Client is experiencing long duration for connecting to Wifi network

[Rajesh Kumar Reddy]

Hello Team,

I have a scenario where my clients are getting athenticated via 802.1x from ISE server.

Out of 30 users only 5-10 client devices are experiencing long duration for connecting to Wifi network (SSID) this issue.

Below given logs are FYR

Kindly suggest on how to identify and what could be the issue 

Thanks

Rajesh

[marce1000]

 - You are not identifying much about your wireless environment such as controller and or AP  model(s) being used in all circumstances consider : https://www.cisco.com/c/en/us/support/docs/wireless/wireless-lan-controller-software/200046-tac-recommended-aireos.html
                                       https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/214749-tac-recommended-ios-xe-builds-for-wirele.html

  - Especially for the first one (AIreOS) , these days use the last release  that a controller can (still) run , because aireos based deployments are getting older , also make sure that  the Wifi driver(s) on the client are up to date , 

 M.                                       

[Rajesh Kumar Reddy]

Hello Marce,

Thanks for your reply.

I am using C9800 WLC with latest suggested release installed and we also updated the client Wireless NIC drivers but we still see this issue.

Client is getting authenticated via ISE server and this issue is only for 5 to 10 users out of 30+

Thanks

Rajesh

[marce1000]

 - Have a checkup of the C9800 WLC configuration with the CLI command show tech wireless ; feed the output into :
                                           https://cway.cisco.com/wireless-config-analyzer/
  (remember to use the command denoted in green , do not use show tech-support as input for WirelessAnalyzer)

   You may try to disable FT (fast transition)  for the particular  WLAN (if used)
   Also  do not use session timeout value of 0 , If maximum session timeout is desired, use 86400 instead of 0.

  M.

[Leo Laohoo]

What is the model of the AP?

What firmware is the WLC on?

[Rich R]

And what OS + WiFi vendor and driver version is on the clients having problems?

[Rajesh Kumar Reddy]

Hello Rich,

Client is on windows 10 64bit with wireless NIC of Intel Wifi6 ax 201 and version is 22.170.2.1
And for another client it is windows 10 64 bit with wireless NIC of Intel Wireless ac 9560 and version is 22.230.0.8

[Rich R]

22.170.2.1 is out of date and that version of the driver has been withdrawn by Intel due to serious bugs!
https://www.intel.com/content/www/us/en/download/19351/windows-10-and-windows-11-wi-fi-drivers-for-intel-wireless-adapters.html

22.230.0.8 is at least quite up to date (though not the latest). Might not be the same issue.  Make sure all drivers are up to date and then debug each individually.

As already pointed out make sure your WLC code is up to date as per TAC recommended below. (what version are you using?)  And what APs are you using?

[JPavonM]

Which AP model are you using on that site? Which code are they running? Are the devices experiencing the issues while roaming, or only at first authentication?

[Rich R]

Leo has also highlighted this bug confirming you should never use those older Intel drivers (note the bug is in the Intel drivers not the APs):
https://bst.cisco.com/bugsearch/bug/CSCwe50033