when the key is
incorrect.
Page 150

Figure 68: Client Authentication Failure Status

Table 55: Failed Client Status

Description
The Ethernet address of the client.
The managed AP VAP Ethernet MAC address on which the client attempted
to associate and/or authenticate.
The network SSID on which client attempted to associate and/or authenticate.
Indicates the last type of failure that occurred, which can be Authentication or
Association.
Time since failure occurred.
Software User Manual
02/15/2011
Document 34CS3000-SWUM104-D10