Low Uptime on one SSID

[usman_safdar]

Hi,

    We have a 2504 WLC with 50 AP's. Firmware of WLC is 8.2.170 & model of AP is AP AIR-CAP3702I-A-K9. We have a weird problem pertaining to uptime of clients associated with a particular SSID.

Total SSID's : 4

Problematic SSID : 1 (Uptime is max 30 to 40 minutes and then client reconnects). Rest of clients associated with other SSID's are fine with a much longer uptime.

Attaching the snapshots. If any one else has gone through such problem, kindly help.

 

 

Regards

[JPavonM]

Hi @usman_safdar, you are running an EoX code, plese consider upgrading code to latest recommendded one, your issue maybe fixed.

[usman_safdar]

Here is the output of affected SSID

(Cisco Controller) >show wlan 1

WLAN Identifier.................................. 1
Profile Name..................................... FFCGM
Network Name (SSID).............................. FFCGM
Status........................................... Enabled
MAC Filtering.................................... Enabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled
Network Admission Control
Client Profiling Status
Radius Profiling ............................ Disabled
DHCP ....................................... Disabled
HTTP ....................................... Disabled
Local Profiling ............................. Enabled
DHCP ....................................... Disabled
HTTP ....................................... Enabled
Radius-NAC State............................... Disabled
SNMP-NAC State................................. Disabled
Quarantine VLAN................................ 0
Maximum number of Associated Clients............. 0
Maximum number of Clients per AP Radio........... 200

--More-- or (q)uit
ATF Policy....................................... 0
Number of Active Clients......................... 5
Exclusionlist Timeout............................ 60 seconds
Session Timeout.................................. 1800 seconds
User Idle Timeout................................ Disabled
Sleep Client..................................... disable
Sleep Client Timeout............................. 720 minutes
User Idle Threshold.............................. 0 Bytes
NAS-identifier................................... none
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ direct-internet
Multicast Interface.............................. Not Configured
WLAN IPv4 ACL.................................... unconfigured
WLAN IPv6 ACL.................................... unconfigured
WLAN Layer2 ACL.................................. unconfigured
mDNS Status...................................... Enabled
mDNS Profile Name................................ default-mdns-profile
DHCP Server...................................... Default
DHCP Address Assignment Required................. Disabled
Static IP client tunneling....................... Disabled
Tunnel Profile................................... Unconfigured
Quality of Service............................... Silver

--More-- or (q)uit
Per-SSID Rate Limits............................. Upstream Downstream
Average Data Rate................................ 0 0
Average Realtime Data Rate....................... 0 0
Burst Data Rate.................................. 0 0
Burst Realtime Data Rate......................... 0 0
Per-Client Rate Limits........................... Upstream Downstream
Average Data Rate................................ 0 0
Average Realtime Data Rate....................... 0 0
Burst Data Rate.................................. 0 0
Burst Realtime Data Rate......................... 0 0
Scan Defer Priority.............................. 4,5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Allowed
WMM UAPSD Compliant Client Support............... Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Enabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... 802.1P (Tag=0)
Passive Client Feature........................... Disabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... All

--More-- or (q)uit
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
Authentication................................ Global Servers
Accounting.................................... Global Servers
Interim Update............................. Enabled
Interim Update Interval.................... 0
Framed IPv6 Acct AVP ...................... Prefix
Dynamic Interface............................. Disabled
Dynamic Interface Priority.................... wlan
Local EAP Authentication......................... Disabled
Radius NAI-Realm................................. Disabled
Mu-Mimo.......................................... Enabled
Security

802.11 Authentication:........................ Open System
FT Support.................................... Disabled
Static WEP Keys............................... Disabled
802.1X........................................ Disabled
Wi-Fi Protected Access (WPA/WPA2)............. Enabled
WPA (SSN IE)............................... Disabled
WPA2 (RSN IE).............................. Enabled
TKIP Cipher............................. Disabled

--More-- or (q)uit
AES Cipher.............................. Enabled
OSEN IE.................................... Disabled
Auth Key Management
802.1x.................................. Disabled
PSK..................................... Enabled
CCKM.................................... Disabled
FT-1X(802.11r).......................... Disabled
FT-PSK(802.11r)......................... Disabled
PMF-1X(802.11w)......................... Disabled
PMF-PSK(802.11w)........................ Disabled
OSEN-1X................................. Disabled
FT Reassociation Timeout................... 20
FT Over-The-DS mode........................ Enabled
GTK Randomization.......................... Disabled
SKC Cache Support.......................... Disabled
CCKM TSF Tolerance......................... 1000
Wi-Fi Direct policy configured................ Disabled
EAP-Passthrough............................... Disabled
CKIP ......................................... Disabled
Web Based Authentication...................... Disabled
Web Authentication Timeout.................... 300
Web-Passthrough............................... Disabled
Mac-auth-server............................... 0.0.0.0

--More-- or (q)uit
Web-portal-server............................. 0.0.0.0
Conditional Web Redirect...................... Disabled
Splash-Page Web Redirect...................... Disabled
Auto Anchor................................... Disabled
FlexConnect Local Switching................... Disabled
FlexConnect Central Association............... Disabled
flexconnect Central Dhcp Flag................. Disabled
flexconnect nat-pat Flag...................... Disabled
flexconnect Dns Override Flag................. Disabled
flexconnect PPPoE pass-through................ Disabled
flexconnect local-switching IP-source-guar.... Disabled
FlexConnect Vlan based Central Switching ..... Disabled
FlexConnect Local Authentication.............. Disabled
FlexConnect Learn IP Address.................. Enabled
Client MFP.................................... Optional
PMF........................................... Disabled
PMF Association Comeback Time................. 1
PMF SA Query RetryTimeout..................... 200
Tkip MIC Countermeasure Hold-down Timer....... 60
Eap-params.................................... Disabled
AVC Visibilty.................................... Enabled
AVC Profile Name................................. None
Flow Monitor Name................................ None

--More-- or (q)uit
Split Tunnel Configuration
Split Tunnel................................. Disabled
Call Snooping.................................... Disabled
Roamed Call Re-Anchor Policy..................... Disabled
SIP CAC Fail Send-486-Busy Policy................ Enabled
SIP CAC Fail Send Dis-Association Policy......... Disabled
KTS based CAC Policy............................. Disabled
Assisted Roaming Prediction Optimization......... Disabled
802.11k Neighbor List............................ Disabled
802.11k Neighbor List Dual Band.................. Disabled
802.11v Directed Multicast Service............... Disabled
802.11v BSS Max Idle Service..................... Enabled
802.11v BSS Transition Service................... Disabled
802.11v BSS Transition Disassoc Imminent......... Disabled
802.11v BSS Transition Disassoc Timer............ 200
802.11v BSS Transition OpRoam Disassoc Timer..... 40
DMS DB is empty
Band Select...................................... Enabled
Load Balancing................................... Disabled
Multicast Buffer................................. Disabled
Universal Ap Admin............................... Disabled

Mobility Anchor List

--More-- or (q)uit
WLAN ID IP Address Status Priority
------- --------------- ------ --------

802.11u........................................ Disabled

MSAP Services.................................. Disabled

Local Policy
----------------
Priority Policy Name
-------- ---------------

(Cisco Controller) >

and here is the logging

*apfMsConnTask_1: May 16 23:31:36.081: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:408 Could not check supported rates. Missing Supported Rate. Length :0. Mobile MAC: 7a:0c:2e:4f:7b:c0.
*broffu_SocketReceive: May 16 23:31:35.406: %BROFFU-0-DP_PACKET_WQE_DIFF: broffu_fp_dapi_cmd.c:6348 Warning: DP Packet pool and WQE pool is not normal. DP0 Current PacketBuffer=2045 Current WQE = 5032663
*broffu_SocketReceive: May 16 23:31:25.402: %BROFFU-0-DP_PACKET_WQE_DIFF: broffu_fp_dapi_cmd.c:6348 Warning: DP Packet pool and WQE pool is not normal. DP0 Current PacketBuffer=2048 Current WQE = 5032657
*broffu_SocketReceive: May 16 23:31:15.398: %BROFFU-0-DP_PACKET_WQE_DIFF: broffu_fp_dapi_cmd.c:6348 Warning: DP Packet pool and WQE pool is not normal. DP0 Current PacketBuffer=2046 Current WQE = 5032654
*broffu_SocketReceive: May 16 23:31:05.394: %BROFFU-0-DP_PACKET_WQE_DIFF: broffu_fp_dapi_cmd.c:6348 Warning: DP Packet pool and WQE pool is not normal. DP0 Current PacketBuffer=2047 Current WQE = 5032650
*apfMsConnTask_3: May 16 23:31:01.601: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:408 Could not check supported rates. Missing Supported Rate. Length :0. Mobile MAC: 7a:0c:2e:4f:7b:c0.
*apfMsConnTask_1: May 16 23:31:01.500: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:408 Could not check supported rates. Missing Supported Rate. Length :0. Mobile MAC: 7a:0c:2e:4f:7b:c0.
*apfMsConnTask_3: May 16 23:30:59.340: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:408 Could not check supported rates. Missing Supported Rate. Length :0. Mobile MAC: 08:c5:e1:e9:31:74.
*apfMsConnTask_3: May 16 23:30:59.008: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:408 Could not check supported rates. Missing Supported Rate. Length :0. Mobile MAC: 7a:0c:2e:4f:7b:c0.
*apfMsConnTask_1: May 16 23:30:58.847: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:408 Could not check supported rates. Missing Supported Rate. Length :0. Mobile MAC: 7a:0c:2e:4f:7b:c0.
*apfMsConnTask_6: May 16 23:30:56.690: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:408 Could not check supported rates. Missing Supported Rate. Length :0. Mobile MAC: 08:c5:e1:e9:31:74.
*broffu_SocketReceive: May 16 23:30:55.390: %BROFFU-0-DP_PACKET_WQE_DIFF: broffu_fp_dapi_cmd.c:6348 Warning: DP Packet pool and WQE pool is not normal. DP0 Current PacketBuffer=2045 Current WQE = 5032643
*broffu_SocketReceive: May 16 23:30:45.386: %BROFFU-0-DP_PACKET_WQE_DIFF: broffu_fp_dapi_cmd.c:6348 Warning: DP Packet pool and WQE pool is not normal. DP0 Current PacketBuffer=2046 Current WQE = 5032634
*broffu_SocketReceive: May 16 23:30:35.382: %BROFFU-0-DP_PACKET_WQE_DIFF: broffu_fp_dapi_cmd.c:6348 Warning: DP Packet pool and WQE pool is not normal. DP0 Current PacketBuffer=2048 Current WQE = 5032627
*apfMsConnTask_1: May 16 23:30:34.981: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:408 Could not check supported rates. Missing Supported Rate. Length :0. Mobile MAC: 7a:0c:2e:4f:7b:c0.
*broffu_SocketReceive: May 16 23:30:25.378: %BROFFU-0-DP_PACKET_WQE_DIFF: broffu_f

[Leo Laohoo · Accepted solution]

---

@usman_safdar wrote:
Session Timeout.................................. 1800 seconds

---

Uhhhh ... Maybe this is the reason?

[usman_safdar]

Thanks alot. Any help on this Leo please ?

apfMsConnTask_1: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:408 Could not check supported rates. Missing Supported Rate. Length :0. Mobile MAC: 7a:0c:2e:4f:7b:c0.
*broffu_SocketReceive: %BROFFU-0-DP_PACKET_WQE_DIFF: broffu_fp_dapi_cmd.c:6348 Warning: DP Packet pool and WQE pool is not normal. DP0 Current PacketBuffer=2045 Current WQE = 5032663

[Leo Laohoo]

Something is not right with that wireless client if the WLC cannot detect what data rates this wireless client can do.

[Rich R]

As @JPavonM said you're running ridiculously old and end of support version of AireOS.
Highly recommend upgrading to a supported version with literally thousands of bug fixes like 8.5.182.0
https://www.cisco.com/c/en/us/support/docs/wireless/wireless-lan-controller-software/200046-tac-recommended-aireos.html#anc10
If you only have 3702 APs 8.5.182.0 will be fine.  If you have other APs check them against:
https://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html#ctr-ap_support
as you might be limited to an older release.

[usman_safdar]

Thanks rrudling, i have 1832I, 3602E and 3702I in my environment. I agree that firmware must be upgraded, however Cisco restricts me to download the upgraded version and telling that i should have a valid service contract.

[Leo Laohoo]

---

@usman_safdar wrote:
however Cisco restricts me to download the upgraded version and telling that i should have a valid service contract.

---

Yes and no. 

To download the latest WLC firmware legally (and without valid Service Contract), read the following steps: 

1. Go to the Cisco website and take down the exact filename and the HTML address (REFERENCE)
2. Read Multiple Vulnerabilities in Wi-Fi Protected Access and Wi-Fi Protected Access II
3. Scroll down to the Customers Without Service Contracts section.  
4. Read that section and understand it.  
5. Contact Cisco TAC by email.
6. Provide TAC all information collected in Step 1.