topic Re: AP 2702 dropping clients! in Wireless

AP 2702 dropping clients!

Moudar — Wed, 16 Feb 2022 13:38:55 GMT

I am receiving many complains about Teams and Skype being bad under video meetings, that the picture and voice freezes many times. When i check the logs of the AP that the client was connected to i see so many logs as:

#Dropping the auth req recvd in disabled BSSID.... with many MAC addresses which belong to different clients

Another log that comes often is:

%WIDS-6-SIG_ALARM_OFF: Attack is cleared on Sig:Standard Id:9 Channel:52

this logs comes with different channels and syslog numbers.

My envorniment is consist of many 2702 and 2802 AP which are at the same area. I dont know if this is the problem. But it is only some of my 2702 APs that have these logs not the 2802s!

My workround was to reboot the APs, some of them came back with the same logs after being rebooted and some not, still talking about 2702 APs.

Any thoughts about this?!

Re: AP 2702 dropping clients!

Flavio Miranda — Wed, 16 Feb 2022 14:07:49 GMT

It seems to me that you may have some neighbor with wIPS enabled. I had this problem more then once. Usually people who buy Meraki and dont know how to use it, let wIPS enable and they start to drop everything around.

I had to help somenone configure their Meraki once so that I could have my network stable again.

Re: AP 2702 dropping clients!

Moudar — Wed, 16 Feb 2022 14:19:50 GMT

It is only my network that runs the building and no other network are available!!

Re: AP 2702 dropping clients!

Georg Pauwen — Wed, 16 Feb 2022 14:39:15 GMT

Hello,

I wonder if these log messages are related to your problem at all. The WIDS messages could just be related to APs being discovered.

Do you have QoS enabled on the AP 2702 (which automatically enables WMM (Wi-Fi Multimedia) ?

Re: AP 2702 dropping clients!

Moudar — Wed, 16 Feb 2022 14:46:05 GMT

QoS is not enabled.

What about the first log: Dropping the auth req recvd in disabled BSSID ?

I have checked CSCve54287 which says that a reboot will fix the problem. Some APs seem to be OK after the reboot but other not!

Re: AP 2702 dropping clients!

Leo Laohoo — Wed, 16 Feb 2022 16:01:10 GMT

What, EXACTLY, is the problem?
Is this happening to one person('s device) or a lot of users?
What firmware is the controller running on?
Isolate and identify what wireless clients are affected (based on OS or SSID or location).
What, EXACTLY, is the error message being displayed?
What radio are the issue(s) more prominent?
Have you VERIFIED and replicated the issue?

Re: AP 2702 dropping clients!

Moudar — Thu, 17 Feb 2022 08:19:59 GMT

What, EXACTLY, is the problem?

Clients are complaining that camera under Teams and Skype video meetings freeze

is this happening to one person('s device) or a lot of users?

Happens to many users with Windows PC and Ipad

What firmware is the controller running on?

8.3.133, complains are comming only from one building not all my clients

Have you VERIFIED and replicated the issue?

try to understand what logs mean, will change the AP to different model and check if it will come with same logs

What radio are the issue(s) more prominent?

both 2,4 and 5

isolate and identify what wireless clients are affected (based on OS or SSID or location).

Windows 10 machines and Ipads. Windows and Ipad are connecting to two different SSIDs

What, EXACTLY, is the error message being displayed?

logs from the AP:

BSSID 84b8.0230.e4fd is disabled in rcvd auth req!
*Feb 15 11:38:13.351: Dropping the auth req recvd in disabled BSSID 84b8.0230.e4fd from the client algorithm 0 on Dot11Radio0
*Feb 15 11:38:13.663: BSSID 84b8.0230.e4fd is disabled in rcvd auth req!
*Feb 15 11:38:13.663: Dropping the auth req recvd in disabled BSSID 84b8.0230.e4fd from the client algorithm 0 on Dot11Radio0
*Feb 15 11:38:13.971: BSSID 84b8.0230.e4fd is disabled in rcvd auth req!
*Feb 15 11:38:13.971: Dropping the auth req recvd in disabled BSSID 84b8.0230.e4fd from the client algorithm 0 on Dot11Radio0
*Feb 15 11:38:14.283: BSSID 84b8.0230.e4fd is disabled in rcvd auth req!
*Feb 15 11:38:14.283: Dropping the auth req recvd in disabled BSSID 84b8.0230.e4fd from the client algorithm 0 on Dot11Radio0
*Feb 15 11:38:14.595: BSSID 84b8.0230.e4fd is disabled in rcvd auth req!
*Feb 15 11:38:14.595: Dropping the auth req recvd in disabled BSSID 84b8.0230.e4fd from the client algorithm 0 on Dot11Radio0
*Feb 15 11:39:25.127: BSSID 84b8.0230.e4fd is disabled in rcvd auth req!

Re: AP 2702 dropping clients!

Mark Elsen — Thu, 17 Feb 2022 09:35:10 GMT

- FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCve54287?rfs=iqvred

Re: AP 2702 dropping clients!

Moudar — Thu, 17 Feb 2022 09:54:22 GMT

Workround according to the webpage is to reboot the AP, which is not giving the desired result. I still getting Dropping logs!!

Re: AP 2702 dropping clients!

Mark Elsen — Thu, 17 Feb 2022 10:29:16 GMT

- Then you need to engage with Cisco TAC (mention the bug report too)

Re: AP 2702 dropping clients!

Rich R — Sat, 19 Feb 2022 09:57:29 GMT

What firmware is the controller running on?
8.3.133

Right that is your first problem - you're running on obsolete code. No point contacting TAC they'll just tell you to upgrade to supported code so that should be your starting point. You don't mention what model of WLC you're using so that affects what version of code you can upgrade to but you should probably be running 8.10.162.0 or 8.5.182.0/8.5.171.0

https://www.cisco.com/c/en/us/support/docs/wireless/wireless-lan-controller-software/200046-tac-recommended-aireos.html

Then if you still see the same problems then run client debugs on one of the clients experiencing problems and feed that into https://cway.cisco.com/wireless-debug-analyzer/

Re: AP 2702 dropping clients!

Moudar — Sat, 19 Feb 2022 14:45:44 GMT

we are using 5520 WLC

Have many 2600 AP model so we cant move to 8.10.162.0 just yet but we are planing to move to 8.5.182.0 soon.

Why is this happening only to 2700 model?

will run the analyzer and get back with result

Re: AP 2702 dropping clients!

Rich R — Sat, 19 Feb 2022 15:53:17 GMT

> Why is this happening only to 2700 model?

Sometimes a bug can affect a specific model or models of AP.

2600 is 11n, 2700 is 11ac wave 1, so you'd expect them to be running different code (although they are both running Cisco IOS). 2802 is 11ac wave 2 running AP-COS so another completely different set of code.

Re: AP 2702 dropping clients!

Leo Laohoo — Sat, 19 Feb 2022 23:38:35 GMT

@Moudar wrote:

Clients are complaining that camera under Teams and Skype video meetings freeze

Are they using MS Teams version 1.5.00.2164?

Re: AP 2702 dropping clients!

Moudar — Sun, 20 Feb 2022 20:39:02 GMT

It is version 1.4.00.35564

Re: AP 2702 dropping clients!

Moudar — Sun, 20 Feb 2022 20:42:49 GMT

I found some 2600 model with the same problem but never 2800!

I have many 1850 i will check them too

Re: AP 2702 dropping clients!

Scott Fella — Sun, 20 Feb 2022 21:20:26 GMT

My suggestion is to go onsite and test and replicate the issue. This way you can run a debug on the client and provide that to TAC. Some things that can also cause issues is that the older ap's could be in locations that are not meeting the RF requirements for today's app's. Can you ensure that your have -67dBm with an SNR of at least 25 dB from all locations or from locations where you are able to replicate? Compare the ap layout from the areas or where the older ap's are vs the newer ap's. Then after you are able to replicate, then look at the device and make sure the wireless profiles are correct and the nic drivers are up to date. If you can replicate the issue and also not replicate with another device, then that tells you something. The issue can be with a specific device, NIC, firmware, GPO wireless policy, etc. You need to start eliminating variables in order to resolve the issue. Rebooting the AP to fix the issue can be an issue with the code running on the controller also, or the ap going bad. Swap a 2702 with another 2702 you have as a spare or in another location and see if the problem follows the ap or not. That can help determine if maybe there is an issue with a specific ap or AP's. Looking at ap log's should not be your first priority, it should be understanding what the users are seeing, by being there and replicating it. Then you can use the debugs and the logs to try to correlate what might be the issue. With Windows, you can also run a netsh show wlan reports and that can provide you with details if the device is roaming, switching to a different SSID, resetting due to a failure, etc. You can also adjust the time it collects the data.

Analyze the wireless network report (microsoft.com)

Re: AP 2702 dropping clients!

ChristoferOlsson9288 — Tue, 31 May 2022 08:03:08 GMT

Why RSSI should be -67 and SNR should be 25 ? or better of course!

Is there any documentation that says these numbers?

Re: AP 2702 dropping clients!

Rich R — Tue, 31 May 2022 08:32:23 GMT

Take a look at https://www.cisco.com/c/en/us/products/collateral/wireless/access-points/enterprise-best-practices-ios-ipados-wp.html

It's focused on Apple devices but also a good general guideline. It says:

https://www.cisco.com/c/en/us/products/collateral/wireless/access-points/enterprise-best-practices-ios-ipados-wp.html#iOSiPadOSandmacOSdevicesonCiscoWLANbestpracticessummary

"Cisco always recommends that Apple devices observe a minimum of two APs with an RSSI measurement of -67 dBm or better. Mac computers can also perform optimally when observing a minimum of two APs with an RSSI measurement of -72 dBm or better."

and

" A minimum SNR of 25 dB."

Re: AP 2702 dropping clients!

ChristoferOlsson9288 — Tue, 31 May 2022 08:46:20 GMT

Unfortunately, we have very limited usage of Apple devices. We use only Ipads in our schools and these are not used for Teams meetings.

What we use is Windows 10,11 and Android devices, maybe they share the same WLAN best practices with Apple. I will consider these WLAN best practices as a guideline.