topic iPad Connectivity Issues - Cisco 5520 WLC and 2802E Access Points in Wireless

iPad Connectivity Issues - Cisco 5520 WLC and 2802E Access Points

wifi1 — Tue, 11 Jan 2022 08:54:47 GMT

Good day

I have been having an issue with the connectivity of iPads which are attached to forklift trucks driving around production plants. The users have been reporting regular disconnects and it has been taking several minutes for them to reconnect. This has been happening across multiple sites and not limited to one area of the plant - it seems to occur randomly and frequently.

I have been running debug on a number of iPads on various sites and have not seen any problems with RSSI or any other reason that might cause disconnect. We have also done a post-deployment survey which confirms that the coverage throughout the plant is perfect.

Hardware Setup:

5520 WLC running 8.5.171.3 code (customer approved version)

2802E Access Points

SSID Setup:

WLAN Identifier.................................. 1
Profile Name..................................... XXXXXX
Network Name (SSID).............................. XXXXXX
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled
Network Admission Control
Client Profiling Status
Radius Profiling ............................ Disabled
DHCP ....................................... Disabled
HTTP ....................................... Disabled
Local Profiling ............................. Disabled
DHCP ....................................... Disabled
HTTP ....................................... Disabled
Radius-NAC State............................... Disabled
SNMP-NAC State................................. Disabled
Quarantine VLAN................................ 0
Maximum Clients Allowed.......................... Unlimited
Security Group Tag............................... Unknown(0)
Maximum number of Clients per AP Radio........... 200
ATF Policy....................................... 0
Number of Active Clients......................... 100
Exclusionlist.................................... Disabled
Session Timeout.................................. 86400 seconds
User Idle Timeout................................ Disabled
Sleep Client..................................... disable
Sleep Client Timeout............................. 720 minutes
Web Auth Captive Bypass Mode..................... None
User Idle Threshold.............................. 0 Bytes
NAS-identifier................................... none
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ data142
Multicast Interface.............................. Not Configured
WLAN IPv4 ACL.................................... unconfigured
WLAN IPv6 ACL.................................... unconfigured
WLAN Layer2 ACL.................................. unconfigured
WLAN URL ACL..................................... unconfigured
mDNS Status...................................... Disabled
mDNS Profile Name................................ default-mdns-profile
DHCP Server...................................... Default
Central NAT Peer-Peer Blocking................... Unknown
DHCP Address Assignment Required................. Disabled
Static IP client tunneling....................... Disabled
Tunnel Profile................................... Unconfigured
PMIPv6 Mobility Type............................. none
PMIPv6 MAG Profile........................... Unconfigured
PMIPv6 Default Realm......................... Unconfigured
PMIPv6 NAI Type.............................. Hexadecimal
PMIPv6 MAG location.......................... WLC
Quality of Service............................... Gold
Per-SSID Rate Limits............................. Upstream Downstream
Average Data Rate................................ 0 0
Average Realtime Data Rate....................... 0 0
Burst Data Rate.................................. 0 0
Burst Realtime Data Rate......................... 0 0
Per-Client Rate Limits........................... Upstream Downstream
Average Data Rate................................ 0 0
Average Realtime Data Rate....................... 0 0
Burst Data Rate.................................. 0 0
Burst Realtime Data Rate......................... 0 0
Scan Defer Priority.............................. 4,5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Allowed
WMM UAPSD Compliant Client Support............... Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Enabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
Passive Client Feature........................... Enabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... All
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
Authentication................................ Disabled
Accounting.................................... Disabled
Dynamic Interface............................. Disabled
Dynamic Interface Priority.................... wlan
Local EAP Authentication......................... Disabled
Radius NAI-Realm................................. Disabled
Mu-Mimo.......................................... Enabled
Security

802.11 Authentication:........................ Open System
FT Support.................................... Enabled
Static WEP Keys............................... Disabled
802.1X........................................ Disabled
Wi-Fi Protected Access (WPA/WPA2)............. Enabled
WPA (SSN IE)............................... Disabled
WPA2 (RSN IE).............................. Enabled
TKIP Cipher............................. Disabled
AES Cipher.............................. Enabled
CCMP256 Cipher.......................... Disabled
GCMP128 Cipher.......................... Disabled
GCMP256 Cipher.......................... Disabled
OSEN IE.................................... Disabled
Auth Key Management
802.1x.................................. Disabled
PSK..................................... Enabled
CCKM.................................... Disabled
FT-1X(802.11r).......................... Disabled
FT-PSK(802.11r)......................... Enabled
PMF-1X(802.11w)......................... Disabled
PMF-PSK(802.11w)........................ Disabled
OSEN-1X................................. Disabled
SUITEB-1X............................... Disabled
SUITEB192-1X............................ Disabled
FT Reassociation Timeout................... 20
FT Over-The-DS mode........................ Disabled
GTK Randomization.......................... Disabled
SKC Cache Support.......................... Disabled
CCKM TSF Tolerance......................... 1000
Wi-Fi Direct policy configured................ Disabled
EAP-Passthrough............................... Disabled
CKIP ......................................... Disabled
Web Based Authentication...................... Disabled
Web Authentication Timeout.................... 300
Web-Passthrough............................... Disabled
Mac-auth-server............................... 0.0.0.0
Web-portal-server............................. 0.0.0.0
qrscan-des-key................................
Conditional Web Redirect...................... Disabled
Splash-Page Web Redirect...................... Disabled
Auto Anchor................................... Disabled
FlexConnect Local Switching................... Disabled
FlexConnect Central Association............... Disabled
flexconnect Central Dhcp Flag................. Disabled
flexconnect nat-pat Flag...................... Disabled
flexconnect Dns Override Flag................. Disabled
flexconnect PPPoE pass-through................ Disabled
flexconnect local-switching IP-source-guar.... Disabled
FlexConnect Vlan based Central Switching ..... Disabled
FlexConnect Local Authentication.............. Disabled
FlexConnect Learn IP Address.................. Enabled
Client MFP.................................... Optional
PMF........................................... Disabled
PMF Association Comeback Time................. 1
PMF SA Query RetryTimeout..................... 200
Tkip MIC Countermeasure Hold-down Timer....... 60
Eap-params.................................... Disabled
AVC Visibilty.................................... Enabled
AVC Profile Name................................. None
OpenDns Profile Name............................. None
OpenDns Wlan Mode................................ ignore
Flow Monitor Name................................ None
Split Tunnel Configuration
Split Tunnel................................. Disabled
Call Snooping.................................... Disabled
Roamed Call Re-Anchor Policy..................... Disabled
SIP CAC Fail Send-486-Busy Policy................ Enabled
SIP CAC Fail Send Dis-Association Policy......... Disabled
KTS based CAC Policy............................. Disabled
Assisted Roaming Prediction Optimization......... Disabled
802.11k Neighbor List............................ Enabled
802.11k Neighbor List Dual Band.................. Disabled
802.11v Directed Multicast Service............... Enabled
802.11v BSS Max Idle Service..................... Enabled
802.11v BSS Transition Service................... Enabled
802.11v BSS Transition Disassoc Imminent......... Disabled
802.11v BSS Transition Disassoc Timer............ 200
802.11v BSS Transition OpRoam Disassoc Timer..... 40
DMS DB is empty
Band Select...................................... Enabled
Load Balancing................................... Disabled
Multicast Buffer................................. Disabled
Universal Ap Admin............................... Disabled
Broadcast Tagging................................ Disabled
PRP.............................................. Disabled

Mobility Anchor List
WLAN ID IP Address Status Priority
------- --------------- ------ --------

802.11u........................................ Disabled

MSAP Services.................................. Disabled

Local Policy
----------------
Priority Policy Name
-------- ---------------

Lync State ...................................... Disabled
Audio QoS Policy................................. Silver
Video QoS Policy................................. Silver
App-Share QoS Policy............................. Silver
File Transfer QoS Policy......................... Silver
Lync State ...................................... Disabled
Audio QoS Policy................................. Silver
Video QoS Policy................................. Silver
App-Share QoS Policy............................. Silver
File Transfer QoS Policy......................... Silver
File Transfer QoS Policy......................... Silver
QoS Fastlane Status.............................. Disable
Selective Reanchoring Status..................... Disable
Lobby Admin Access............................... Disabled

Fabric Status
--------------

Fabric status.................................... Disable
Vnid Name........................................
Vnid............................................. 0
Applied SGT Tag.................................. 0
Peer Ip Address.................................. 0.0.0.0
Flex Acl Name....................................
Flex Avc Policy Name.............................

U3-Interface................................... Disable

U3-Reporting Interval.......................... 30

Debug:

I have attached logs from the WLC while debugging iPad clients

If anyone has answers answers for this behaviour or any suggestions please let me know 😄

Thank you

Re: iPad Connectivity Issues - Cisco 5520 WLC and 2802E Access Points

Sandeep Choudhary — Tue, 11 Jan 2022 08:56:34 GMT

Please attach the debug client <mac address> logs.

Re: iPad Connectivity Issues - Cisco 5520 WLC and 2802E Access Points

wifi1 — Tue, 11 Jan 2022 09:06:41 GMT

Hi Sandeep,

My apologies I thought I did this already.

Please see attached.

Thank you

Re: iPad Connectivity Issues - Cisco 5520 WLC and 2802E Access Points

Leo Laohoo — Tue, 11 Jan 2022 09:11:33 GMT

@wifi1 wrote:

This has been happening across multiple sites and not limited to one area of the plant - it seems to occur randomly and frequently.

"What" is actually disconnecting? The iPad or the application the warehouse uses? Ping the iPad and let it roam around the warehouse. Is the ping drop and does not recover?

Next, use the iPad and Facetime video. Do the same thing. Did the video call drop or even stop?

Disable 802.11 k, v and r.

Re: iPad Connectivity Issues - Cisco 5520 WLC and 2802E Access Points

wifi1 — Tue, 11 Jan 2022 09:17:29 GMT

Hi Leo

"What" is actually disconnecting? The iPad or the application the warehouse uses? Ping the iPad and let it roam around the warehouse. Is the ping drop and does not recover? - The iPad loses connectivity and I am no longer able to ping it.

Next, use the iPad and Facetime video. Do the same thing. Did the video call drop or even stop? - I have not tested this yet.

Disable 802.11 k, v and r. - I can try this also and see if it improves.

Thank you

Re: iPad Connectivity Issues - Cisco 5520 WLC and 2802E Access Points

Mark Elsen — Tue, 11 Jan 2022 10:03:40 GMT

- Here is the output from your debug file when processed with : https://cway.cisco.com/wireless-debug-analyzer/

TimeTaskTranslated

Dec 14 15:23:56.561	*apfMsConnTask_4	Client roamed to AP/BSSID BSSID ac:3a:67:df:f2:8a AP WAP029
Dec 14 15:23:56.561	*apfMsConnTask_4	WLC recognizes that the client is 802.11r-capable
Dec 14 15:23:56.561	*apfMsConnTask_4	The Reassociation Request from the client comes with 1 PMKID
Dec 14 15:23:56.561	*apfMsConnTask_4	FT fast-secure roaming is successful for this client.
Dec 14 15:23:56.561	*apfMsConnTask_4	Client is entering the 802.1x or PSK Authentication state
Dec 14 15:23:56.561	*apfMsConnTask_4	WLC/AP is sending an Association Response to the client with status code 0 = Successful association
Dec 14 15:23:56.564	*Dot1x_NW_MsgTask_1	Client has completed PSK Dot1x or WEP authentication phase
Dec 14 15:23:56.564	*Dot1x_NW_MsgTask_1	Client has entered RUN state
Dec 14 15:24:09.774	*apfMsConnTask_4	Local roaming event triggered with the new AP to which the client roams.

Re: iPad Connectivity Issues - Cisco 5520 WLC and 2802E Access Points

Haydn Andrews — Tue, 11 Jan 2022 23:41:45 GMT

are other devices on the same SSID affected? What happens if you connect a windows laptop to the SSID same thing?

Re: iPad Connectivity Issues - Cisco 5520 WLC and 2802E Access Points

Haydn Andrews — Tue, 11 Jan 2022 23:42:14 GMT

also you might be able to use the airport utility on the iPad to get some logs of what the iPad is seeing

Re: iPad Connectivity Issues - Cisco 5520 WLC and 2802E Access Points

silvio.lui — Wed, 12 Jan 2022 00:06:42 GMT

Hello,

It's considering that no RF signal loss happening, so could you try changing these in your WLAN as good practie to apple devices (probably not solve but improve the apple devices)

Local Profiling ............................. Disabled --> Enable

Exclusionlist.................................... Disabled --> 60 sec

QoS Fastlane Status.............................. Disable --> Enable

in your WLAN:

- set AVC Profile = AUTOQOS-AVC-PROFILE

- set FastLane = Enable

FastLane will informs Apples devices that a special treatment for apps marking QoS

On the WLC check the client "show client detail xx:xx:xx:xx:xx:xx", and look for:

- Device type: check if recognize as Apple device

- FastLane Client = Yes

- RSSI = closer to 0 (usal range is -45 to -85 db)

- SNR = Rule of the thumb is above 20 is good (it's the strength that the device is hearing the AP)

- Clients rate statistics drobs = all zero packet drops

- Neraby AP = at least shows thee

If all ove these is good and the issue insist, and if your enviroment is a low client density try that:

- ensure that all APs is up 30 feet (9 meters)

- not mix APs models

- Disable 5Ghz for each antenna in this area, using only 2.4GHz

- Set all Antenna to use the same RF Channel (1 or 11).. sounds weird I know, but it's a rudimentary fast roaming approach, and it works well for RF handhelds. (Co-channel interferences will occurs, reduncing bandwidht but for low client density with disconnection, reduce the bandwidht is not a big deal.

Re: iPad Connectivity Issues - Cisco 5520 WLC and 2802E Access Points

wifi1 — Wed, 12 Jan 2022 17:38:47 GMT

Hi Haydn,

I did not know about this - I will have a look into it.

Thank you!

Re: iPad Connectivity Issues - Cisco 5520 WLC and 2802E Access Points

wifi1 — Wed, 12 Jan 2022 17:39:38 GMT

Hi Haydn

Yes I have connected the iPads to two other SSIDs and the users are reporting the same issues on there too.

Thank you