Symptom
Clients fail to get past EAPOL M2 with 802.11r enabled
Conditions
This issue is seen on switchover with clients unable to connect after switchover.
Workaround
Disable 802.11r or
Configure mobility group name after switchover to recover from the issue
Further Problem Description
Issue happens due KHID mismatch on WLC and Client which is used in MIC computation. The fix for this issue corrects the KHID calculation on Controller before switchover which matches the one after switchover.