Guerst-users on vWLC are disassociated and have to reconnect!

[gblomqvist]

Hi!

My customers and I have been scratching our heads with this but come to any answer on our own, somehow it feels that we are missing the obvious...

Anyhow... the problem is this:

They have a vWLC running r8.5.140 and approximately 150 APs (mostly 2800 but some 2600 and 2700) on one site with a couple of SSIDs amongst one is the "Guest". On a other site they have a WLC5508 running r 8.2.130 and approximately 400 APs (Very mixed...) with a couple of SSIDs amongst one is the "Guest"! (of course) and this WLC5508 is configured as the Anchor controller for vWLC.

So, the users connected to the SSID "Guest" on the vWLC gets disconnected/disassociated after 20 minutes, the same user connected to the SSID "Guest" on the WLC5508 at the other site is NOT.

We have looked at the settings on both controllers and found these differences:

Setting                                   vWLC       WLC5508
Aironet IE                                  No           Yes
Client exclusion timeout           180           60
11k neighbour list                     Yes           No
BSS max idel service                Yes           No
Dirceted multicats sevrice         Yes           No
mDNS Snooping                       No           Yes

(wlan profile ID)                        #2            #4

Anything else we should look at/have missed? A bug? Difference in sw-version?...

Best Regards

Göran Blomqvist

[Rasika Nayanajith]

What's the value configured for "Session Timeout" under WLAN Advanced tab settings ?

Rasika

[gblomqvist]

As always, something essential slips. Sorry for that.

The session timeout is disabled (box not ticked) on both WLCs.

And another difference... Under the tab "Security" and "Layer2" on the vWLC Fast transition is enabled.

BR

Göran

[gblomqvist]

Grrrr... Copy'n'paste is a ************** sometimes. The correct table is this:

Setting                                   vWLC       WLC5508
Aironet IE                                  No           Yes
Client exclusion timeout           180           60
11k neighbour list                     Yes           No
11v BSS transition                    Yes           No

BSS max idel service                Yes           No
Dirceted multicats sevrice         Yes           No
mDNS Snooping                       No           Yes

(wlan profile ID)                        #2            #4

BR

Göran

[Rasika Nayanajith]

Better if you can match those settings as much as possible (due to code differences, you may not able to match 100%)

if it is a predictable behaviour, I would suggest to get "debug client <guest_mac_addr>" output from vWLC & anchor WLC while issue is occuring

HTH

Rasika