topic Re: Clients deauthenticating - ReasonCode: 108 in Wireless

Clients deauthenticating - ReasonCode: 108

Rares — Mon, 05 Jul 2021 20:13:12 GMT

Hello,

We've been having some issues with multiple devices that are being deauthenticated with ReasonCode: 108. The devices either auth using certificates, or PEAP username and pass, and on either type of authentication the WLC has log entries throwing ReasonCode: 108:

Wed Feb 10 13:13:15 2021 Client Disassociated: MACAddress:b4:69:21:XX:XX:XX Base Radio MAC:74:88:bb:XX:XX:XX Slot: 1 User Name: *************, Ip Address: 10.XX.XX.XX Reason:unknown ReasonCode: 108 TxPkts: 110672l TxBytes: 50729931l RxPkts: 109807l RxBytes: 58525078l
Wed Feb 10 13:13:15 2021 Client Deauthenticated: MACAddress:b4:69:21:XX:XX:XX Base Radio MAC:74:88:bb:XX:XX:XX Slot: 1 User Name: ************* Ip Address: 10.XX.XX.XX Reason:unknown ReasonCode: 108
Wed Feb 10 13:13:15 2021 Client Disassociated: MACAddress:b4:69:21:XX:XX:XX Base Radio MAC:74:88:bb:XX:XX:XX Slot: 1 User Name: *************, Ip Address: 10.XX.XX.XX Reason:Un-specified reason ReasonCode: 1 TxPkts: 110672l TxBytes: 50729931l RxPkts: 109807l RxBytes: 58525078l
Wed Feb 10 13:13:15 2021 Client Disassociated: MACAddress:b4:69:21:XX:XX:XX Base Radio MAC:74:88:bb:XX:XX:XX Slot: 1 User Name: *************, Ip Address: 10.XX.XX.XX Reason:Un-specified reason ReasonCode: 1

From what I could gather, the devices actually remain associated to the SSID, have an IP address, but stop responding to ping.

The APs are AIR-AP2802E-E-K9, they're connected to Cisco 3504 WLCs, and broadcast two SSIDs (main WLAN on 5GHz only, and a guest WLAN). The security policies that are applied on the main SSID (the one that we're having issues with) are [WPA2][Auth(802.1X + CCKM)].

Has anyone had this issue before, or know what this reason code points to? I tried searching the web for additional info about it, but I haven't had too much luck...

Thank you.

Re: Clients deauthenticating - ReasonCode: 108

patoberli — Thu, 11 Feb 2021 09:47:10 GMT

All the same type of clients? Then it could be a driver issue.

Which software version is running on the WLC?

Re: Clients deauthenticating - ReasonCode: 108

Rares — Thu, 11 Feb 2021 10:57:15 GMT

Based on the latest logs, most clients that have this issue are Apple devices, but there are some instances of a Huawei phone, a Xiaomi phone, and an Intel NIC that have this problem as well. Haven't seen this pop-up on laptops or other Android phones for now...

The WLC software version is 8.5.161.0 .

Re: Clients deauthenticating - ReasonCode: 108

patoberli — Thu, 11 Feb 2021 11:45:19 GMT

Then it might be some 802.11r issue. Do you have FT enabled on the SSID?

Re: Clients deauthenticating - ReasonCode: 108

Rares — Fri, 12 Feb 2021 12:26:07 GMT

No, FT is disabled on the SSID.

Re: Clients deauthenticating - ReasonCode: 108

patoberli — Mon, 15 Feb 2021 14:07:04 GMT

Then I'm sadly out of ideas and suggest opening a TAC with Cisco.

Re: Clients deauthenticating - ReasonCode: 108

Grendizer — Mon, 15 Feb 2021 17:47:42 GMT

Most likely this is a bug, you can open a TAC case to identify it or you can try to upgrade to 8.5.171.0 released a few days ago (best if you can upgrade to 8.10.142.0 after checking the compatibility matrix https://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html)

Re: Clients deauthenticating - ReasonCode: 108

Rares — Tue, 16 Feb 2021 07:49:19 GMT

Thank you for your replies. I'll open a TAC case.