Задача, вообщем-то, тривиальная. Хочу поставить дома точку доступа. Набил конфиг, но возникла следующая проблема. При подключение устройства к точке доступа аутентификацию устройство проходит нормально, но через пару секунд tkip отрубает клиента ссылаясь на неправильный MIC.

Текст лога:
Aug 13 12:41:28.304    Information    Interface Dot11Radio0, Deauthenticating Station 0015.002e.3f59 Reason: Invalid MIC
Aug 13 12:41:28.304    Error    Two TKIP Michael MIC failures were detected within 16 seconds on Dot11Radio0 interface. The interface will be put on MIC failure hold state for next 60 seconds.
Aug 13 12:41:28.303    Warning    TKIP Michael MIC failure was detected on a packet (TSC=0x3B1) received from 0015.002e.3f59.
Aug 13 12:41:12.103    Warning    TKIP Michael MIC failure was detected on a packet (TSC=0xE1) received from 0015.002e.3f59.
Aug 13 12:41:00.392    Information    Interface Dot11Radio0, Station 0015.002e.3f59 Associated KEY_MGMT[WPA PSK]

полный конфиг aironet'a

version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname home.wi-fi
!
enable secret 5 XXXXXXXXXXXXXXXXXXXXX
!
no aaa new-model
ip domain name home.lan
!
!
!
dot11 ssid Aironet.Home.Wi-Fi
   authentication open
   authentication key-management wpa
   guest-mode
   wpa-psk ascii 7 XXXXXXXXXXXXXXXXXX
!
power inline negotiation prestandard source
!
!
username etnies privilege 15 secret 5 XXXXXXXXXXXXXXXXXX.
!
bridge irb
!
!
interface Dot11Radio0
description ### Free Wi-FI ###]
no ip address
no ip route-cache
!
encryption mode ciphers tkip
!
ssid Aironet.Home.Wi-Fi
!
speed  basic-6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root access-point
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
no dfs band block
speed  basic-6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
channel dfs
station-role root access-point
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface BVI1
ip address 192.168.0.50 255.255.255.0
no ip route-cache
!
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
login local
!
end

• Помогите настроить aironet 1131,midori, 20:41 , 18-Авг-13

Во-первых, проверьте актуальность ваших драйверов на клиентах.

#countermeasure tkip hold-time 0
Также пробуйте поменять шифрование, если это приемлемо.