I have had some clients complaining (laptop users) about being dropped from the WiFi and this appears to correlate with the events in the WLC log for DOT1X-4-MAX_EAPOL_KEY_RETRANS for those clients.
Drops are more frequent when the network and neighbours networks are under load during the day.
What would your advice be on tuning this? I based my settings off a guide found here:
https://supportforums.cisco.com/document/46101/eap-timers-wireless-lan-controllers
The way I interpret this is that the settings present a bit of a tradeoff between the risk of being dropped and the time it takes to get back in if you are dropped.
We have a WLC 2500 with 2700 APs running 7.6.130.0.
Below are the current settings that we have set:
Edit: Table did not paste correctly
Local Auth Active Timeout1 (in secs) "300"
Identity Request Timeout (in secs) "5"
Identity request Max Retries "12"
Dynamic WEP Key Index "0"
Request Timeout (in secs) "30"
Request Max Retries "2"
Max-Login Ignore Identity Response "enable"
APOL-Key Timeout (in milliSeconds) "1000"
EAPOL-Key Max Retries "2"
EAP-Broadcast Key Interval(in secs) "3600"
