Access Point(s) - AIR-AP1231G-A-K9 and others - Spotty Connectivity ...

[ckoeber101]

Hello,

We have eighteen Cisco Aironet wireless access points (most of them are AIR-AP1231G-A-K9 with 12.3(2)JA2 IOS loaded) across our campus which people have weird issues with connecting.

Everywhere, people can associate and get an IP address without any issues. However, they cannot maintain a reliable connection to systems either on our network or off. They will get a web page to load and then it drops them out. In addition, they cannot connect back again for random intervals of time. To make this even more bizarre is that for random intervals they maintain a solid connection until it kicks people out again.

The vlan itself (60 in the configuration file below) works without issue as we have devices plugged in directly to the vlan via a hardwired port and they are stable.

Below is the configuration file. Any reason why we would have this issue?

Thank you for your time.

Regards,

Christopher Koeber

!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname AP-6
!
enable secret {authentication information}
enable password {authentication information}
!
username Cisco password {authentication information}
username admin password {authentication information}
ip subnet-zero
ip domain name {Domain Information}
!
no aaa new-model
!
dot11 ssid (Secure) Staff/Faculty
   vlan 70
   authentication open 
!
dot11 ssid Public
   vlan 60
   authentication open 
   guest-mode
!
!
!
bridge irb
!
!
interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 ssid (Secure) Staff/Faculty
 !
 ssid Public
 !
 short-slot-time
 speed basic-1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
 station-role root
 no cdp enable
!
interface Dot11Radio0.60
 encapsulation dot1Q 60 native
 no ip route-cache
 no cdp enable
 bridge-group 60
 bridge-group 60 subscriber-loop-control
 bridge-group 60 block-unknown-source
 no bridge-group 60 source-learning
 no bridge-group 60 unicast-flooding
 bridge-group 60 spanning-disabled
!
interface Dot11Radio0.70
 encapsulation dot1Q 70
 no ip route-cache
 no cdp enable
 bridge-group 70
 bridge-group 70 subscriber-loop-control
 bridge-group 70 block-unknown-source
 no bridge-group 70 source-learning
 no bridge-group 70 unicast-flooding
 bridge-group 70 spanning-disabled
!
interface FastEthernet0
 no ip address
 no ip route-cache
 duplex auto
 speed auto
!
interface FastEthernet0.60
 encapsulation dot1Q 60 native
 ip address 10.60.255.6 255.255.0.0
 no ip route-cache
 bridge-group 60
 no bridge-group 60 source-learning
 no bridge-group 60 unicast-flooding
 bridge-group 60 spanning-disabled
!
interface FastEthernet0.70
 encapsulation dot1Q 70
 ip address dhcp
 no ip route-cache
 bridge-group 70
 no bridge-group 70 source-learning
 no bridge-group 70 unicast-flooding
 bridge-group 70 spanning-disabled
!
interface BVI1
 ip address 10.60.255.6 255.255.0.0
 no ip route-cache
!
ip default-gateway 10.60.0.1
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1 
logging snmp-trap emergencies
logging snmp-trap alerts
logging snmp-trap critical
logging snmp-trap errors
logging snmp-trap warnings
!
!
!
line con 0
 transport preferred all
 transport output all
line vty 0 4
 login local
 transport preferred all
 transport input all
 transport output all
line vty 5 15
 login
 transport preferred all
 transport input all
 transport output all
!
end

[Erwin Salazar]

Hi Christopher,

Couple of suggestions before moving forward:

1. I would first secure these WLANs with a least a pre-shared key if possible(WPA/WPA2).  Let me know if you need information on how to do this.

2. Next, I would remove the 'short-slot-time' on the radio:

config terminal

interface do0

no short-slot-time

end

If your users continue to have issues, I would want more information on the types of clients in the environment as well as wireless adapter make/model/driver version.