User Idle Timeout does not remove client

dporod — Mon, 05 Jul 2021 15:10:54 GMT

Has anyone ever seen a client that doesn't timeout based on the Controller>User Timeout setting? Mine is set for 300 seconds. I have desktop with built in wireless that has been disconnected from power for hours and it still shows up with show client detail. Also when I look at the show client detail the Client Statistics show show traffic for the last 90s, even though the unit is not powered on. Also those traffic number have remained the same for hours.

Number of Bytes Sent (last 90s)............ 11028
Number of Bytes Recv (last 90s)............ 3967

When I have a client in this state the only way I can get them back on the network is to config client deauth, it is happening on some, not all, windows laptops and chromebooks today.

Re: User Idle Timeout does not remove client

Flavio Miranda — Mon, 29 Jan 2018 21:46:49 GMT

Hi @dporod

This sound like a bug. I have found this bug here CSCug75799. It does not explain your situation exactly but can give a clue that your case can probably be a bug.

You can try to up/downgrade the wlc and see.

-If I helped you somehow, please, rate it as useful.-

Re: User Idle Timeout does not remove client

Saravanan Lakshmanan — Tue, 30 Jan 2018 06:10:21 GMT

WLC code and AP-model?
after client shutdown collect following. Use 0 for 2.4ghz, 1 for 5ghz

WLC:
show client detail <MAC>
show client ap 802.11a <ap_name>
debug client <MAC>

AP:
#show capwa cli mn
#show controller do | d1 client

Re: User Idle Timeout does not remove client

dporod — Tue, 30 Jan 2018 12:17:11 GMT

5508 8.2.164

3802, 3702 and 3602

Re: User Idle Timeout does not remove client

dporod — Tue, 30 Jan 2018 12:18:45 GMT

We will be going to 8.2.166 tomorrow per TACs suggestion to at least eliminate that possibility.

Re: User Idle Timeout does not remove client

Saravanan Lakshmanan — Tue, 30 Jan 2018 18:16:55 GMT

check if the time decreases after client shutdown followed by client de-authed and removed from ap and wlc client database.

AP#show controller do | d1 client
WLC>debug client <MAC>

Re: User Idle Timeout does not remove client

dporod — Tue, 30 Jan 2018 18:52:12 GMT

Hi, the first command may be different on our system, is this the info you were looking for? This particular client is having the issue right now, I'm hesitant to death this as I want to use it for testing right now. Is this normal for the controller to see the client but not the AP?

w01-a120#show controllers dot11Radio 1 client 70:56:81:a7:54:d7
Client 70:56:81:A7:54:D7 not found!

Cisco Controller) >show client detail 70:56:81:a7:54:d7
Client MAC Address............................... 70:56:81:a7:54:d7
Client Username ................................. 70-56-81-a7-54-d7
AP MAC Address................................... 00:a7:42:f5:c9:80
AP Name.......................................... w01-a120
AP radio slot Id................................. 1
Client State..................................... Associated
Client User Group................................ 70-56-81-a7-54-d7
Client NAC OOB State............................. Access
Wireless LAN Id.................................. 15
Wireless LAN Network Name (SSID)................. FVTC-Public
Wireless LAN Profile Name........................ FVTC Public
Hotspot (802.11u)................................ Not Supported
BSSID............................................ 00:a7:42:f5:c9:81
Connected For ................................... 21612 secs
Channel.......................................... 149
IP Address....................................... 10.5.136.237
Gateway Address.................................. 10.5.128.1
Netmask.......................................... 255.255.192.0
IPv6 Address..................................... fe80::1859:a49a:e91e:36f7
Association Id................................... 179
Authentication Algorithm......................... Open System
Reason Code...................................... 1
Status Code...................................... 0

--More-- or (q)uit
Session Timeout.................................. 28800
Client CCX version............................... No CCX support
QoS Level........................................ Silver
Avg data Rate.................................... 0
Burst data Rate.................................. 0
Avg Real time data Rate.......................... 0
Burst Real Time data Rate........................ 0
802.1P Priority Tag.............................. disabled
CTS Security Group Tag........................... Not Applicable
KTS CAC Capability............................... No
Qos Map Capability............................... No
WMM Support...................................... Enabled
APSD ACs....................................... BK BE VI VO
Current Rate..................................... m7
Supported Rates.................................. 12.0,18.0,24.0,36.0,48.0,
............................................. 54.0
Mobility State................................... Local
Mobility Move Count.............................. 0
Security Policy Completed........................ Yes
Policy Manager State............................. RUN
AAA Override ACL Name............................ none
AAA Override ACL Applied Status.................. Unavailable
AAA Override Flex ACL Name....................... none

--More-- or (q)uit
AAA Override Flex ACL Applied Status............. Unavailable
AAA URL redirect................................. none
Audit Session ID................................. 0a0550040001bd1d5a70687a
AAA Role Type.................................... none
Local Policy Applied............................. none
IPv4 ACL Name.................................... none
FlexConnect ACL Applied Status................... Unavailable
IPv4 ACL Applied Status.......................... Unavailable
IPv6 ACL Name.................................... none
IPv6 ACL Applied Status.......................... Unavailable
Layer2 ACL Name.................................. none
Layer2 ACL Applied Status........................ Unavailable
Client Type...................................... SimpleIP
mDNS Status...................................... Enabled
mDNS Profile Name................................ default-mdns-profile
No. of mDNS Services Advertised.................. 0
Policy Type...................................... N/A
Encryption Cipher................................ None
Protected Management Frame ...................... No
Management Frame Protection...................... No
EAP Type......................................... Unknown
Interface........................................ guest-firewalled
VLAN............................................. 512

--More-- or (q)uit
Quarantine VLAN.................................. 0
Access VLAN...................................... 512
Local Bridging VLAN.............................. 512
Client Capabilities:
CF Pollable................................ Not implemented
CF Poll Request............................ Not implemented
Short Preamble............................. Not implemented
PBCC....................................... Not implemented
Channel Agility............................ Not implemented
Listen Interval............................ 10
Fast BSS Transition........................ Not implemented
11v BSS Transition......................... Not implemented
Client Wifi Direct Capabilities:
WFD capable................................ No
Manged WFD capable......................... No
Cross Connection Capable................... No
Support Concurrent Operation............... No
Fast BSS Transition Details:
Client Statistics:
Number of Bytes Received................... 12043425
Number of Bytes Sent....................... 799826116
Total Number of Bytes Sent................. 799826116
Total Number of Bytes Recv................. 12043425

--More-- or (q)uit
Number of Bytes Sent (last 90s)............ 0
Number of Bytes Recv (last 90s)............ 0
Number of Packets Received................. 180164
Number of Packets Sent..................... 534138
Number of Interim-Update Sent.............. 0
Number of EAP Id Request Msg Timeouts...... 0
Number of EAP Id Request Msg Failures...... 0
Number of EAP Request Msg Timeouts......... 0
Number of EAP Request Msg Failures......... 0
Number of EAP Key Msg Timeouts............. 0
Number of EAP Key Msg Failures............. 0
Number of Data Retries..................... 0
Number of RTS Retries...................... 0
Number of Duplicate Received Packets....... 0
Number of Decrypt Failed Packets........... 0
Number of Mic Failured Packets............. 0
Number of Mic Missing Packets.............. 0
Number of RA Packets Dropped............... 0
Number of Policy Errors.................... 0
Radio Signal Strength Indicator............ -58 dBm
Signal to Noise Ratio...................... 29 dB
Client Rate Limiting Statistics:
Number of Data Packets Received............ 0

--More-- or (q)uit
Number of Data Rx Packets Dropped.......... 0
Number of Data Bytes Received.............. 0
Number of Data Rx Bytes Dropped............ 0
Number of Realtime Packets Received........ 0
Number of Realtime Rx Packets Dropped...... 0
Number of Realtime Bytes Received.......... 0
Number of Realtime Rx Bytes Dropped........ 0
Number of Data Packets Sent................ 0
Number of Data Tx Packets Dropped.......... 0
Number of Data Bytes Sent.................. 0
Number of Data Tx Bytes Dropped............ 0
Number of Realtime Packets Sent............ 0
Number of Realtime Tx Packets Dropped...... 0
Number of Realtime Bytes Sent.............. 0
Number of Realtime Tx Bytes Dropped........ 0
Nearby AP Statistics:
w01-a166(slot 0)
antenna0: 8739 secs ago.................. -84 dBm
antenna1: 8739 secs ago.................. -84 dBm
w01-a166(slot 1)
antenna0: 8734 secs ago.................. -83 dBm
antenna1: 8734 secs ago.................. -83 dBm
w01-a162(slot 0)

--More-- or (q)uit
antenna0: 8734 secs ago.................. -88 dBm
antenna1: 8734 secs ago.................. -88 dBm
w01-a120(slot 0)
antenna0: 8735 secs ago.................. -42 dBm
antenna1: 8735 secs ago.................. -42 dBm
w01-a120(slot 1)
antenna0: 8734 secs ago.................. -47 dBm
antenna1: 8734 secs ago.................. -47 dBm
w01-a104q(slot 0)
antenna0: 8739 secs ago.................. -87 dBm
antenna1: 8739 secs ago.................. -88 dBm
w01-a142(slot 0)
antenna0: 8738 secs ago.................. -93 dBm
antenna1: 8738 secs ago.................. -91 dBm
w01-a104d(slot 0)
antenna0: 8735 secs ago.................. -67 dBm
antenna1: 8735 secs ago.................. -76 dBm
w01-a104d(slot 1)
antenna0: 8734 secs ago.................. -82 dBm
antenna1: 8734 secs ago.................. -84 dBm
w01-a105a(slot 0)
antenna0: 17329 secs ago................. -89 dBm
antenna1: 17329 secs ago................. -88 dBm

--More-- or (q)uit
w01-a105(slot 0)
antenna0: 8735 secs ago.................. -90 dBm
antenna1: 8735 secs ago.................. -89 dBm
w01-a105h(slot 0)
antenna0: 8741 secs ago.................. -90 dBm
antenna1: 8741 secs ago.................. -87 dBm
w01-a104t(slot 0)
antenna0: 8735 secs ago.................. -88 dBm
antenna1: 8735 secs ago.................. -86 dBm
w01-hs301(slot 0)
antenna0: 8735 secs ago.................. -88 dBm
antenna1: 8735 secs ago.................. -88 dBm
w01-a112(slot 0)
antenna0: 8735 secs ago.................. -81 dBm
antenna1: 8735 secs ago.................. -81 dBm
w01-a112(slot 1)
antenna0: 8734 secs ago.................. -85 dBm
antenna1: 8734 secs ago.................. -85 dBm
w01-a118(slot 0)
antenna0: 8734 secs ago.................. -62 dBm
antenna1: 8734 secs ago.................. -62 dBm
w01-a118(slot 1)
antenna0: 8733 secs ago.................. -69 dBm

--More-- or (q)uit
antenna1: 8733 secs ago.................. -69 dBm
w01-a158(slot 0)
antenna0: 8734 secs ago.................. -65 dBm
antenna1: 8734 secs ago.................. -65 dBm
w01-a158(slot 1)
antenna0: 8734 secs ago.................. -79 dBm
antenna1: 8734 secs ago.................. -79 dBm
w01-a161b(slot 0)
antenna0: 8735 secs ago.................. -82 dBm
antenna1: 8735 secs ago.................. -82 dBm
w01-a161b(slot 1)
antenna0: 8733 secs ago.................. -85 dBm
antenna1: 8733 secs ago.................. -85 dBm
AP380E.4D56.CDA6(slot 0)
antenna0: 8735 secs ago.................. -83 dBm
antenna1: 8735 secs ago.................. -83 dBm
w01-a165(slot 0)
antenna0: 17325 secs ago................. -93 dBm
antenna1: 17325 secs ago................. -93 dBm
DNS Server details:
DNS server IP ............................. 208.67.222.222
DNS server IP ............................. 208.67.220.220
Assisted Roaming Prediction List details:

--More-- or (q)uit

Client Dhcp Required: False
Allowed (URL)IP Addresses
-------------------------

AVC Profile Name: ............................... none

Re: User Idle Timeout does not remove client

Saravanan Lakshmanan — Tue, 30 Jan 2018 18:57:25 GMT

2602i-1#sho cont d1 client
---Clients 0 AID VLAN Status:S/I/B/A Age TxQ-R(A) Mode Enc Key Rate Mask Tx Rx BVI Split-ACL Client-ACL WebAuth-ACL L2-ACL
1c4d.abab.xxxx 1 2 30 40044 000 0FE 555 0-0 (0) F380 200 0-10 00FFFFFF00000000000 010F 20F - -

Re: User Idle Timeout does not remove client

dporod — Tue, 30 Jan 2018 19:05:13 GMT

Does not like that command

w01-a120#sho cont d1 client
^
% Invalid input detected at '^' marker.

topic User Idle Timeout does not remove client in Wireless

User Idle Timeout does not remove client

Re: User Idle Timeout does not remove client

Re: User Idle Timeout does not remove client

Re: User Idle Timeout does not remove client

Re: User Idle Timeout does not remove client

Re: User Idle Timeout does not remove client

Re: User Idle Timeout does not remove client

Re: User Idle Timeout does not remove client

Re: User Idle Timeout does not remove client