Solved: Re: Apple MacBook Pro dropping wireless connection - Page 4

s-pirrello · ‎11-07-2011

Hi,

We have many MacBook pros that are having a hard time staying connected on wireless. Often times a user can be connected for only minutes at a time. Our wireless environment consists of 1142s and 3502 series access points. We use WPA2 Enterprise for authentication via ACS server 5.x.

The Windows 7 machines usually never have an issue. Can someone please provide some insight.?

*we use Lion OSX on our Macs.

This Discussion has been converted into a Document:- https://supportforums.cisco.com/docs/DOC-26228

jonabaker · ‎05-07-2013

Thanks Scott. I can verify that I am using WPA/WPA2 with AES. After I saw your post I disabled session timeout and unfortunately am seeing the same issue today after that change. To be specific, I can be connected for an entire day on other wireless networks without dicsonnect but on this one, best case scenario I can be connected for a few hours and often far less before I get diconnected and then sometimes auto-reconnected and other times seems I need to shut down my wireless and turn it back on to get reconnected.

jonabaker · ‎05-07-2013

Scott,

To be clear I AM using AES and not TKIP.

jonabaker · ‎05-16-2013

So does anyone have any further input for me on this issue with dropping connections?

Scott Fella · ‎05-16-2013

I have a macbook pro and a macair along with an iPad and iPhone and what I have to do is make sure session timeout is disabled, load balancing is disabled, I only use WPA2/AES and I also have only use All Radios Policies, which shouldn't make a difference. This is what I setup in my home lab and at my customers with Apple devices.

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

-Scott
*** Please rate helpful posts ***

Saravanan Lakshmanan · ‎05-15-2013

#Load balacing feature is generally trouble in high density environment.

#Also not useful when client supports 2.4ghz only.

#This is a native cisco feature that require ccx certified client, since apple is not part of ccx this will not work as expected.

Martin · ‎07-22-2013

Hi,

I am having the same problem with two iPhone 4s's dropping out but not my ipad which is on the 5gig the iPhones are only on the 2.4gig.

I have looked to try and disable the client load balancing but cant seem to find it in the web interface at all i have software version 15.2(2)JB, the client band selection is disabled.

I am using an 1142n AP

Anyone got any ideas please?

George Stefanick · ‎07-22-2013

Martin

Sounds like you are using an access point in autonomous mode is that correct ?

If so, the load balance feature mentioned in this thread is for controllers. Post your autonomous access point config so we can take a peek.

Sent from Cisco Technical Support iPhone App

"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
___________________________________________________________

Martin · ‎07-22-2013

Hi yes i have two of them running in Autonomous mode, as requested i have pasted in the config of one of them

Current configuration : 2596 bytes

!

! Last configuration change at 19:09:35 UTC Tue Mar 9 1993 by Marty

version 15.2

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

service password-encryption

!

hostname Downstairs_AP

!

logging rate-limit console 9

!

aaa new-model

!

aaa authentication login default local

aaa authentication login CON local line

aaa authentication login VTY local line

aaa authorization exec default local

!

aaa session-id common

ip cef

no ip domain lookup

ip domain name martynet.co.uk

!

dot11 syslog

!

dot11 ssid MartyNet

authentication open

authentication key-management wpa version 2

guest-mode

wpa-psk ascii 7 09681E07491603430A

!

dot11 ssid MartyNet-5gig

authentication open

authentication key-management wpa version 2

guest-mode

wpa-psk ascii 7 143342055C173E7A25

!

crypto pki token default removal timeout 0

!

username marty privilege 15 secret 5 $1$QDkM$TDkRQFbzAIY2XZ6gNKtUq.

username helen privilege 15 secret 5 $1$..DI$Oh.Lg4sbKyof.nlMjL0DP/

!

bridge irb

!

interface Dot11Radio0

no ip address

!

encryption mode ciphers aes-ccm tkip

!

ssid MartyNet

!

countermeasure tkip hold-time 0

antenna gain 0

station-role root

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 spanning-disabled

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

!

interface Dot11Radio1

no ip address

!

encryption mode ciphers aes-ccm tkip

!

ssid MartyNet-5gig

!

countermeasure tkip hold-time 0

antenna gain 0

no dfs band block

channel dfs

station-role root

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 spanning-disabled

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

!

interface GigabitEthernet0

no ip address

duplex auto

speed auto

no keepalive

bridge-group 1

bridge-group 1 spanning-disabled

no bridge-group 1 source-learning

!

interface BVI1

description Local Lan

ip address 10.10.0.6 255.255.0.0

!

ip default-gateway 10.10.0.1

ip forward-protocol nd

ip http server

ip http authentication aaa

no ip http secure-server

ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag

ip route 0.0.0.0 0.0.0.0 10.10.0.1

!

access-list 111 permit tcp any any neq telnet

!

bridge 1 route ip

!

line con 0

access-class 111 in

exec-timeout 0 0

logging synchronous

login authentication CON

line vty 0 4

access-class 111 in

exec-timeout 0 0

logging synchronous

login authentication VTY

transport input ssh

!

end

Cheers

Martin

Scott Fella · ‎07-22-2013

You have wpa2 configured so you should not have TKIP configured. TKIP is only used for WPA v1. WPA v2 uses AES.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***

Martin · ‎07-22-2013

I did have that off originally but gad the same issue ill take it off again. Any other ideas what's wrong ?

Cheers

Sent from Cisco Technical Support iPhone App

Scott Fella · ‎07-22-2013

Well it's a standard to only use AES with WPA v2 and only use TKIP with WPA v1. Apple devices are affected more than any other devices I have seen. I have a MacBook Pro, so I know how these things act like.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***

Martin · ‎07-22-2013

I have now taken off the TKIP and its better but it's still dropping at random times

Sent from Cisco Technical Support iPhone App

Scott Fella · ‎07-23-2013

You did remove the old wireless profile from the client device and created a new one correct?

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***

Martin · ‎07-26-2013

Yep I did re associate the devices but still the same issue it's really odd as its literally only the iPhones that drop iPad and laptops are fine

Sent from Cisco Technical Support iPhone App

Scott Fella · ‎07-26-2013

Well if it was an issue with the wireless or your config, then it would also be the iPads. I have an iPhone 5 and an iPhone 5 along with a 1st gen iPad and a 3rd gen iPad. If I make a change to the wireless SSID, it will affect all my iOS devices, not just none type. My next question is how many iPhones does this affect and is the iPhone jailbroken or not? The thing with wireless is you have to eliminate things when troubleshooting and from my experience, its almost seems like a client side issue.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***