EAP client not connect to LAPoint

[Alexander Khokhlov]

Hello
from time to time clients EAP cannot connect to three or four points out of 100. At the same time, clients WPA2/PSK can connect to the same points. After the reboot of the problem points, the connection is restored.

On the rest of the points both types of clients (EAP and PSK) work stably.

Additions - output debug on LAP

LAP#debug authentication interface apr1v3 all
% Authentication process for interface apr1v3 not started.

Additions from answers below

1. first there were 1261, then 2602, now 2802.  AP Mode Flexconnect. All model points have the same problem.

2. show wlan (WLAN id) "show wlan.txt" - below

3. WLC - 5520, 8.3.141. (two 5520 HA). show sysinfo.txt - below.

4. users sit in the room under the point - roaming should not be

5. debug client <mac address>      - not yet, but I will do the next accident.

[AndreaTornaghi]

Dear,

which kind of access point are installed on your infrastructure?

which is the model of WLC and firmware?

[Jurgens L]

Also provide:

show wlan (WLAN id)

[Alexander Khokhlov]

first there were 1261, then 2602, now 2802. All points have the same problem.

WLC - 5520, 8.3.141.

P.S. AP Mode Flexconnect

show wlan (WLAN id) "show wlan.txt"

[Haydn Andrews]

Is this the clients wont roam to those APs when using EAP auth?

Can you confirm the APs are advertising the EPA SSID?

Are they attempting to associate or not at all?

Can you run the following command:

debug client <mac address>

for one of the clients not connecting to the APs and share

Also provide:

WLC Model, code version: show sysinfo

AP model

[Alexander Khokhlov]

Is this the clients wont roam to those APs when using EAP auth?   - customers sit on the same spot. RCCI of the neighboring point is approximately -70-80, but in the next room there may be problems with local users.

Can you confirm the APs are advertising the EPA SSID? - confirm, all points are configured by the same group of points

Are they attempting to associate or not at all?

Can you run the following command:

debug client <mac address>      - not yet, but I will do the next accident.

for one of the clients not connecting to the APs and share

Also provide:

WLC Model (two 5520 HA), code version: show sysinfo   - show sysinfo.txt

AP model - answer above

[patoberli]

There is a small possibility that you are hitting this bug: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvj41040
Try to disable "FT Over-The-DS mode". I doubt that this is the reason though.

Best would indeed be a client debug …. Everything else looks correct, unless there is an issue with the AP-Group.

[Alexander Khokhlov]

did now

FT Over-The-DS mode........................ Disabled

waiting for a repeat of the accident