cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1154
Views
9
Helpful
20
Replies

Clients losing connectivity to guest wireless network

igor.hamzic81
Level 1
Level 1

Hello all,

I have an issue where wireless users that are connecting to the guest wireless network by entering their credentials through the guest portal are losing connectivity at random intervals(usually within 1 minute of connecting).

From the user side it looks fine the 1st time they enter their credentials in the portal but at a random time the machine loses connectivity and to restore it usually user needs to re-enter their credentials but the problem persists and they have to re-enter their credentails again. This behaviour continues in a loop and effectively the user cannot work on the network.

On the event log on the WLC I see the following events on the client event log(in attachment).

Info on the devices:
WLC 3504, version 8.10.190.0
APs - mostly 2702 APs with several 1832 and 1702 APs
For RADIUS we use Cisco ISE, version 3.2.0.542, patch 5

20 Replies 20

marce1000
VIP
VIP

 

  - Start by upgrading to 8.10.196.0 , the last release for this model , and check if that can help,

 M.



-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
    When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

I will try it as soon as I get the image for the WLC.

Simon Blomqvist
Level 1
Level 1

I'm assuming you're doing CWA with ISE, correct? How are the guest authorization rules set up? 

Correct. We are using CWA. The policy is in attachment.

Okey, nothing wrong there with the authorization rules. How does the authorization profile WirelessGuest look? 

The profile pics are attached.

But those are the authorization profiles you've named WirelessGuestCWA_ISE1 and 2. How does the authorization profile that is named WirelessGuest look?

Here is authorization profile WirelessGuest in the attach.

The access list that is referenced on the profile contains standard access to the internet via the usual ports/protocols.

The client is roaming or not?

MHM

Client is not roaming.

Then disable sleep mode or adjust the idle timeout 

MHM 

Idle timeout is already set to 30 minutes.

Derrick Hurley
Level 1
Level 1

What does the ISE live log look like for one of the authentications?

Here are the pictures of the detailed view from the live log for one authorization. All authorizations look the same in the logs.

Review Cisco Networking for a $25 gift card