cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
7787
Views
9
Helpful
17
Replies

Clients dropping periodically - WLC5508

Michael Murray
Level 2
Level 2

I've noticed a handful of clients (Apple TV devices) that are constantly associating and disassociating with some of my APs. They do this 24hrs whether there are other clients or not on the same AP so I don't think it is a congestion issue. I see the following on the 5508 controller log:

Thu Sep 6 05:10:56 2012          Client Authenticated: MAC Address:28:cf:da:1e:27:f8

base Radio MAC:00:24:c4:d3:ef:d0 Slot: 1 User Name:unknown IP

Addr:172.31.35.104 SSID:WPS-Apple

Thu Sep 6 05:10:53 2012          Client Deauthenticated: MACAddress:28:cf:da:1e:27:f8

Base Radio MAC:00:24:c4:d3:ef:d0 Slot: 1 User Name: unknown Ip Address:

172.31.35.104 Reason:Unspecified ReasonCode: 1

Thu Sep 6 05:10:33 2012          Client Authenticated: MAC Address:28:cf:da:1e:27:f8

base Radio MAC:00:24:c4:d3:ef:d0 Slot: 1 User Name:unknown IP

Addr:172.31.35.104 SSID:WPS-Apple

Thu Sep 6 05:10:30 2012          Client Deauthenticated: MACAddress:28:cf:da:1e:27:f8

Base Radio MAC:00:24:c4:d3:ef:d0 Slot: 1 User Name: unknown Ip Address:

172.31.35.104 Reason:Unspecified ReasonCode: 1

Thu Sep 6 05:10:11 2012          Client Authenticated: MAC Address:28:cf:da:1e:27:f8

base Radio MAC:00:24:c4:d3:ef:d0 Slot: 1 User Name:unknown IP

Addr:172.31.35.104 SSID:WPS-Apple

When I move the AP to another controller the problem goes away. We are using MAC based auth for these devices. Where can I look to find out why these clients are having what looks like authentication issues?

17 Replies 17

Stephen Rodriguez
Cisco Employee
Cisco Employee

That's a hard one, and this is going to sound like it's from deep left field.....

But I'd check the traffic between the AP and the original WLC.  Things like the path, what VLAN are trunked to the WLC etc.  What are the differneces between the WLC connection to the LAN wise.

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

Steve,

I'll check the settings as this is a new controller and it is in a different building than my other two controllers. No other devices on this WLAN are affected though - just the Apple TV boxes.

Regards,

-mike

Leo Laohoo
Hall of Fame
Hall of Fame

And this happening to ONLY Apple clients?  Other type of clients (Androids, Windows, Linux) are fine?

What firmware is your 5500 running?

leolaohoo,

5508 is running 7.2.110.0

This is only happening to Apple TV devices. All other Apple clients (iPads, iPhones, laptops, etc) as well as our Windows clients are fine.

It seems to be the combination of this particular controller with all of my Apple TV devices.

AppleTV + 5508 = Problem

AnyOtherDevice + 5508 = Works fine

AppleTV + WiSM(6509) = Works fine

The WiSM controllers are running 7.0.235.0 so I might try rolling back to that on the 5508 and seeing if that makes a difference. I'm guessing it is a difference in configs between the 5508 and WiSM that is causing an issue with the way these devices connect to the network. Not sure where to look for any logging or clues though.

Thanks,

-mike

I have Apple TV's running on that code on 5508's with no issues.  If you have double checked everything and the configs are the same, then maybe try to downgrade and see if that helps.

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

-Scott
*** Please rate helpful posts ***

Michael,

What mode are your APs in? Local or FlexConnect?

Have you actually wittnessed an Apple TV disconnecting or do you just no longer see them as an available device on an iPad for example?

Thanks,

Aaron

Hi Guy's and Gal's

I have a problem like Michael does... just a tad different. My AppleTV's are updated to the latest code and my iPads are up to 6.1.3 code. I have a single 5508 running 7.2.110 and Multicasting is working when the AppleTV's stay connected.

The controller sends a "deauth" message and kicks the device off and then is being added to the "Excluded" list.

and its over and over. every 3 to 5 minutes or less in some cases. Then the TV will reconnect and work.

If seen this happen in the past with other non-apple devices as well if "client load balancing" is enabled on the WLAN.

But, this is only happening to the AppleTV devices. I've also disabled "session timeout" as a test and see no difference.

I've searched up and down on the INTERWEB about this and get nothing..

I'm debating upgrading the controller to 7.4 with Bonjour mDNS as an option but, this is an obvious L1 issue!!

Any idea's from the experts?

-----------------------------------------------------------------------------------------------------------------------

(Cisco Controller) >debug client b8:78:2e:06:f0:89

(Cisco Controller) >debug *osapiBsnTimer: Apr 12 08:56:44.751: b8:78:2e:06:f0:89

apfMsExpireCallback (apf_ms.c:591) Expiring Mobile!

*apfReceiveTask: Apr 12 08:56:44.751: b8:78:2e:06:f0:89 Sent Deauthenticate to m

obile on BSSID a4:18:75:e1:85:90 slot 1(caller apf_ms.c:5698)

*apfReceiveTask: Apr 12 08:56:44.751: b8:78:2e:06:f0:89 Scheduling deletion of M

obile Station:  (callerId: 46) in 60 seconds

*apfReceiveTask: Apr 12 08:56:44.751: b8:78:2e:06:f0:89 apfMsExpireMobileStation

(apf_ms.c:5728) Changing state for mobile b8:78:2e:06:f0:89 on AP a4:18:75:e1:8

5:90 from Exclusion-list (1) to Exclusion-list (2)

*apfReceiveTask: Apr 12 08:56:44.751: b8:78:2e:06:f0:89 pemApfDeleteMobileStatio

n2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.

*apfReceiveTask: Apr 12 08:56:44.751: b8:78:2e:06:f0:89 172.29.19.250 RUN (20) D

eleted mobile LWAPP rule on AP [a4:18:75:e1:85:90]

*pemReceiveTask: Apr 12 08:56:44.751: b8:78:2e:06:f0:89 172.29.19.250 Removed NP

U entry.

*apfMsConnTask_5: Apr 12 08:56:49.381: b8:78:2e:06:f0:89 Ignoring assoc request

due to mobile in exclusion list or marked for deletion

*apfMsConnTask_5: Apr 12 08:56:49.698: b8:78:2e:06:f0:89 Ignoring assoc request

due to mobile in exclusion list or marked for deletion

*apfMsConnTask_5: Apr 12 08:56:50.011: b8:78:2e:06:f0:89 Ignoring assoc request

due to mobile in exclusion list or marked for deletion

*apfMsConnTask_5: Apr 12 08:56:50.325: b8:78:2e:06:f0:89 Ignoring assoc request

due to mobile in exclusion list or marked for deletion

*apfMsConnTask_5: Apr 12 08:56:50.639: b8:78:2e:06:f0:89 Ignoring assoc request

due to mobile in exclusion list or marked for deletion

---------------------------------------------------------------------------------------------------------------------------------

Hi

Have you considered increasing the User idle timeout on the Controller tab menu?

Post your show wlan

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

-Scott
*** Please rate helpful posts ***

Hi all,

I am having the same problem only with iphone devices.

The WLC is 2504 model with 7.3.112.0 software version.

The access points are in flexconnect mode.

The following debug output is generated for one of the iphone devices:

*apfMsConnTask_5: Apr 25 10:22:56.726: 00:f4:b9:14:68:4b Scheduling deletion of Mobile Station:  (callerId: 44) in 10 seconds
*apfMsConnTask_5: Apr 25 10:22:56.730: 00:f4:b9:14:68:4b Received Auth Request from station on AP b4:e9:b0:10:88:40 (vapId 2)
*apfMsConnTask_5: Apr 25 10:22:56.730: 00:f4:b9:14:68:4b Ignoring auth request due to exclusion-listing for mobile
*osapiBsnTimer: Apr 25 10:23:06.627: 00:f4:b9:14:68:4b apfMsExpireCallback (apf_ms.c:599) Expiring Mobile!
*apfReceiveTask: Apr 25 10:23:06.627: 00:f4:b9:14:68:4b Scheduling deletion of Mobile Station:  (callerId: 46) in 60 seconds
*apfReceiveTask: Apr 25 10:23:06.627: 00:f4:b9:14:68:4b apfMsExpireMobileStation (apf_ms.c:6032) Changing state for mobile 00:f4:b9:14:68:4b on AP b4:e9:b0:10:b0:e0 from Exclusion-list (1) to Exclusion-list (2)

*apfReceiveTask: Apr 25 10:23:06.627: 00:f4:b9:14:68:4b pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfReceiveTask: Apr 25 10:23:06.627: 00:f4:b9:14:68:4b 0.0.0.0 START (0) Deleted mobile LWAPP rule on AP [b4:e9:b0:10:b0:e0]
*osapiBsnTimer: Apr 25 10:24:06.627: 00:f4:b9:14:68:4b apfMsExpireCallback (apf_ms.c:599) Expiring Mobile!
*apfReceiveTask: Apr 25 10:24:06.627: 00:f4:b9:14:68:4b apfMsAssoStateDec
*apfReceiveTask: Apr 25 10:24:06.627: 00:f4:b9:14:68:4b Deleting mobile on AP b4:e9:b0:10:b0:e0(0)
*apfMsConnTask_5: Apr 25 10:24:06.800: 00:f4:b9:14:68:4b Received Auth Request from station on AP b4:e9:b0:10:b0:e0 (vapId 2)
*apfMsConnTask_5: Apr 25 10:24:06.801: 00:f4:b9:14:68:4b Adding mobile on LWAPP AP b4:e9:b0:10:b0:e0(0)
*apfMsConnTask_5: Apr 25 10:24:06.801: 00:f4:b9:14:68:4b apfProcessAuthReq (apf_80211.c:8140) Changing state for mobile 00:f4:b9:14:68:4b on AP b4:e9:b0:10:b0:e0 from Idle to Idle

Thanks!

HI Scott,

My client user idle timeout is 300 Seconds which is default.

What do you suggest?

It depends on what is the issue.  For Apple clients and guest webauth, I would set the idle timer to 2 hours or 4 hours depending.  This prevents the clients that go in sleep mode to not have to login again.

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

-Scott
*** Please rate helpful posts ***

gregsawyer
Level 1
Level 1

code 7.4 has a client user idle timeout setting under each WLAN on the advanced tab.  the default is set to 300s.  i'm assuming this takes precendence over the user idle timeout setting on the controller tab.

Does anybody know what happens if you set the client idle timeout setting under the WLAN to 0?  will it use the user idle timeout setting on the controller tab?

You can't set the idle timer to 0.

Client user idle timeout(15-100000)

Thanks,


Scott

Help out other by using the rating system and marking answered questions as "Answered"

-Scott
*** Please rate helpful posts ***
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: