topic Re: Check Point appliance 1530 wireless disassociation issues in Spark Firewall (SMB)

Check Point appliance 1530 wireless disassociation issues

lmpv — Fri, 07 Mar 2025 10:52:53 GMT

Hello,

I´m having problems with a 1535 appliance, in regards to Wifi.

Most of the clients are using MacOs, and the only thing that i can see on the logs is this:

daemon.info hostapd: [Wireless] wlan0: STA 42:c3:8c:55:71:e8 IEEE 802.11: disassociated
daemon.info hostapd: [Wireless] wlan0: STA 5e:7b:3c:82:a9:b2 IEEE 802.11: disassociated
daemon.info hostapd: [Wireless] wlan0: STA 5e:7b:3c:82:a9:b2 IEEE 802.11: disassociated
daemon.info hostapd: [Wireless] wlan0: STA 02:e7:fc:c0:df:51 IEEE 802.11: disassociated
daemon.info hostapd: [Wireless] wlan0: STA 5e:7b:3c:82:a9:b2 IEEE 802.11: disassociated

local7.info dhcpd: DHCPREQUEST for 192.168.253.24 (192.168.253.1) from 68:7a:64:b3:20:95 (ALTW001) via wlan0
local7.info dhcpd: [Local Network: DHCP] DHCPACK on 192.168.253.24 to 68:7a:64:b3:20:95 (ALTW001) via wlan0
daemon.info hostapd: [Wireless] wlan0: STA 68:7a:64:b3:20:95 IEEE 802.11: disassociated

I would like some help on identifying the issue.

Regards

Re: Check Point appliance 1530 wireless disassociation issues

PhoneBoy — Fri, 07 Mar 2025 16:32:52 GMT

This is likely going to require TAC to assist.
What I saw in a similar TAC case that might be useful debug commands are as follows (all commands are in expert mode):

# iwpriv wlan1 dbgLVL 0x7FFFFFFF
# cat /proc/sys/kernel/random/entropy_avail > /storage/dbg_rand.txt

If trying to connect to the 2.4GHz wifi connection:
# hostapd_ctl restart wifi0 -d -l

Otherwise, if trying to connect to the 5GHz wifi connection:
# hostapd_ctl restart wifi1 -d -l

The following files will need to be reviewed/supplied to TAC:

/logs/hostapd.lo
/storage/dbg_rand.txt
The output file from CPinfo -d -D -z -o /var/log/<hostname>

Re: Check Point appliance 1530 wireless disassociation issues

lmpv — Fri, 07 Mar 2025 18:12:12 GMT

Hello Phoneboy,

I will gather all the information and post it here.

Thank you

Re: Check Point appliance 1530 wireless disassociation issues

_Val_ — Mon, 10 Mar 2025 07:38:28 GMT

Please open a TAC ticket via https://help.checkpoint.com

Re: Check Point appliance 1530 wireless disassociation issues

bs69 — Mon, 10 Mar 2025 10:22:16 GMT

Luis,

My name is Boaz and I'm in charge of SMB Wireless (WiFi). As Phoneboy requested, we will need to see hostapd log file to better understand what causes those MACs to request IP every 12 minutes and why they disassociate the way they do.
Can you also share your wireless configuration - what type of security settings (e.g. WPA3/WPA2) do you use? Are you seeing these on other, non Apple products?

Thank you,

Boaz.

Re: Check Point appliance 1530 wireless disassociation issues

lmpv — Mon, 10 Mar 2025 13:53:47 GMT

Hello Boaz,

The final customer send me this screeshoots today that i'm attaching.

Phonebiy did send this commands to be used for debugging but they are not working

If trying to connect to the 2.4GHz wifi connection:
# hostapd_ctl restart wifi0 -d -l

Otherwise, if trying to connect to the 5GHz wifi connection:
# hostapd_ctl restart wifi1 -d -l

i get this:

hostapd_ctl restart wifi0 -d -l
command:/pfrm2.0/bin/hostapd_ctl restart wifi0 -d -l
Unknown -l
Usage: /pfrm2.0/bin/hostapd_ctl CMD HOSTAPD_NAME [options]

This script controls hostapd
CMD: start, stop, restart
HOSTAPD_NAME: wired, wifi0, wifi1 if exists
Options:
-d Debug mode, log saved in /logs/hostapd.log
-h Print this help

Best regards

Re: Check Point appliance 1530 wireless disassociation issues

G_W_Albrecht — Mon, 10 Mar 2025 15:57:04 GMT

Which firmware is used ?

Re: Check Point appliance 1530 wireless disassociation issues

lmpv — Mon, 10 Mar 2025 17:15:03 GMT

Hello,

Adding in attachment a screenshot.

Regards

Re: Check Point appliance 1530 wireless disassociation issues

lmpv — Wed, 12 Mar 2025 10:21:51 GMT

Hello Boaz,

Did you saw my message in regards to the outcome of the commands that Phoneboy send me?

Best regards

Re: Check Point appliance 1530 wireless disassociation issues

G_W_Albrecht — Wed, 12 Mar 2025 10:54:44 GMT

Why such an old firmware ?

Latest Firmware	R81.10.15 Build 996003913
Recommended Firmware	R81.10.10 Build 996002993

Re: Check Point appliance 1530 wireless disassociation issues

G_W_Albrecht — Wed, 12 Mar 2025 13:10:12 GMT

Try /pfrm2.0/bin/hostapd_ctl restart wifi0 -d !

Re: Check Point appliance 1530 wireless disassociation issues

Steffen_Appel — Wed, 12 Mar 2025 13:35:06 GMT

That one is really old, AFAIR r81.10.10 is the recommended version.

Re: Check Point appliance 1530 wireless disassociation issues

lmpv — Thu, 13 Mar 2025 22:03:41 GMT

Hello Team,

Adding the files requested initialy.

/logs/hostapd.lo
/storage/dbg_rand.txt
The output file from CPinfo -d -D -z -o /var/log/<hostname>

Re: Check Point appliance 1530 wireless disassociation issues

lmpv — Tue, 18 Mar 2025 10:10:07 GMT

Hello team,

sorry to bother you guys, but could see anything os the logs that i attached on my previous message?

File - ficheiros.zip

Best regards

Re: Check Point appliance 1530 wireless disassociation issues

Chris_Atkinson — Tue, 18 Mar 2025 10:40:45 GMT

Please upgrade the firmware and advise if the problem persists.

Re: Check Point appliance 1530 wireless disassociation issues

G_W_Albrecht — Tue, 18 Mar 2025 13:29:07 GMT

Please open a SR# with CP TAC so the issue can be resolved asap ! Better upgrade to R81.10.10 Build 996002993 first or TAC will make you do it anyway...

Re: Check Point appliance 1530 wireless disassociation issues

lmpv — Tue, 18 Mar 2025 13:37:25 GMT

Thank for the quick reply, i will perform the upgrade to see how it goes.

Re: Check Point appliance 1530 wireless disassociation issues

G_W_Albrecht — Wed, 19 Mar 2025 11:46:43 GMT

Any results yet?

Re: Check Point appliance 1530 wireless disassociation issues

PhoneBoy — Wed, 19 Mar 2025 13:43:05 GMT

I don't see anything in these files that might provide a clue.
In any case, you should open a TAC case.

Re: Check Point appliance 1530 wireless disassociation issues

lmpv — Mon, 31 Mar 2025 12:26:33 GMT

Hello,

Sorry for the delay on my update.

Just to give you an overview of what as been done.

We upgraded de appliance to the firmware R81.10.10 Build 996002993 that was proposed, we did fix the problem with the VPN, but we still have the issue with the MacOs laptop that connects to the Wifi but as no internet access, attaching the logs in attachment. (ea:45:23:34:ad:a4 (Mac) via wlan0) - this is the Mac Address of the laptop.

Regards