Monitoring Status and StatisticsD-Link Unified Wired and Wireless Access SystemOct. 2015 Page 486D-Link UWS User ManualAP Authentication Failure StatusAn AP might fail to associate to the switch due to errors such as invalid packet format or vendor ID, or becausethe AP is not configured as a valid AP with the correct local or RADIUS authentication information.To view a list of APs that failed to associate with the DWS-4000 Series switch, click WLAN > Monitoring >Access Point > AP Authentication Failure Status.Figure 316: AP Authentication Failure StatusThe AP authentication failure list shows information about APs that failed to establish communication withthe DWS-4000 Series switch. The AP can fail due to one of the following reasons:• No Database Entry — The MAC address of the AP is not in the local Valid AP database or the externalRADIUS server database, so the AP has not been validated.• Local Authentication — The authentication password configured in the AP did not match the passwordconfigured in the local database.• Not Managed — The AP is in the Valid AP database, but the AP Mode in the local database is not set toManaged.• RADIUS Authentication — The password configured in the RADIUS client for the RADIUS server wasrejected by the server.• RADIUS Challenged — The RADIUS server is configured to use the Challenge-Response authenticationmode, which is incompatible with the AP.• RADIUS Unreachable — The RADIUS server that the AP is configured to use is unreachable.• Invalid RADIUS Response — The AP received a response packet from the RADIUS server that was notrecognized or invalid.• Invalid Profile ID — The profile ID specified in the RADIUS database may not exist on the switch. This canalso happen with the local database when the configuration has been received from a peer switch.• Profile Mismatch-Hardware Type — The AP hardware type specified in the AP Profile is not compatiblewith the actual AP hardware.• AP Relink — The RADIUS server is configured to return the IP address of the switch that manages a specificAP, but the AP is discovered by a different switch. The switch sends a relink message to the access pointwith the IP address of the wireless switch that the AP should be linked with. When the AP gets the relinkmessage, it modifies or sets the wireless switch IP address to the address assigned by the RADIUS server,breaks the TCP connection with the current switch, and starts a new discovery process.If you use the local database for AP Validation, you can click the WLAN > Administration > Basic Setup > ValidAP tab to modify the AP configuration. If you use a RADIUS server for AP validation, you must add the MACaddress of the AP to the RADIUS server database.
