Disabled clients on the wlc keep getting disabled after removing them

[adedipeopeoluwa]

Hello,

please I am experiencing the following challenge and I need urgent assistance on this.

we recently integrated our wlc to a NAC appliance and enforced some policies. Some clients get blocked on the NAC which is also visible on the wlc under disabled clients. Once the wireless clients are remediate and enabled back on the NAC, same reflects on the wlc and they no longer appear on the wlc. This is the normal behavior.

however, we noticed that some other clients that appear as disabled on the wlc do not show as blocked on NAC. The NAC policy was also disabled in order to drill down. When the disabled client is removed manually from the wlc and the client connects successfully on wireless, it gets disabled again as a result of it being added on the exclusion list.

I followed some steps I saw online by disabling the authentication retries under security but situation still persist.

can anyone help out pls

[Grendizer]

What’s the WLC type and code? and if you’re using AnyConnect, what version?

[adedipeopeoluwa]

WLC is   3504, 8.5.105.0

NAC tool we use is forescout not anyconnect.

[patoberli · Accepted solution]

This is an extremely old 8.5. release. I suggest first upgrading to the latest 8.5.x build, there were a lot of bugs fixed. 

[Grendizer]

upgrade to 8.10.151.0 after checking the compatibility matrix https://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html

meaning, if you don't have one of those AP models (3500, 1600, 2600, 3600, 1550) you can upgrade to 8.10

if you have one of these AP models in your network then upgrade to 8.5.171.0

[adedipeopeoluwa]

Please see attached log

[Rich R]

Like Pat said you're wasting your time trying to troubleshoot such an old release.  Bring the software up to date and if you still have problems then it's worth troubleshooting further.

https://www.cisco.com/c/en/us/support/docs/wireless/wireless-lan-controller-software/200046-tac-recommended-aireos.html#anc3

[adedipeopeoluwa]

Thank you all.

I upgraded the WLC to a higher version and I am okay now.