Wireless Authentication Rate
Possible reasons for the event:
Many stations are "roaming" into the service area.
At sites where it is common to configure the driver to use a primary and secondary AP, a high number of authentications can indicated intermittent signal problems between a station and its primary AP. When the signal from the primary AP falls beneath a certain threshold, the station authenticates with the secondary AP. When a strong signal is again sensed from the primary AP, the station will authenticate and associate with the primary AP. Such intermittent signal problems can be resolved by getting a better antenna for the AP, relocating the AP, or eliminating sources of RF interference between the AP and its stations (cordless phones, microwaves, etc.) More than the expected number of stations within an ESS can generate many authentication requests and be evidence of an intruder with malicious intent.