02-27-2024 09:14 AM
Hello all,
I'm troubleshooting some poor voice performance on a large network. Looking at some traces taken from my WLC, it looks like clients are going through authentication each time they roam to a new AP. However, I don't have much experiencing parsing these logs so I'm not sure if fast roaming is working or these clients are indeed doing a full re-authentication each time they roam. Hoping someone could look a slice of log and provide guidance. Below is an example of what I think is a client roaming to another AP-- this process repeats across 5 APs in a matter of 5 minutes, so I was thinking if it is in fact a FULL re-auth, that might cause an issue.
10:31:52.929602540 {wncd_x_R0-0}{1}: [client-auth] [20640]: (note): MAC: 0001.3e20.8264 ADD MOBILE sent. Client state flags: 0x76 BSSID: MAC: 28ac.9eb6.5dae capwap IFID: 0x90001c60, Add mobiles sent: 1
10:31:52.929778699 {wncd_x_R0-0}{1}: [client-orch-state] [20640]: (note): MAC: 0001.3e20.8264 Client state transition: S_CO_MOBILITY_DISCOVERY_IN_PROGRESS -> S_CO_DPATH_PLUMB_IN_PROGRESS
10:31:52.930056425 {wncd_x_R0-0}{1}: [client-orch-state] [20640]: (note): MAC: 0001.3e20.8264 Client state transition: S_CO_DPATH_PLUMB_IN_PROGRESS -> S_CO_IP_LEARN_IN_PROGRESS
10:31:52.930436631 {wncd_x_R0-0}{1}: [client-orch-state] [20640]: (note): MAC: 0001.3e20.8264 Client state transition: S_CO_IP_LEARN_IN_PROGRESS -> S_CO_RUN
10:32:29.882734777 {wncd_x_R0-0}{1}: [client-orch-sm] [20640]: (note): MAC: 0001.3e20.8264 Re-Association received. BSSID 70db.9807.9aae, WLAN [redacted], Slot 1 AP 70db.9807.9aa0, mmc-cb-nap16, old BSSID 28ac.9eb6.5dae
10:32:29.883446814 {wncd_x_R0-0}{1}: [dot11] [20640]: (note): MAC: 0001.3e20.8264 Association success. AID 1, Roaming = True, WGB = False, 11r = False, 11w = False Fast roam = False
10:32:29.883868382 {wncd_x_R0-0}{1}: [client-orch-sm] [20640]: (note): MAC: 0001.3e20.8264 Delete mobile payload sent for BSSID: 28ac.9eb6.5dae WTP mac: 28ac.9eb6.5da0 slot id: 1
10:32:29.884237748 {wncd_x_R0-0}{1}: [client-orch-state] [20640]: (note): MAC: 0001.3e20.8264 Client state transition: S_CO_RUN -> S_CO_L2_AUTH_IN_PROGRESS
10:32:29.885126914 {wncd_x_R0-0}{1}: [client-auth] [20640]: (note): MAC: 0001.3e20.8264 ADD MOBILE sent. Client state flags: 0x71 BSSID: MAC: 70db.9807.9aae capwap IFID: 0x90001ad5, Add mobiles sent: 1
10:32:29.918142424 {wncd_x_R0-0}{1}: [client-keymgmt] [20640]: (note): MAC: 0001.3e20.8264 EAP Key management successful. AKM:PSK Cipher:CCMP WPA Version: WPA2
10:32:29.918291329 {wncd_x_R0-0}{1}: [client-auth] [20640]: (note): MAC: 0001.3e20.8264 L2 PSK Authentication Success. EAP type: NA, Resolved VLAN: 3, Audit Session id: 1FC510AC0019FE98EAB0E16C
10:32:29.918777746 {wncd_x_R0-0}{1}: [client-orch-sm] [20640]: (note): MAC: 0001.3e20.8264 Mobility discovery triggered. Client mode: Local
10:32:29.918783670 {wncd_x_R0-0}{1}: [client-orch-state] [20640]: (note): MAC: 0001.3e20.8264 Client state transition: S_CO_L2_AUTH_IN_PROGRESS -> S_CO_MOBILITY_DISCOVERY_IN_PROGRESS
10:32:29.918968983 {wncd_x_R0-0}{1}: [mm-client] [20640]: (note): MAC: 0001.3e20.8264 Mobility Successful. Roam Type None, Sub Roam Type MM_SUB_ROAM_TYPE_INTRA_INSTANCE, Previous BSSID MAC: 28ac.9eb6.5dae Client IFID: 0xa0000cbc, Client Role: Local PoA: 0x90001ad5 PoP: 0x0
02-27-2024 09:23 AM - edited 02-27-2024 11:44 AM
The triangle of fast roaming is
802.11k 802.11r and 802.11v
One send AP list to client other send info when the client start to roaming and finally r is for authentication' the authc part need FT.
Read more about the three protocol before applying it into WLAN.
MHM
02-27-2024 11:43 AM
By looking at below 2 messages you can see it is not doing FT-802.11r
10:32:29.882734777 {wncd_x_R0-0}{1}: [client-orch-sm] [20640]: (note): MAC: 0001.3e20.8264 Re-Association received. BSSID 70db.9807.9aae, WLAN [redacted], Slot 1 AP 70db.9807.9aa0, mmc-cb-nap16, old BSSID 28ac.9eb6.5dae
10:32:29.883446814 {wncd_x_R0-0}{1}: [dot11] [20640]: (note): MAC: 0001.3e20.8264 Association success. AID 1, Roaming = True, WGB = False, 11r = False, 11w = False Fast roam = False
HTH
Rasika
*** Pls rate all useful responses ***
02-27-2024 12:13 PM
Thank you for confirming. That is what I was thinking as well. Now I'll focus my efforts on determining why fast roaming is not taking place, because it seems to be activated on the WLC.
02-27-2024 01:19 PM
Start with the most basic question: What is this wireless client
Not all wireless client can/will support 802.11k, 802.11v &/or 802.11r.
02-27-2024 04:40 PM
Also worth looking at https://cway.cisco.com/wireless-debug-analyzer you can put you client debugs/ RA traces in and it will help convert to plan english
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide