Motorola Handscanner loosing connection to AS400 application

[Willem de Groot]

Hi All

I Updated the 5508 from 7.0.230 to 7.4.100 and made it a cluster.

Sinse the Update the handscanners loose the connection to the AS400 Application.

Where to start troubleshooting?

I did a debug client, I see the client is roaming but I can not say if there is a relation between roaming and loosing connection to the application.

Please help.

[Willem de Groot]

More Information:

Security Policy ist set to : [WPA + WPA2][Auth(PSK)]

the Scanners are Motorola MC9090 Handheld Scanners

Problem first accured after the upgrade.

[joneschw1]

Degwi2,

Did you ever resolve this problem?  We're experiencing a similar problem with Moto on the same code release.  

[Scott Fella]

What do you mean made it a cluster? Did you upload the FUS image also? What model scanners?

Post the show WLAN

Sent from Cisco Technical Support iPhone App

[Willem de Groot]

Hi Scott,

No, FUS was not updated.

>show wlan 5

WLAN Identifier.................................. 5

Profile Name..................................... SSAG

Network Name (SSID).............................. SSAG

Status........................................... Enabled

MAC Filtering.................................... Disabled

Broadcast SSID................................... Enabled

AAA Policy Override.............................. Disabled

Network Admission Control

  Client Profiling Status ....................... Disabled

   DHCP ......................................... Disabled

   HTTP ......................................... Disabled

  Radius-NAC State............................... Disabled

  SNMP-NAC State................................. Disabled

  Quarantine VLAN................................ 0

Maximum number of Associated Clients............. 0

Maximum number of Clients per AP Radio........... 200

Number of Active Clients......................... 43

Exclusionlist Timeout............................ 60 seconds

Session Timeout.................................. 36000 seconds

User Idle Timeout................................ 300 seconds

--More-- or (q)uit

User Idle Threshold.............................. 0 Bytes

NAS-identifier................................... sy-sker-ch-scd-wlc-001

CHD per WLAN..................................... Enabled

Webauth DHCP exclusion........................... Disabled

Interface........................................ daten-vlan-5-ssag

Multicast Interface.............................. Not Configured

WLAN IPv4 ACL.................................... unconfigured

WLAN IPv6 ACL.................................... unconfigured

mDNS Status...................................... Enabled

mDNS Profile Name................................ default-mdns-profile

DHCP Server...................................... Default

DHCP Address Assignment Required................. Disabled

Static IP client tunneling....................... Disabled

PMIPv6 Mobility Type............................. none

Quality of Service............................... Silver

Per-SSID Rate Limits............................. Upstream      Downstream

Average Data Rate................................   0             0

Average Realtime Data Rate.......................   0             0

Burst Data Rate..................................   0             0

Burst Realtime Data Rate.........................   0             0

Per-Client Rate Limits........................... Upstream      Downstream

Average Data Rate................................   0             0

Average Realtime Data Rate.......................   0             0

--More-- or (q)uit

Burst Data Rate..................................   0             0

Burst Realtime Data Rate.........................   0             0

Scan Defer Priority.............................. 4,5,6

Scan Defer Time.................................. 100 milliseconds

WMM.............................................. Allowed

WMM UAPSD Compliant Client Support............... Disabled

Media Stream Multicast-direct.................... Disabled

CCX - AironetIe Support.......................... Disabled

CCX - Gratuitous ProbeResponse (GPR)............. Disabled

CCX - Diagnostics Channel Capability............. Disabled

Dot11-Phone Mode (7920).......................... Disabled

Wired Protocol................................... None

Passive Client Feature........................... Disabled

Peer-to-Peer Blocking Action..................... Disabled

Radio Policy..................................... All

DTIM period for 802.11a radio.................... 1

DTIM period for 802.11b radio.................... 1

Radius Servers

   Authentication................................ Global Servers

   Accounting.................................... Global Servers

      Interim Update............................. Disabled

   Dynamic Interface............................. Disabled

   Dynamic Interface Priority.................... wlan

--More-- or (q)uit

Local EAP Authentication......................... Disabled

Security

   802.11 Authentication:........................ Open System

   FT Support.................................... Disabled

   Static WEP Keys............................... Disabled

   802.1X........................................ Disabled

   Wi-Fi Protected Access (WPA/WPA2)............. Enabled

      WPA (SSN IE)............................... Enabled

         TKIP Cipher............................. Enabled

         AES Cipher.............................. Enabled

      WPA2 (RSN IE).............................. Enabled

         TKIP Cipher............................. Enabled

         AES Cipher.............................. Enabled

                                                               Auth Key Management

         802.1x.................................. Disabled

         PSK..................................... Enabled

         CCKM.................................... Disabled

         FT-1X(802.11r).......................... Disabled

         FT-PSK(802.11r)......................... Disabled

         PMF-1X(802.11w)......................... Disabled

         PMF-PSK(802.11w)........................ Disabled

      FT Reassociation Timeout................... 20

--More-- or (q)uit

      FT Over-The-DS mode........................ Enabled

      GTK Randomization.......................... Disabled

      SKC Cache Support.......................... Disabled

      CCKM TSF Tolerance......................... 1000

   WAPI.......................................... Disabled

   Wi-Fi Direct policy configured................ Disabled

   EAP-Passthrough............................... Disabled

   CKIP ......................................... Disabled

   Web Based Authentication...................... Disabled

   Web-Passthrough............................... Disabled

   Conditional Web Redirect...................... Disabled

   Splash-Page Web Redirect...................... Disabled

   Auto Anchor................................... Disabled

   FlexConnect Local Switching................... Disabled

   flexconnect Central Dhcp Flag................. Disabled

   flexconnect nat-pat Flag...................... Disabled

   flexconnect Dns Override Flag................. Disabled

   FlexConnect Vlan based Central Switching ..... Disabled

   FlexConnect Local Authentication.............. Disabled

   FlexConnect Learn IP Address.................. Enabled

   Client MFP.................................... Optional

   PMF........................................... Disabled

   PMF Association Comeback Time................. 1

--More-- or (q)uit

   PMF SA Query RetryTimeout..................... 200

   Tkip MIC Countermeasure Hold-down Timer....... 60

AVC Visibilty.................................... Disabled

AVC Profile Name................................. None

Flow Monitor Name................................ None

Call Snooping.................................... Disabled

Roamed Call Re-Anchor Policy..................... Disabled

SIP CAC Fail Send-486-Busy Policy................ Enabled

SIP CAC Fail Send Dis-Association Policy......... Disabled

KTS based CAC Policy............................. Disabled

Assisted Roaming Prediction Optimization......... Disabled

802.11k Neighbor List............................ Disabled

802.11k Neighbor List Dual Band.................. Disabled

Band Select...................................... Disabled

Load Balancing................................... Disabled

Multicast Buffer................................. Disabled

Mobility Anchor List

WLAN ID     IP Address            Status

-------     ---------------       ------

802.11u........................................ Disabled

--More-- or (q)uit

MSAP Services.................................. Disabled

[Scott Fella]

Have you looked at this doc?

http://www.cisco.com/en/US/solutions/collateral/ns340/ns414/ns779/C96-609146-00_config_best_practices_for_motorola_st.pdf

Sent from Cisco Technical Support iPhone App

[Willem de Groot]

Hi Scott

I've seen this link, can't see what Version of WLC is in use here and.. before the upgrade, the scanners where working well.

[Scott Fella]

Try setting the encryption to WPA/TKIP as this has fixed issues with one of my peers customers. WPA2/AES had issues!

Sent from Cisco Technical Support iPhone App

[Scott Fella]

It's also best practice on your other SSID's to choose one or another and not have both enabled. WPA uses TKIP and WPA2 uses AES.

Sent from Cisco Technical Support iPhone App

[Willem de Groot]

Hi Scott

I created a seperate SSID for testing now with WPA / TKIP only.

I'll let you know the result as soon I get feedback from the customer

[Scott Fella · Accepted solution]

We have a customer with these scanners all over the US and it seems like their is an issue with using WPA2/AES but not WPA/TKIP. I would contact your Motorola support team as they should know about this being an issue.

Sent from Cisco Technical Support iPhone App

[Scott Fella]

Willem,

Have you gotten any response back from the customer to see if changing it to wpa/tkip helped?

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

[Yahya Jaber]

HI,

here is a guide for the handheld devices.

http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a0080ab7c01.shtml

WPA/TKIP is a good way to start.

I used to have a ticket in the past, with motorola, but that issue as i remember that the devices could not connect at all...we changed the WEP Key from 0 to 3

[Scott Fella]

My peer has an open ticket with Motorola on this issue. The customer has recently made the change a week ago and it's stable at the moment.

Sent from Cisco Technical Support iPhone App

[Yahya Jaber]

hello Scott,

i would appreciate if you can share with me what did motorola do.