10-10-2024 07:09 AM
Hi All-
I am upgrading a small site from an autonomous 3602 to a 9120 EWC. I have a bunch of IoT devices that are having problems connecting. Theie sessions fail about 50% of the time. Debug analyzer shows this:
Time Task Translated
2024/10/10 03:39:17.899 | client-orch-sm | Client made a new Association to an AP/BSSID: BSSID 2416.1be4.0f00, WLAN TLiot, Slot 0 AP 2416.1be4.0f00, c9120-Tyne-1, Site tag default-site-tag, Policy tag default-policy-tag, Policy profile IoT_policy_profile, Switching Local, Socket delay 0ms |
2024/10/10 03:39:17.901 | dot11 | Association success for client, assigned AID is: 2 |
2024/10/10 03:39:17.921 | client-keymgmt | Negotiated the following encryption mechanism: AKM:PSK Cipher:CCMP WPA Version: WPA2 |
2024/10/10 03:39:17.921 | client-auth | Client successfully completed Pre-shared Key authentication. Assigned VLAN: 192 |
2024/10/10 03:39:17.921 | client-orch-sm | Policy profile is configured for local switching |
2024/10/10 03:39:17.921 | client-orch-state | Starting Mobility Anchor discovery for client |
2024/10/10 03:39:17.924 | client-orch-state | Entering IP learn state |
2024/10/10 03:41:17.924 | client-orch-sm | Controller initiated client deletion with code: CO_CLIENT_DELETE_REASON_IPLEARN_CONNECT_TIMEOUT. Explanation: Controller did not learn client IP address in the allowed time. Actions: Check DHCP server and client IP configuration. Validate if DHCP required is set and client is performing DHCP negotiation. If all is correct, collect RA traces and EPC |
2462.ab47.f040 | 59 | 22 | October 10, 2024 02:24:48:933000 | October 10, 2024 12:10:33:692000 |
Again, this is happening about 25% of the time. 802.11g clients, they come and go. I think they may all come and go at the same time.
This is a 9120 running EWC 17.9.5 with just the single AP. I have disabled Fast Transition and PMF. There is a bug for the non-EWC controllers that suggests turning off DHCP required - I do not see an option for that on EWC. Similarly, I would like to extend or disable session time-out - i do not see that option
Any help would be appreciated.
Solved! Go to Solution.
10-10-2024 07:50 AM
- Consider upgrading to 17.12.3 to benefit from bug fixes
+ Have a checkup of the EWC controller configuration using the CLI command ;
show tech wireless (not 'show tech') and feed the output from that into Wireless Config Analyzer
For session timeout , try manual configuring it from the CLI (running config) for example :
WLC(config)# wireless profile policy my-policy
session-timeout <your value>
Also note https://www.cisco.com/c/en/us/products/collateral/wireless/embedded-wireless-controller-catalyst-access-points/wireless-ewc-access-point-eol.html
Take it with you for long term planning
M.
10-10-2024 07:50 AM
- Consider upgrading to 17.12.3 to benefit from bug fixes
+ Have a checkup of the EWC controller configuration using the CLI command ;
show tech wireless (not 'show tech') and feed the output from that into Wireless Config Analyzer
For session timeout , try manual configuring it from the CLI (running config) for example :
WLC(config)# wireless profile policy my-policy
session-timeout <your value>
Also note https://www.cisco.com/c/en/us/products/collateral/wireless/embedded-wireless-controller-catalyst-access-points/wireless-ewc-access-point-eol.html
Take it with you for long term planning
M.
10-10-2024 07:25 PM
It looks like the version upgrade solved my issues. Everything is connected and reliable!
Thanks so much for your help.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide