dot1x authentication

[bluesea2010]

Hi,

users are complaining when  they connect dot1x  , it s disconnecting they need to reconnect  but where as wpa2 it does not disconnect .What are  the troubleshooting steps 

Thanks

[marce1000]

  - Please elaborate on your wireless environment ; is there a controller ? What is the model ? What kind of APs ; which software versions are in place ?

 M.

[bluesea2010]

Hi,

Controller 9800-80-K9 ,Ap 9120 AX

17.06.06

[marce1000]

  - To start with have  a checkup of the 9800 WLC configuration with the CLI command show tech wireless and feed the output to : Wireless Config Analyzer

   - For disconnecting clients  engage in full client debugging according to https://logadvisor.cisco.com/logadvisor/wireless/9800/9800ClientConnectivity , these debugs can be analyzed with Wireless Debug Analyzer

  - Outputs from the commands mentioned in https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/217738-monitor-catalyst-9800-kpis-key-performa.html#anc5 can also be useful

                            - If possible go to  version 17.9.5 (to become a next  advisory release)

 M.

[bluesea2010]

Hi ,

Do you think this is due to the client reauthentication  ,I mean due to client or server session timeout configured   in cisco ise or wlc ?

Thanks

[Jerome BERTHIER]

Can you share detailled security settings of the WLANs working / not working ? and client types ?

[MHM Cisco World]

You use ISE?

MHM

[bluesea2010]

Yes

[MHM Cisco World]

check if ISE return shut or port bunce with CoA 

MHM