D-Link DWS 3000 user manual Client Authentication Failure Status, Failed Client Status

7 Monitoring Status and Statistics

To view a list of clients that fail to associate or authenticate with the a D-Link Access Point, click the Failed Clients page.

Figure 64. Client Authentication Failure Status

To delete all clients from the list, click Delete All.

To block a failed client from WLAN access, select the check box next to the MAC address of the client and click Deny MAC. The MAC address is added to the MAC Authentication Deny MAC List for all AP Profiles where the default action is Deny. To add the client to the MAC Authentication Allow MAC List for all profiles where the default action is Allow, select the client and click Allow MAC. You must re-apply the AP profiles in order for the changes to be applied to the APs.

NOTE: If the Deny MAC button is not available, it means all profiles use Allow as the default MAC Authentication action. Likewise, if the Allow MAC button is not available, no profiles have an Allow default action.

NOTE: If you use RADIUS for MAC authentication in one or more AP profiles, you must add the MAC Address to the RADIUS database.

Table 50 shows the fields on the summary page for failed client status.

Table 50. Failed Client Status

Field	Description
MAC Address	The Ethernet address of the client.
BSSID	The managed AP VAP Ethernet MAC address on which the
	client attempted to associate and/or authenticate.
SSID	The network SSID on which client attempted to associate and/
	or authenticate.
Last Failure Type	Indicates the last type of failure that occurred, which can be
	Authentication or Association.
Age	Time since failure occurred.

Click the MAC address of the failed client to view additional information about a client.

NOTE:If a wrong password is entered on a client for WEP, this page may not list that authentication failed client. This issue actually arises from a known problem with the IEEE 802.11 specification. The specification says that if the AP is unable to decode the third frame (containing the encrypted challenge text), it should send an unsuccessful result. However, if the AP is unable to decode a WEP frame, it does not know whether that frame is actually the third frame, or even a Shared Key frame at all, and does not send a result. This issue only

Viewing Client Authentication Failure Status 145