Raspberry disconnection

[Ingénierie RCI]

Hi,

We have concerns about the use of an SSID dedicated to production, on which are Raspberry pi connected in 2. 4GHz.
Users use Raspberry pi to connect to remote desktops, and the slightest disconnection cuts off the session, which sometimes happens every 5 minutes.
The Raspberry are fixed but pass from one terminal to another for no reason.

Do you have an idea to resolve this problem?

We tried to fix the channels to the terminals without success.
The controller is a C9800-CL in version 17.9.4 and the terminals where the problem appared are 9120AXE-E and AIR-CAP2702I-E-K9.
Connection to the dedicated SSID is made via a PSK key.

I remain available to discuss and share certain configuration information with you.
I thank you in advance for any help you can provide.

Regards

Jeff

[cybersecurite2023]

"slightest disconnection cuts off the session" Est-ce que vous avez un log du problème ?

[Ingénierie RCI]

Bonjour,

Merci pour votre retour. Voici les logs obtenus concernant le périphérique :

2024/02/10 16:11:48.089247298 {wncd_x_R0-0}{1}: [client-orch-sm] [14980]: (note): MAC: b827.eb7a.df83 Client delete initiated. Reason: CO_CLIENT_DELETE_REASON_SESSION_TIMEOUT, details: , fsm-state transition 00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|01|07|15|1a|1b|2c|37|46|48|4a|4c|51|60|62|83|ab|
2024/02/10 16:11:48.089343300 {wncd_x_R0-0}{1}: [client-orch-sm] [14980]: (note): MAC: b827.eb7a.df83 Delete mobile payload sent for BSSID: 1484.73a7.0960 WTP mac: 1484.73a7.0960 slot id: 0
2024/02/10 16:11:48.089351400 {wncd_x_R0-0}{1}: [client-orch-state] [14980]: (note): MAC: b827.eb7a.df83 Client state transition: S_CO_RUN -> S_CO_DELETE_IN_PROGRESS
2024/02/10 16:11:48.089654507 {wncd_x_R0-0}{1}: [client-orch-sm] [14980]: (ERR): MAC: b827.eb7a.df83 vlan_mode_api: Sanet policy returned failure
2024/02/10 16:11:48.089811210 {wncd_x_R0-0}{1}: [dpath_svc] [14980]: (note): MAC: b827.eb7a.df83 Client datapath entry deleted for ifid 0xa000011f
2024/02/10 16:11:48.090435523 {wncd_x_R0-0}{1}: [client-orch-sm] [14980]: (ERR): MAC: 0000.0000.0000 vlan_mode_api: fsm_ctxt not found
2024/02/10 16:11:48.090505825 {wncd_x_R0-0}{1}: [client-orch-sm] [14980]: (ERR): MAC: 0000.0000.0000 vlan_mode_api: fsm_ctxt not found
2024/02/10 16:11:48.090606027 {wncd_x_R0-0}{1}: [client-orch-state] [14980]: (note): MAC: b827.eb7a.df83 Client state transition: S_CO_DELETE_IN_PROGRESS -> S_CO_DELETED
2024/02/10 16:11:48.863400755 {wncd_x_R0-0}{1}: [client-orch-sm] [14980]: (note): MAC: b827.eb7a.df83 Association received. BSSID 6cd6.e36c.7ec0, WLAN Wi-Fi_Prod, Slot 0 AP 6cd6.e36c.7ec0, WIFIAP147
2024/02/10 16:11:48.863535558 {wncd_x_R0-0}{1}: [client-orch-state] [14980]: (note): MAC: b827.eb7a.df83 Client state transition: S_CO_INIT -> S_CO_ASSOCIATING
2024/02/10 16:11:48.863835964 {wncd_x_R0-0}{1}: [dot11] [14980]: (note): MAC: b827.eb7a.df83 Association success. AID 1, Roaming = False, WGB = False, 11r = False, 11w = False Fast roam = False
2024/02/10 16:11:48.863950867 {wncd_x_R0-0}{1}: [client-orch-state] [14980]: (note): MAC: b827.eb7a.df83 Client state transition: S_CO_ASSOCIATING -> S_CO_L2_AUTH_IN_PROGRESS
2024/02/10 16:11:48.863974867 {wncd_x_R0-0}{1}: [client-auth] [14980]: (note): MAC: b827.eb7a.df83 L2 Authentication initiated. method PSK, Policy VLAN 151, AAA override = 0, NAC = 0
2024/02/10 16:11:48.864626781 {wncd_x_R0-0}{1}: [ewlc-infra-evq] [14980]: (note): Authentication Success. Resolved Policy bitmap:11 for client b827.eb7a.df83
2024/02/10 16:11:48.864814685 {wncd_x_R0-0}{1}: [client-auth] [14980]: (note): MAC: b827.eb7a.df83 ADD MOBILE sent. Client state flags: 0x1 BSSID: MAC: 6cd6.e36c.7ec0 capwap IFID: 0x9000012c, Add mobiles sent: 1
2024/02/10 16:11:48.947437220 {wncd_x_R0-0}{1}: [client-keymgmt] [14980]: (note): MAC: b827.eb7a.df83 EAP Key management successful. AKM:PSK Cipher:CCMP WPA Version: WPA2
2024/02/10 16:11:48.947550222 {wncd_x_R0-0}{1}: [client-auth] [14980]: (note): MAC: b827.eb7a.df83 L2 PSK Authentication Success. EAP type: NA, Resolved VLAN: 151, Audit Session id: 790A10AC001F457093931DE8
2024/02/10 16:11:48.947694025 {wncd_x_R0-0}{1}: [client-orch-sm] [14980]: (note): MAC: b827.eb7a.df83 Mobility discovery triggered. Client mode: Flex - Local Switching
2024/02/10 16:11:48.947699125 {wncd_x_R0-0}{1}: [client-orch-state] [14980]: (note): MAC: b827.eb7a.df83 Client state transition: S_CO_L2_AUTH_IN_PROGRESS -> S_CO_MOBILITY_DISCOVERY_IN_PROGRESS
2024/02/10 16:11:48.949076754 {wncd_x_R0-0}{1}: [mm-client] [14980]: (note): MAC: b827.eb7a.df83 Mobility Successful. Roam Type None, Sub Roam Type MM_SUB_ROAM_TYPE_NONE, Client IFID: 0xa000011f, Client Role: Local PoA: 0x9000012c PoP: 0x0
2024/02/10 16:11:48.949295059 {wncd_x_R0-0}{1}: [client-auth] [14980]: (note): MAC: b827.eb7a.df83 ADD MOBILE sent. Client state flags: 0x2 BSSID: MAC: 6cd6.e36c.7ec0 capwap IFID: 0x9000012c, Add mobiles sent: 1
2024/02/10 16:11:48.949329560 {wncd_x_R0-0}{1}: [client-orch-state] [14980]: (note): MAC: b827.eb7a.df83 Client state transition: S_CO_MOBILITY_DISCOVERY_IN_PROGRESS -> S_CO_DPATH_PLUMB_IN_PROGRESS
2024/02/10 16:11:48.949431562 {wncd_x_R0-0}{1}: [dot11] [14980]: (note): MAC: b827.eb7a.df83 Client datapath entry params - ssid:BACCARAT_Prod,slot_id:0 bssid ifid: 0x0, radio_ifid: 0x9000012b, wlan_ifid: 0xf0400007
2024/02/10 16:11:48.950239379 {wncd_x_R0-0}{1}: [dpath_svc] [14980]: (note): MAC: b827.eb7a.df83 Client datapath entry created for ifid 0xa000011f
2024/02/10 16:11:48.950880692 {wncd_x_R0-0}{1}: [client-orch-state] [14980]: (note): MAC: b827.eb7a.df83 Client state transition: S_CO_DPATH_PLUMB_IN_PROGRESS -> S_CO_IP_LEARN_IN_PROGRESS
2024/02/10 16:11:49.293666990 {wncd_x_R0-0}{1}: [client-iplearn] [14980]: (note): MAC: b827.eb7a.df83 Client IP learn successful. Method: DHCP IP: 192.168.151.150
2024/02/10 16:11:49.294428306 {wncd_x_R0-0}{1}: [client-orch-state] [14980]: (note): MAC: b827.eb7a.df83 Client state transition: S_CO_IP_LEARN_IN_PROGRESS -> S_CO_RUN
2024/02/10 16:13:11.851316865 {wncd_x_R0-0}{1}: [client-orch-sm] [14980]: (note): MAC: b827.eb7a.df83 Re-Association received. BSSID 1484.73a7.0960, WLAN Wi-Fi_Prod, Slot 0 AP 1484.73a7.0960, WIFIAP149, old BSSID 6cd6.e36c.7ec0
2024/02/10 16:13:11.851929778 {wncd_x_R0-0}{1}: [dot11] [14980]: (note): MAC: b827.eb7a.df83 Association success. AID 1, Roaming = True, WGB = False, 11r = False, 11w = False Fast roam = False
2024/02/10 16:13:11.852186383 {wncd_x_R0-0}{1}: [client-orch-sm] [14980]: (note): MAC: b827.eb7a.df83 Delete mobile payload sent for BSSID: 6cd6.e36c.7ec0 WTP mac: 6cd6.e36c.7ec0 slot id: 0
2024/02/10 16:13:11.852296585 {wncd_x_R0-0}{1}: [client-orch-state] [14980]: (note): MAC: b827.eb7a.df83 Client state transition: S_CO_RUN -> S_CO_L2_AUTH_IN_PROGRESS
2024/02/10 16:13:11.853398508 {wncd_x_R0-0}{1}: [client-auth] [14980]: (note): MAC: b827.eb7a.df83 ADD MOBILE sent. Client state flags: 0x1 BSSID: MAC: 1484.73a7.0960 capwap IFID: 0x900001f7, Add mobiles sent: 1
2024/02/10 16:13:12.493310446 {wncd_x_R0-0}{1}: [client-orch-sm] [14980]: (note): MAC: b827.eb7a.df83 Association received. BSSID 1484.73a7.0960, WLAN Wi-Fi_Prod, Slot 0 AP 1484.73a7.0960, WIFIAP149, old BSSID 1484.73a7.0960
2024/02/10 16:13:12.493372248 {wncd_x_R0-0}{1}: [client-orch-state] [14980]: (note): MAC: b827.eb7a.df83 Client state transition: S_CO_L2_AUTH_IN_PROGRESS -> S_CO_L2_AUTH_IN_PROGRESS
2024/02/10 16:13:12.493534251 {wncd_x_R0-0}{1}: [dot11] [14980]: (note): MAC: b827.eb7a.df83 Association success. AID 1, Roaming = False, WGB = False, 11r = False, 11w = False Fast roam = False
2024/02/10 16:13:12.493630653 {wncd_x_R0-0}{1}: [client-orch-state] [14980]: (note): MAC: b827.eb7a.df83 Client state transition: S_CO_L2_AUTH_IN_PROGRESS -> S_CO_L2_AUTH_IN_PROGRESS
2024/02/10 16:13:12.493781856 {wncd_x_R0-0}{1}: [client-auth] [14980]: (note): MAC: b827.eb7a.df83 ADD MOBILE sent. Client state flags: 0x1 BSSID: MAC: 1484.73a7.0960 capwap IFID: 0x900001f7, Add mobiles sent: 1
2024/02/10 16:13:12.586248198 {wncd_x_R0-0}{1}: [client-keymgmt] [14980]: (note): MAC: b827.eb7a.df83 EAP Key management successful. AKM:PSK Cipher:CCMP WPA Version: WPA2
2024/02/10 16:13:12.586333900 {wncd_x_R0-0}{1}: [client-auth] [14980]: (note): MAC: b827.eb7a.df83 L2 PSK Authentication Success. EAP type: NA, Resolved VLAN: 151, Audit Session id: 790A10AC001F457093931DE8
2024/02/10 16:13:12.586430402 {wncd_x_R0-0}{1}: [client-orch-sm] [14980]: (note): MAC: b827.eb7a.df83 Mobility discovery triggered. Client mode: Flex - Local Switching
2024/02/10 16:13:12.586433302 {wncd_x_R0-0}{1}: [client-orch-state] [14980]: (note): MAC: b827.eb7a.df83 Client state transition: S_CO_L2_AUTH_IN_PROGRESS -> S_CO_MOBILITY_DISCOVERY_IN_PROGRESS
2024/02/10 16:13:12.586457602 {wncd_x_R0-0}{1}: [mm-client] [14980]: (note): MAC: b827.eb7a.df83 Mobility Successful. Roam Type None, Sub Roam Type MM_SUB_ROAM_TYPE_INTRA_INSTANCE, Previous BSSID MAC: 6cd6.e36c.7ec0 Client IFID: 0xa000011f, Client Role: Local PoA: 0x900001f7 PoP: 0x0
2024/02/10 16:13:12.586664307 {wncd_x_R0-0}{1}: [client-auth] [14980]: (note): MAC: b827.eb7a.df83 ADD MOBILE sent. Client state flags: 0x2 BSSID: MAC: 1484.73a7.0960 capwap IFID: 0x900001f7, Add mobiles sent: 1
2024/02/10 16:13:12.586692007 {wncd_x_R0-0}{1}: [client-orch-state] [14980]: (note): MAC: b827.eb7a.df83 Client state transition: S_CO_MOBILITY_DISCOVERY_IN_PROGRESS -> S_CO_DPATH_PLUMB_IN_PROGRESS
2024/02/10 16:13:12.586883311 {wncd_x_R0-0}{1}: [client-orch-state] [14980]: (note): MAC: b827.eb7a.df83 Client state transition: S_CO_DPATH_PLUMB_IN_PROGRESS -> S_CO_IP_LEARN_IN_PROGRESS
2024/02/10 16:13:12.587101716 {wncd_x_R0-0}{1}: [client-orch-state] [14980]: (note): MAC: b827.eb7a.df83 Client state transition: S_CO_IP_LEARN_IN_PROGRESS -> S_CO_RUN

Il n'y a pas d'informations qui indiquent pourquoi le périphérique change de point d'accès. Nous avons juste l'information "Re-Association received".

Cordialement.

[cybersecurite2023]

Il peut s'agir de la variable idle timeout par wlan au niveau du controleur.

Voir:

config network useridletimeout timeout -in-seconds
The valid range is 15 to 100000 seconds. The default value is 300 seconds (c'est justement 5 minutes)
User Idle Timeout per WLAN

https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-3/config-guide/b_cg83/wlan_timeouts.pdf

Ou d'un bug, au quel cas cela peut valoir de coût d'ouvrir un case au TAC.

[Ingénierie RCI]

Bonjour,

Merci pour votre retour, je vais modifier ces paramètres pour rallonger la durée du timeout.

Cordialement.