12-06-2022 01:43 AM
Dear Cisco Community,
I'd like to know the exact/normal behaviour of the 9800 WLC on a client roaming between two APs when the SSID is setup as:
From my understanding:
At least that's my understanding how it (should) works. And I've found the follwing paper describing this:
"When the client roams or sends association request to the same AP or different AP and is still connected to WLAN, the client is not authenticated again to AAA server."https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-8/config-guide/b_cg88/wlan_security.html
I know this is AireOS, but I couldn't find any article descibing the behaviour for IOS-XE.
Why am I asking:
We see a lot of authentication/authorization logs on ISE in a very short period of time from clients connected to an SSID which is configured as described. A test revealed that the WLC seems to send a AAA request to ISE on every client roam, which is in my opinion not how it should behave.
- We are running 17.3.5b
Can someone agree on my assumption or provide me a document which proves me wrong?
Thank you very much in advance!
KR
12-06-2022 01:51 AM
- A good to start with is reviewing the current 9800 configuration with the CLI command : show tech wireless , have the output analyzed by https://cway.cisco.com/
M.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide