02-10-2021 06:55 AM - edited 07-05-2021 01:13 PM
Hello,
We've been having some issues with multiple devices that are being deauthenticated with ReasonCode: 108. The devices either auth using certificates, or PEAP username and pass, and on either type of authentication the WLC has log entries throwing ReasonCode: 108:
Wed Feb 10 13:13:15 2021 Client Disassociated: MACAddress:b4:69:21:XX:XX:XX Base Radio MAC:74:88:bb:XX:XX:XX Slot: 1 User Name: *************, Ip Address: 10.XX.XX.XX Reason:unknown ReasonCode: 108 TxPkts: 110672l TxBytes: 50729931l RxPkts: 109807l RxBytes: 58525078l
Wed Feb 10 13:13:15 2021 Client Deauthenticated: MACAddress:b4:69:21:XX:XX:XX Base Radio MAC:74:88:bb:XX:XX:XX Slot: 1 User Name: ************* Ip Address: 10.XX.XX.XX Reason:unknown ReasonCode: 108
Wed Feb 10 13:13:15 2021 Client Disassociated: MACAddress:b4:69:21:XX:XX:XX Base Radio MAC:74:88:bb:XX:XX:XX Slot: 1 User Name: *************, Ip Address: 10.XX.XX.XX Reason:Un-specified reason ReasonCode: 1 TxPkts: 110672l TxBytes: 50729931l RxPkts: 109807l RxBytes: 58525078l
Wed Feb 10 13:13:15 2021 Client Disassociated: MACAddress:b4:69:21:XX:XX:XX Base Radio MAC:74:88:bb:XX:XX:XX Slot: 1 User Name: *************, Ip Address: 10.XX.XX.XX Reason:Un-specified reason ReasonCode: 1
From what I could gather, the devices actually remain associated to the SSID, have an IP address, but stop responding to ping.
The APs are AIR-AP2802E-E-K9, they're connected to Cisco 3504 WLCs, and broadcast two SSIDs (main WLAN on 5GHz only, and a guest WLAN). The security policies that are applied on the main SSID (the one that we're having issues with) are [WPA2][Auth(802.1X + CCKM)].
Has anyone had this issue before, or know what this reason code points to? I tried searching the web for additional info about it, but I haven't had too much luck...
Thank you.
02-11-2021 01:47 AM
All the same type of clients? Then it could be a driver issue.
Which software version is running on the WLC?
02-11-2021 02:57 AM
Based on the latest logs, most clients that have this issue are Apple devices, but there are some instances of a Huawei phone, a Xiaomi phone, and an Intel NIC that have this problem as well. Haven't seen this pop-up on laptops or other Android phones for now...
The WLC software version is 8.5.161.0 .
02-11-2021 03:45 AM
02-12-2021 04:26 AM
No, FT is disabled on the SSID.
02-15-2021 06:07 AM
02-15-2021 09:47 AM
Most likely this is a bug, you can open a TAC case to identify it or you can try to upgrade to 8.5.171.0 released a few days ago (best if you can upgrade to 8.10.142.0 after checking the compatibility matrix https://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html)
02-15-2021 11:49 PM
Thank you for your replies. I'll open a TAC case.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide