topic Re: MAC Users disconnecting from WLC in Wireless

MAC Users disconnecting from WLC

iptech911 — Fri, 06 Aug 2021 08:53:27 GMT

Hello Community,

We are using WLC 4400 series with ACS 4.1. Users on the network with MAC OS are continuously disconnecting. Have tried to disable the session time out under the Advance settings but no luck.

Any help is appreciated.

Re: MAC Users disconnecting from WLC

Mark Elsen — Fri, 06 Aug 2021 13:55:03 GMT

- You may debug a particular mac(-address) on the controller and have it analyzed with :

https://cway.cisco.com/tools/WirelessDebugAnalyzer/

You can also have a sanity check of the controller configuration with :

https://cway.cisco.com/tools/WirelessAnalyzer/

Re: MAC Users disconnecting from WLC

iptech911 — Sat, 07 Aug 2021 16:10:33 GMT

Thanks for the suggestion.

The page doesn't say it supports 4400 series. Will it work or is there another tool?

This tool parses debug log files for AireOS (WLC 5500/2500/8500/7500/WISM1-2/vWLC)

Thanks.

Re: MAC Users disconnecting from WLC

Mark Elsen — Sun, 08 Aug 2021 06:49:19 GMT

- You may have a try anyway , it is for instance tagged in this document :

https://community.cisco.com/t5/wireless-mobility-documents/wlc-config-analyzer/ta-p/3119057

Re: MAC Users disconnecting from WLC

iptech911 — Sun, 08 Aug 2021 08:40:53 GMT

I tried using this https://cway.cisco.com/wireless-config-analyzer/ and uploaded the running config of the WLC but the page just refreshes back to the same with no error or output at all.

Not sure if that's a sign of not being supported 🙂

Re: MAC Users disconnecting from WLC

Mark Elsen — Sun, 08 Aug 2021 09:37:16 GMT

- May depend on the format which was used when it was uploaded , you may export the running config to a tftp server using the GUI or use show run , and save the output to a file but then , in between command prompting must be disabled with config paging disable , FYI :

https://community.cisco.com/t5/networking-documents/show-the-complete-configuration-without-breaks-pauses-on-cisco/ta-p/3115114

Re: MAC Users disconnecting from WLC

patoberli — Mon, 09 Aug 2021 15:23:19 GMT

This is a very old and since many years unsupported WLC.

My guess is, you run a buggy software version.

What you can do, make sure 802.11r (Fast Transition) is disabled on the SSID (not sure if the 4400 series ever supported that anyway). This is the main problem causing feature. Then also make sure that DHCP Address Assignment is not set to required on the SSID.

Other than that we need more output of an affected client (debug client aa:bb....) while the problem happens.

Re: MAC Users disconnecting from WLC

iptech911 — Thu, 12 Aug 2021 18:08:28 GMT

That option doesn't seem to be there. Attached is the screenshot of the options.

Re: MAC Users disconnecting from WLC

iptech911 — Thu, 12 Aug 2021 18:09:05 GMT

I tried downloading the running config on TFTP server and pasting the config on the tool but it just refreshes with no result.

Re: MAC Users disconnecting from WLC

patoberli — Fri, 13 Aug 2021 07:27:25 GMT

Fast Transition would be under Security - Layer 2. Can you also share a screenshot of that?

Also, if not needed, disable Aironet IE and consider disabling Client Band Select for more stability. What it does is: https://ccie-or-null.net/tag/client-band-select/

On the other hand, I would enable Client Exclusion and set it to 5 seconds, if you use WPA2-Enterprise. That takes a bit load of your Radius servers (if in use).

Re: MAC Users disconnecting from WLC

iptech911 — Fri, 13 Aug 2021 09:22:50 GMT

Attached is the screenshot. Client band selection was actually disabled this whole time and I just enabled it now thinking that WLC was forcing the band. Not sure the real purpose of it though.

What is Aironet IE for?

Re: MAC Users disconnecting from WLC

Mark Elsen — Fri, 13 Aug 2021 10:23:00 GMT

- FYI : https://www.cisco.com/c/en/us/td/docs/wireless/controller/best-practices/base/b_bp_wlc/infrastructure.html#:~:text=Aironet%20IE%20is%20a%20Cisco,probe%20responses%20of%20the%20WLAN.&text=Selected%E2%80%94CCX%20Aironet%20IE%20disabled%20on%20all%20WLANs.

Re: MAC Users disconnecting from WLC

patoberli — Fri, 13 Aug 2021 10:46:57 GMT

Here we probably have the problem. You have WPA1 enabled. Apple devices really don't like that (together with WPA2 enabled) and all devices released in the last ~10 years support at least WPA2 + AES.

So disable "WPA Policy" and "WPA Encryption AES" and only leave WPA2 enabled with AES. On some devices you will probably need to delete the old wireless profile and then do a fresh connection on your SSID. Please note, WPA1 is by now also very insecure.