Intermittence in the Flex Connect APs services

[Wil78]

hello all,

We have a WLC 5508 controller in HA, we have most of the APs in Local mode and in a remote site we have FlexConnect. Users connected to the Flex Connect APs are facing service interruptions, although the AP does not go down, the service is interrupted.

On the switch we have no problems with the interface, in the logs no interface events are observed.

In the WLC no AP events are observed, but in the APs the following logs are observed;

*Feb 25 15:55:32.839: %DOT11-6-DISASSOC: Interface Dot11Radio1, Deauthenticating Station f4b3.01ed.5a67 Sending station has left the BSS
*Feb 25 15:55:42.019: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0c91.92a7.3a8c Sending station has left the BSS
*Feb 25 15:55:43.411: %DOT11-6-ASSOC: Interface Dot11Radio1, Station 0c91.92a7.3a8c REAP Associated KEY_MGMT[Open]
*Feb 25 15:55:49.363: %DOT11-6-DISASSOC: Interface Dot11Radio1, Deauthenticating Station 0c91.92a7.3a8c Sending station has left the BSS
*Feb 25 15:55:49.371: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 0c91.92a7.3a8c REAP Associated KEY_MGMT[Open]
*Feb 25 15:56:00.659: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0c91.92a7.3a8c Sending station has left the BSS
*Feb 25 15:56:12.007: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 0c91.92a7.3a8c REAP Associated KEY_MGMT[Open]
*Feb 25 15:59:51.783: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 760e.1711.f4d2 REAP Associated KEY_MGMT[Open]
*Feb 25 16:01:19.591: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 760e.1711.f4d2 Sending station has left the BSS
*Feb 25 16:01:52.267: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0c91.92a7.3a8c Sending station has left the BSS
*Feb 25 16:02:03.375: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 0c91.92a7.3a8c REAP Associated KEY_MGMT[Open]
*Feb 25 16:03:09.007: %DOT11-6-ASSOC: Interface Dot11Radio0, Station cece.a959.1dc0 REAP Associated KEY_MGMT[Open]
*Feb 25 16:03:20.931: %DOT11-6-ASSOC: Interface Dot11Radio1, Station 5a5e.b2b7.7d50 REAP Associated KEY_MGMT[Open]
*Feb 25 16:04:33.907: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station cece.a959.1dc0 Sending station has left the BSS
*Feb 25 16:05:43.111: %DOT11-6-DISASSOC: Interface Dot11Radio1, Deauthenticating Station 5a5e.b2b7.7d50 Sending station has left the BSS
*Feb 25 16:08:21.447: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 5a5e.b2b7.7d50 REAP Associated KEY_MGMT[Open]
*Feb 25 16:09:49.431: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 5a5e.b2b7.7d50 Sending station has left the BSS
*Feb 25 16:19:12.251: %DOT11-6-DISASSOC: Interface Dot11Radio1, Deauthenticating Station 8c8d.286a.3033 Sending station has left the BSS
*Feb 25 16:19:12.767: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 8c8d.286a.3033 REAP Associated KEY_MGMT[Open]
*Feb 25 16:19:17.155: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 8c8d.286a.3033 Sending station has left the BSS
*Feb 25 16:19:20.463: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 8c8d.286a.3033 REAP Associated KEY_MGMT[Open]
*Feb 25 16:19:40.879: %DOT11-4-CCMP_REPLAY: Client 8c8d.286a.3033 had 3 AES-CCMP TSC replays
*Feb 25 16:30:57.167: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 760e.1711.f4d2 REAP Associated KEY_MGMT[Open]
*Feb 25 16:32:34.991: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 760e.1711.f4d2 Sending station has left the BSS
AR-WCOR-PFA-19-T#%DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station

WLC 5508
IOS 8.5.140.0
Modelo de AP AIR-CAP2702I-A-K9
IOS AP /ap3g2-k9w8-mx.153-3.JF9/ap3g2-k9w8-xx.153-3.JF9"

Thank you very much in advance and I look forward to your valuable suggestions.

[marce1000]

  - As per https://www.cisco.com/c/en/us/support/docs/wireless/wireless-lan-controller-software/200046-tac-recommended-aireos.html  use the last release available on the 5508 : https://software.cisco.com/download/specialrelease/9a6a7cf84f9fdf04b95c76e2ac7820e7
    It's important for aireos controllers to go to the last release because the platform is being phased out and
   support is stopping ; check if that can help.

  M.

[Flavio Miranda]

@Wil78 

 What do you mean by service interruption?  They drop from the wireless network, or do they stay connected but with no network connectivity? 

 If you run a ping from the client machine to its gateway, does the ping stop during this interruption? Cable user have no complain.? 

[Wil78]

they  stay connected but if you are on a call it is interrupted or you are watching a video on YouTube it pauses and so on.

Cable users do not suffer from these situations.

[Flavio Miranda]

Well, the fact of the AP is in flexconnect can only improve the users experience as the traffic dont need to travel up to the Data center inside the capwap tunnel. If you have local breakout for internet. 

 Now, if clients does not disconnect from Wifi, but face issue with connectivity, this could be a network problem. 

I would recommend to you run iPerf in one client machine and use a server on the wired network. If possible another server in a remote location.  You can also run the server and the client connected on the wireless network to narrow down the varialbles. 

 I

[srimal99]

@Wil78 Have you check Qos marking and trusted on uplinks ?