Much nicer output from a 3802 versus the 3602.     Anyway, with a working client getting shut down, the idle-time decrements and the debug shows the disassociation of the client. The client is removed from botht he controller and the AP.   With a client that is exhibiting the issue, the client is not even listed int the AP but is listed in the WLC. ... View more

Maybe our systems are different but with a similar command I got a nice output of the timeout, though it doesn't look great pasted in here so I bolded the fields. Thanks!     w01-a120#show controllers dot11Radio 1 client F0:76:6f:78:29:11               mac radio vap aid state encr Maxrate is_wgb_wired      wgb_mac_addr F0:76:6F:78:29:11     1  14 193   FWD OPEN MCS82SS        false 00:00:00:00:00:00 Configured rates for client F0:76:6F:78:29:11 Legacy Rates(Mbps): 12 18 24 36 48 54 HT Rates(MCS):M0 M1 M2 M3 M4 M5 M6 M7 M8 M9 M10 M11 M12 M13 M14 M15 VHT Rates: 1SS:M0-8 2SS:M0-8 HT:yes     VHT:yes     80MHz:yes     40MHz:yes     AMSDU:yes     AMSDU_long:no 11w:no     MFP:no     11h:yes     encrypt_polocy: 1 _wmm_enabled:yes     qos_capable:yes     WME(11e):no     WMM_MIXED_MODE:no short_preamble:no     short_slot_time:no     short_hdr:no     SM_dyn:yes short_GI_20M:yes     short_GI_40M:yes     short_GI_80M:yes     LDPC:yes is_wgb_wired:no     is_wgb:no Additional info for client F0:76:6F:78:29:11 RSSI: -47 PS  : Legacy (Awake) Tx Rate: 0 Kbps Rx Rate: 0 Kbps VHT_TXMAP: 0 CCX Ver: 0 Statistics for client F0:76:6F:78:29:11               mac    intf  TxData TxMgmt    TxUC    TxBytes TxFail TxDcrd  RxData RxMgmt   RxBytes RxErr   TxRt   RxRt idle_counter stats_ago expiration F0:76:6F:78:29:11 apr1v14 9160349      1 9160349 2147483647      0      0 6063057      1 512621958     0 780000 866700           30  6.200000       8190 Per TID packet statistics for client F0:76:6F:78:29:11 Priority Rx Pkts Tx Pkts Rx(last 5 s) Tx (last 5 s)  QID Tx Drops Tx Cur Qlimit        0 5756591 8870725            0             0 1384       49      7   4096        1   22217      10            0             0 1385        0      0   4096        2       0      11            0             0 1386        0      0   4096        3   38583   13042            0             0 1387        0      0   4096        4       0       0            0             0 1388        0      0   4096        5       0       0            0             0 1389        0      0   4096        6       0       0            0             0 1390       14      0   4096        7       0       0            0             0 1391        0      0   4096 ... View more

Does not like that command         w01-a120#sho cont d1 client                    ^ % Invalid input detected at '^' marker. ... View more

Hi, the first command may be different on our system, is this the info you were looking for? This particular client is having the issue right now, I'm hesitant to death this as I want to use it for testing right now. Is this normal for the controller to see the client but not the AP?       w01-a120#show controllers dot11Radio 1 client 70:56:81:a7:54:d7 Client 70:56:81:A7:54:D7 not found!           Cisco Controller) >show client detail 70:56:81:a7:54:d7 Client MAC Address............................... 70:56:81:a7:54:d7 Client Username ................................. 70-56-81-a7-54-d7 AP MAC Address................................... 00:a7:42:f5:c9:80 AP Name.......................................... w01-a120 AP radio slot Id................................. 1 Client State..................................... Associated Client User Group................................ 70-56-81-a7-54-d7 Client NAC OOB State............................. Access Wireless LAN Id.................................. 15 Wireless LAN Network Name (SSID)................. FVTC-Public Wireless LAN Profile Name........................ FVTC Public Hotspot (802.11u)................................ Not Supported BSSID............................................ 00:a7:42:f5:c9:81 Connected For ................................... 21612 secs Channel.......................................... 149 IP Address....................................... 10.5.136.237 Gateway Address.................................. 10.5.128.1 Netmask.......................................... 255.255.192.0 IPv6 Address..................................... fe80::1859:a49a:e91e:36f7 Association Id................................... 179 Authentication Algorithm......................... Open System Reason Code...................................... 1 Status Code...................................... 0 --More-- or (q)uit Session Timeout.................................. 28800 Client CCX version............................... No CCX support QoS Level........................................ Silver Avg data Rate.................................... 0 Burst data Rate.................................. 0 Avg Real time data Rate.......................... 0 Burst Real Time data Rate........................ 0 802.1P Priority Tag.............................. disabled CTS Security Group Tag........................... Not Applicable KTS CAC Capability............................... No Qos Map Capability............................... No WMM Support...................................... Enabled APSD ACs....................................... BK BE VI VO Current Rate..................................... m7 Supported Rates.................................. 12.0,18.0,24.0,36.0,48.0, ............................................. 54.0 Mobility State................................... Local Mobility Move Count.............................. 0 Security Policy Completed........................ Yes Policy Manager State............................. RUN AAA Override ACL Name............................ none AAA Override ACL Applied Status.................. Unavailable AAA Override Flex ACL Name....................... none --More-- or (q)uit AAA Override Flex ACL Applied Status............. Unavailable AAA URL redirect................................. none Audit Session ID................................. 0a0550040001bd1d5a70687a AAA Role Type.................................... none Local Policy Applied............................. none IPv4 ACL Name.................................... none FlexConnect ACL Applied Status................... Unavailable IPv4 ACL Applied Status.......................... Unavailable IPv6 ACL Name.................................... none IPv6 ACL Applied Status.......................... Unavailable Layer2 ACL Name.................................. none Layer2 ACL Applied Status........................ Unavailable Client Type...................................... SimpleIP mDNS Status...................................... Enabled mDNS Profile Name................................ default-mdns-profile No. of mDNS Services Advertised.................. 0 Policy Type...................................... N/A Encryption Cipher................................ None Protected Management Frame ...................... No Management Frame Protection...................... No EAP Type......................................... Unknown Interface........................................ guest-firewalled VLAN............................................. 512 --More-- or (q)uit Quarantine VLAN.................................. 0 Access VLAN...................................... 512 Local Bridging VLAN.............................. 512 Client Capabilities: CF Pollable................................ Not implemented CF Poll Request............................ Not implemented Short Preamble............................. Not implemented PBCC....................................... Not implemented Channel Agility............................ Not implemented Listen Interval............................ 10 Fast BSS Transition........................ Not implemented 11v BSS Transition......................... Not implemented Client Wifi Direct Capabilities: WFD capable................................ No Manged WFD capable......................... No Cross Connection Capable................... No Support Concurrent Operation............... No Fast BSS Transition Details: Client Statistics: Number of Bytes Received................... 12043425 Number of Bytes Sent....................... 799826116 Total Number of Bytes Sent................. 799826116 Total Number of Bytes Recv................. 12043425 --More-- or (q)uit Number of Bytes Sent (last 90s)............ 0 Number of Bytes Recv (last 90s)............ 0 Number of Packets Received................. 180164 Number of Packets Sent..................... 534138 Number of Interim-Update Sent.............. 0 Number of EAP Id Request Msg Timeouts...... 0 Number of EAP Id Request Msg Failures...... 0 Number of EAP Request Msg Timeouts......... 0 Number of EAP Request Msg Failures......... 0 Number of EAP Key Msg Timeouts............. 0 Number of EAP Key Msg Failures............. 0 Number of Data Retries..................... 0 Number of RTS Retries...................... 0 Number of Duplicate Received Packets....... 0 Number of Decrypt Failed Packets........... 0 Number of Mic Failured Packets............. 0 Number of Mic Missing Packets.............. 0 Number of RA Packets Dropped............... 0 Number of Policy Errors.................... 0 Radio Signal Strength Indicator............ -58 dBm Signal to Noise Ratio...................... 29 dB Client Rate Limiting Statistics: Number of Data Packets Received............ 0 --More-- or (q)uit Number of Data Rx Packets Dropped.......... 0 Number of Data Bytes Received.............. 0 Number of Data Rx Bytes Dropped............ 0 Number of Realtime Packets Received........ 0 Number of Realtime Rx Packets Dropped...... 0 Number of Realtime Bytes Received.......... 0 Number of Realtime Rx Bytes Dropped........ 0 Number of Data Packets Sent................ 0 Number of Data Tx Packets Dropped.......... 0 Number of Data Bytes Sent.................. 0 Number of Data Tx Bytes Dropped............ 0 Number of Realtime Packets Sent............ 0 Number of Realtime Tx Packets Dropped...... 0 Number of Realtime Bytes Sent.............. 0 Number of Realtime Tx Bytes Dropped........ 0 Nearby AP Statistics: w01-a166(slot 0) antenna0: 8739 secs ago.................. -84 dBm antenna1: 8739 secs ago.................. -84 dBm w01-a166(slot 1) antenna0: 8734 secs ago.................. -83 dBm antenna1: 8734 secs ago.................. -83 dBm w01-a162(slot 0) --More-- or (q)uit antenna0: 8734 secs ago.................. -88 dBm antenna1: 8734 secs ago.................. -88 dBm w01-a120(slot 0) antenna0: 8735 secs ago.................. -42 dBm antenna1: 8735 secs ago.................. -42 dBm w01-a120(slot 1) antenna0: 8734 secs ago.................. -47 dBm antenna1: 8734 secs ago.................. -47 dBm w01-a104q(slot 0) antenna0: 8739 secs ago.................. -87 dBm antenna1: 8739 secs ago.................. -88 dBm w01-a142(slot 0) antenna0: 8738 secs ago.................. -93 dBm antenna1: 8738 secs ago.................. -91 dBm w01-a104d(slot 0) antenna0: 8735 secs ago.................. -67 dBm antenna1: 8735 secs ago.................. -76 dBm w01-a104d(slot 1) antenna0: 8734 secs ago.................. -82 dBm antenna1: 8734 secs ago.................. -84 dBm w01-a105a(slot 0) antenna0: 17329 secs ago................. -89 dBm antenna1: 17329 secs ago................. -88 dBm --More-- or (q)uit w01-a105(slot 0) antenna0: 8735 secs ago.................. -90 dBm antenna1: 8735 secs ago.................. -89 dBm w01-a105h(slot 0) antenna0: 8741 secs ago.................. -90 dBm antenna1: 8741 secs ago.................. -87 dBm w01-a104t(slot 0) antenna0: 8735 secs ago.................. -88 dBm antenna1: 8735 secs ago.................. -86 dBm w01-hs301(slot 0) antenna0: 8735 secs ago.................. -88 dBm antenna1: 8735 secs ago.................. -88 dBm w01-a112(slot 0) antenna0: 8735 secs ago.................. -81 dBm antenna1: 8735 secs ago.................. -81 dBm w01-a112(slot 1) antenna0: 8734 secs ago.................. -85 dBm antenna1: 8734 secs ago.................. -85 dBm w01-a118(slot 0) antenna0: 8734 secs ago.................. -62 dBm antenna1: 8734 secs ago.................. -62 dBm w01-a118(slot 1) antenna0: 8733 secs ago.................. -69 dBm --More-- or (q)uit antenna1: 8733 secs ago.................. -69 dBm w01-a158(slot 0) antenna0: 8734 secs ago.................. -65 dBm antenna1: 8734 secs ago.................. -65 dBm w01-a158(slot 1) antenna0: 8734 secs ago.................. -79 dBm antenna1: 8734 secs ago.................. -79 dBm w01-a161b(slot 0) antenna0: 8735 secs ago.................. -82 dBm antenna1: 8735 secs ago.................. -82 dBm w01-a161b(slot 1) antenna0: 8733 secs ago.................. -85 dBm antenna1: 8733 secs ago.................. -85 dBm AP380E.4D56.CDA6(slot 0) antenna0: 8735 secs ago.................. -83 dBm antenna1: 8735 secs ago.................. -83 dBm w01-a165(slot 0) antenna0: 17325 secs ago................. -93 dBm antenna1: 17325 secs ago................. -93 dBm DNS Server details: DNS server IP ............................. 208.67.222.222 DNS server IP ............................. 208.67.220.220 Assisted Roaming Prediction List details: --More-- or (q)uit Client Dhcp Required: False Allowed (URL)IP Addresses ------------------------- AVC Profile Name: ............................... none ... View more

We will be going to 8.2.166 tomorrow per TACs suggestion to at least eliminate that possibility. ... View more

5508 8.2.164 3802, 3702 and 3602 ... View more

The actual power levels on the 802.11b/g/n radios are generally 4 or 5. The 802.11a/n/ac radios are generally 1 or 2. ... View more

Actually that was not one of the client MAC addresses I was working on. I was working on 70:ef:00:9c:bf:c4. Seems like an odd coincidence. The AP in the IDS event is the same area the iPads were. ... View more

This is one of the clients I was woking on at the time. IDS 'Deauth flood' Signature attack detected on AP 'w01-hs300' protocol '802.11b/g' on Controller '10.5.80.4'. The Signature description is 'Deauthentication flood', with precedence '9'. The channel number is '11', the number of detections is '500', and one of potentially several attackers' mac addresses is '72:ef:00:9c:bf:c4'. ... View more

Actually I had come across your post earlier this week and that is why I turned on the fast SSID:) ... View more

Fast SSID is enabled now but was not when the issue first showed up. The next client I get I'll try to remove the other SSIDs. So far it has been Apple devices AFAIK. ... View more