More than 60 secs delay before detecting ROAMING_TRIGGER_AP_DISCONNECT

[Konstantin Kabassanov]

Hello,

Wireless phones 7921G with firmware 1.4.2 spend more than one minute before detecting they are not associated anymore to access points.

Is there anything that can be configured or is it simply a bug?

Thanks.

[Konstantin Kabassanov]

Hi again,

Using the client debug on the wlc, I got this:

Apr 20 12:06:39 wlc1 wlc1: *Dot1x_NW_MsgTask_0: Apr 20 12:06:39.746: %DOT1X-3-INVALID_REPLAY_CTR: 1x_eapkey.c:360 Invalid replay counter from client 00:1f:6c:77:78:ba - got 00 00 00 00 00 00 00 02, expected 00 00 00 00 00 00 00 05

Apr 20 12:06:40 wlc1 wlc1: *dot1xMsgTask: Apr 20 12:06:40.953: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 00:1f:6c:77:78:ba

Apr 20 12:08:07 wlc1 wlc1: *Dot1x_NW_MsgTask_0: Apr 20 12:08:07.048: %DOT1X-3-ABORT_AUTH: 1x_bauth_sm.c:447 Authentication aborted for client 00:1f:6c:77:78:ba

On the radius server I can see:

Apr 20 12:07:00 rad1 radiusd[10962]: Disconnect: [myusername] (did 00-23-eb-08-22-30 cli 00-1f-6c-77-78-ba port 1 ip 10.3.15.233) 69755 seconds

Apr 20 12:08:13 rad1 radiusd[10962]: Login OK: [001f6c7778ba] (from client wlc1 port 1 cli 00-1f-6c-77-78-ba)

Apr 20 12:08:13 rad1 radiusd[10962]: Login OK: [myusername] (from client wlc1 port 0 via TLS tunnel)

Apr 20 12:08:13 rad1 radiusd[10962]: Login OK: [myusername] (from client wlc1 port 1 cli 00-1f-6c-77-78-ba)

Apr 20 12:08:20 rad1 radiusd[10962]: Connect: [myusername] (did 00-23-eb-08-22-30 cli 00-1f-6c-77-78-ba port 1 ip 10.3.15.233)

I don't know if it helps...