11-07-2011 07:53 PM - edited 07-03-2021 09:02 PM
Hi,
We have many MacBook pros that are having a hard time staying connected on wireless. Often times a user can be connected for only minutes at a time. Our wireless environment consists of 1142s and 3502 series access points. We use WPA2 Enterprise for authentication via ACS server 5.x.
The Windows 7 machines usually never have an issue. Can someone please provide some insight.?
*we use Lion OSX on our Macs.
This Discussion has been converted into a Document:- https://supportforums.cisco.com/docs/DOC-26228
Solved! Go to Solution.
05-07-2013 09:34 AM
Thanks Scott. I can verify that I am using WPA/WPA2 with AES. After I saw your post I disabled session timeout and unfortunately am seeing the same issue today after that change. To be specific, I can be connected for an entire day on other wireless networks without dicsonnect but on this one, best case scenario I can be connected for a few hours and often far less before I get diconnected and then sometimes auto-reconnected and other times seems I need to shut down my wireless and turn it back on to get reconnected.
05-07-2013 09:54 AM
Scott,
To be clear I AM using AES and not TKIP.
05-16-2013 06:04 AM
So does anyone have any further input for me on this issue with dropping connections?
05-16-2013 08:38 AM
I have a macbook pro and a macair along with an iPad and iPhone and what I have to do is make sure session timeout is disabled, load balancing is disabled, I only use WPA2/AES and I also have only use All Radios Policies, which shouldn't make a difference. This is what I setup in my home lab and at my customers with Apple devices.
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"
05-15-2013 05:55 PM
#Load balacing feature is generally trouble in high density environment.
#Also not useful when client supports 2.4ghz only.
#This is a native cisco feature that require ccx certified client, since apple is not part of ccx this will not work as expected.
07-22-2013 04:44 AM
Hi,
I am having the same problem with two iPhone 4s's dropping out but not my ipad which is on the 5gig the iPhones are only on the 2.4gig.
I have looked to try and disable the client load balancing but cant seem to find it in the web interface at all i have software version 15.2(2)JB, the client band selection is disabled.
I am using an 1142n AP
Anyone got any ideas please?
07-22-2013 05:42 AM
Martin
Sounds like you are using an access point in autonomous mode is that correct ?
If so, the load balance feature mentioned in this thread is for controllers. Post your autonomous access point config so we can take a peek.
Sent from Cisco Technical Support iPhone App
07-22-2013 06:13 AM
Hi yes i have two of them running in Autonomous mode, as requested i have pasted in the config of one of them
Current configuration : 2596 bytes
!
! Last configuration change at 19:09:35 UTC Tue Mar 9 1993 by Marty
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Downstairs_AP
!
!
logging rate-limit console 9
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication login CON local line
aaa authentication login VTY local line
aaa authorization exec default local
!
!
!
!
!
aaa session-id common
ip cef
no ip domain lookup
ip domain name martynet.co.uk
!
!
!
dot11 syslog
!
dot11 ssid MartyNet
authentication open
authentication key-management wpa version 2
guest-mode
wpa-psk ascii 7 09681E07491603430A
!
dot11 ssid MartyNet-5gig
authentication open
authentication key-management wpa version 2
guest-mode
wpa-psk ascii 7 143342055C173E7A25
!
!
crypto pki token default removal timeout 0
!
!
username marty privilege 15 secret 5 $1$QDkM$TDkRQFbzAIY2XZ6gNKtUq.
username helen privilege 15 secret 5 $1$..DI$Oh.Lg4sbKyof.nlMjL0DP/
!
!
bridge irb
!
!
!
interface Dot11Radio0
no ip address
!
encryption mode ciphers aes-ccm tkip
!
ssid MartyNet
!
countermeasure tkip hold-time 0
antenna gain 0
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio1
no ip address
!
encryption mode ciphers aes-ccm tkip
!
ssid MartyNet-5gig
!
countermeasure tkip hold-time 0
antenna gain 0
no dfs band block
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface GigabitEthernet0
no ip address
duplex auto
speed auto
no keepalive
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
!
interface BVI1
description Local Lan
ip address 10.10.0.6 255.255.0.0
!
ip default-gateway 10.10.0.1
ip forward-protocol nd
ip http server
ip http authentication aaa
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip route 0.0.0.0 0.0.0.0 10.10.0.1
!
access-list 111 permit tcp any any neq telnet
!
bridge 1 route ip
!
!
!
line con 0
access-class 111 in
exec-timeout 0 0
logging synchronous
login authentication CON
line vty 0 4
access-class 111 in
exec-timeout 0 0
logging synchronous
login authentication VTY
transport input ssh
!
end
Cheers
Martin
07-22-2013 06:46 AM
You have wpa2 configured so you should not have TKIP configured. TKIP is only used for WPA v1. WPA v2 uses AES.
Sent from Cisco Technical Support iPhone App
07-22-2013 06:57 AM
I did have that off originally but gad the same issue ill take it off again. Any other ideas what's wrong ?
Cheers
Sent from Cisco Technical Support iPhone App
07-22-2013 07:13 AM
Well it's a standard to only use AES with WPA v2 and only use TKIP with WPA v1. Apple devices are affected more than any other devices I have seen. I have a MacBook Pro, so I know how these things act like.
Sent from Cisco Technical Support iPhone App
07-22-2013 11:23 PM
I have now taken off the TKIP and its better but it's still dropping at random times
Sent from Cisco Technical Support iPhone App
07-23-2013 03:54 AM
You did remove the old wireless profile from the client device and created a new one correct?
Sent from Cisco Technical Support iPhone App
07-26-2013 04:41 AM
Yep I did re associate the devices but still the same issue it's really odd as its literally only the iPhones that drop iPad and laptops are fine
Sent from Cisco Technical Support iPhone App
07-26-2013 04:47 AM
Well if it was an issue with the wireless or your config, then it would also be the iPads. I have an iPhone 5 and an iPhone 5 along with a 1st gen iPad and a 3rd gen iPad. If I make a change to the wireless SSID, it will affect all my iOS devices, not just none type. My next question is how many iPhones does this affect and is the iPhone jailbroken or not? The thing with wireless is you have to eliminate things when troubleshooting and from my experience, its almost seems like a client side issue.
Sent from Cisco Technical Support iPhone App
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide