Need to relogin web in 10 minutes some devices

[Mr dum]

Please Help!!!
I have problem with WLC 5520 after update the Softwre.
some client complain to me for WiFi alway relog in 10-12 minutes
maybe someone can help me to solved my problem

I setup session timeout, client user idle and arp time out like that
Software Version : 8.10.190
AP Model            : AIR-AP18231-F-K9 and AIR-CAP27021-F-K9

[marce1000]

 - You may need to debug the client all the way until it has to login again using ; https://www.cisco.com/c/en/us/support/docs/wireless/aironet-1200-series/100260-wlc-debug-client.html
    Client debugs can be analyzed with : Wireless Debug Analyzer
          (in order to find the effective disconnect reason(s))

 M.

[Rich R]

- You should never set Idle timeout longer than Session timeout!  Idle timeout should be a lower value like 10-30 minutes while Session timeout should be a higher value like 24 hours.
- ARP timeout should generally be less than or equal to your Idle timeout - something like 10 minutes
- You should consider using the Sleeping Client feature:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-10/config-guide/b_cg810/wlan_security.html#sleeping-clients

[eglinsky2012]

@Rich R  - Did you mean never set idle timeout longer than session timeout?

[Rich R]

Absolutely thanks @eglinsky2012 !
Corrected now.

[Mr dum]

I still get report from my client to re auth again 
maybe someone can help me to see whats wrong from my configuration.
thankyou all

show wlan 1

WLAN Identifier.................................. 1
Profile Name..................................... WIFI@ITERA
Network Name (SSID).............................. WIFI@ITERA
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
Random MAC Filtering............................. Disabled
AAA Policy Override.............................. Disabled
Network Admission Control
Client Profiling Status
Radius Profiling ............................ Disabled
DHCP ....................................... Disabled
HTTP ....................................... Disabled
Local Profiling ............................. Enabled
DHCP ....................................... Enabled
HTTP ....................................... Enabled
Radius-NAC State............................... Disabled
SNMP-NAC State................................. Disabled
Quarantine VLAN................................ 0
Maximum Clients Allowed.......................... Unlimited

--More-- or (q)uit
Security Group Tag............................... Unknown(0)
Maximum number of Clients per AP Radio........... 200
ATF Policy....................................... 0
Number of Active Clients......................... 1668
Number of Active Random-Mac Clients.............. 1182
Exclusionlist Timeout............................ 10 seconds
Session Timeout.................................. 10800 seconds
User Idle Timeout................................ 9000 seconds
Sleep Client..................................... disable
Sleep Client Timeout............................. 480 minutes
Sleep Client Auto Auth Feature................... Disabled
Web Auth Captive Bypass Mode..................... Disabled
User Idle Threshold.............................. 0 Bytes
NAS-identifier................................... none
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ management
Multicast Interface.............................. Not Configured
WLAN IPv4 ACL.................................... unconfigured
WLAN IPv6 ACL.................................... unconfigured
WLAN Layer2 ACL.................................. unconfigured
WLAN URL ACL..................................... unconfigured
mDNS Status...................................... Disabled

--More-- or (q)uit
mDNS Profile Name................................ unconfigured
DHCP Server...................................... Default
Central NAT Peer-Peer Blocking................... Unknown
DHCP Address Assignment Required................. Disabled
Static IP client tunneling....................... Disabled
Tunnel Profile................................... Unconfigured
EoGRE Override VLAN state........................ disable
EoGRE Override VLAN ID........................... 0
PMIPv6 Mobility Type............................. none
PMIPv6 MAG Profile........................... Unconfigured
PMIPv6 Default Realm......................... Unconfigured
PMIPv6 NAI Type.............................. Hexadecimal
PMIPv6 MAG location.......................... WLC
Quality of Service............................... Platinum
Per-SSID Rate Limits............................. Upstream Downstream
Average Data Rate................................ 0 0
Average Realtime Data Rate....................... 0 0
Burst Data Rate.................................. 0 0
Burst Realtime Data Rate......................... 0 0
Per-Client Rate Limits........................... Upstream Downstream
Average Data Rate................................ 0 0
Average Realtime Data Rate....................... 0 0
Burst Data Rate.................................. 0 0

--More-- or (q)uit
Burst Realtime Data Rate......................... 0 0
Scan Defer Priority.............................. 4,5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Allowed
WMM UAPSD Compliant Client Support............... Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Enabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
Passive Client Feature........................... Disabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... All
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
Authentication................................ 10.10.2.10 1812 *
Accounting.................................... 10.10.2.10 1813 *
Interim Update............................. Disabled
Interim Update Interval.................... 0
Framed IPv6 Acct AVP ...................... Prefix
Authorization ACA............................. Disabled

--More-- or (q)uit
Accounting ACA................................ Disabled
Dynamic Interface............................. Disabled
Dynamic Interface Priority.................... wlan
Local EAP Authentication......................... Disabled
Radius NAI-Realm................................. Disabled
Radius Authentication caching.................... Disabled
Mu-Mimo.......................................... Enabled
Security

802.11 Authentication:........................ Open System
FT Support.................................... Enabled
Static WEP Keys............................... Disabled
802.1X........................................ Disabled
Wi-Fi Protected Access (WPA/WPA2/WPA3)........ Disabled
Wi-Fi Direct policy configured................ Disabled
EAP-Passthrough............................... Disabled
CKIP ......................................... Disabled
Web Based Authentication...................... Enabled
Web Authentication Timeout.................... 14400
IPv4 ACL........................................ WebAuth
IPv6 ACL........................................ Unconfigured
Web-Auth Flex ACL............................... Unconfigured
Web-Auth Flex IPV6 ACL.......................... Unconfigured

--More-- or (q)uit
Web Authentication server precedence:
1............................................... local
2............................................... radius
3............................................... ldap
Web-Auth done locally on AP:.................... NO
Web-Passthrough............................... Disabled
Mac-auth-server............................... 0.0.0.0
Web-portal-server............................. 0.0.0.0
qrscan-des-key................................
Conditional Web Redirect...................... Disabled
Splash-Page Web Redirect...................... Disabled
Auto Anchor................................... Disabled
FlexConnect Local Switching................... Disabled
FlexConnect Central Association............... Disabled
flexconnect Central Dhcp Flag................. Disabled
flexconnect nat-pat Flag...................... Disabled
flexconnect Dns Override Flag................. Disabled
flexconnect PPPoE pass-through................ Disabled
flexconnect local-switching IP-source-guar.... Disabled
FlexConnect Vlan based Central Switching ..... Disabled
FlexConnect Local Authentication.............. Disabled
FlexConnect Learn IP Address.................. Enabled
Flexconnect Post-Auth IPv4 ACL................ Unconfigured

--More-- or (q)uit
Flexconnect Post-Auth IPv6 ACL................ Unconfigured
Client MFP.................................... Disabled
PMF........................................... Disabled
PMF Association Comeback Time................. 1
PMF SA Query RetryTimeout..................... 200
Tkip MIC Countermeasure Hold-down Timer....... 60
Eap-params.................................... Not Applicable
AVC Visibilty.................................... Enabled
AVC Profile Name................................. AUTOQOS-AVC-PROFILE
OpenDns Profile Name............................. None
OpenDns Wlan Mode................................ ignore
OpenDns Wlan Dhcp Option 6....................... enable
Flow Monitor Name................................ None
Split Tunnel Configuration
Split Tunnel................................. Disabled
Call Snooping.................................... Disabled
Roamed Call Re-Anchor Policy..................... Disabled
SIP CAC Fail Send-486-Busy Policy................ Enabled
SIP CAC Fail Send Dis-Association Policy......... Disabled
KTS based CAC Policy............................. Disabled
Assisted Roaming Prediction Optimization......... Disabled
802.11k Neighbor List............................ Enabled
802.11k Neighbor List Dual Band.................. Disabled

--More-- or (q)uit
802.11v Directed Multicast Service............... Enabled
802.11v BSS Max Idle Service..................... Enabled
802.11v BSS Transition Service................... Enabled
802.11v BSS Transition Disassoc Imminent......... Disabled
802.11v BSS Transition Disassoc Timer............ 200
802.11v BSS Transition OpRoam Disassoc Timer..... 40
802.11v BSS Transition Neigh List Dual Band...... Disabled
Number of active DMS Clients..................... 33
DMS ID Client MAC Addresses
1 0a:40:4a:d6:f6:99
2a:2a:7a:fd:f4:00
8e:b7:4a:18:4a:a4
4a:bb:3f:41:c7:b9
46:43:c1:3b:84:89
9a:70:ea:f2:37:fc
ee:54:08:63:96:c7
e6:d0:b0:c3:d4:42
3e:1c:c4:55:14:41
4e:f5:99:31:a5:f0
b2:bb:14:d7:e5:fc
16:2b:6d:16:71:39
a6:73:03:5c:43:e2
Band Select...................................... Enabled
Load Balancing................................... Disabled

--More-- or (q)uit
Multicast Buffer................................. Disabled
Universal Ap Admin............................... Disabled
Broadcast Tagging................................ Disabled
PRP.............................................. Disabled
Fast Receive..................................... Disabled
11ax Downlink MU-MIMO............................ Enabled
11ax Uplink MU-MIMO.............................. Enabled
11ax Downlink OFDMA.............................. Enabled
11ax Uplink OFDMA................................ Enabled
11ax Admin state................................. Enabled
Wifi Alliance Multiband Operation................ Disabled
11ax Target Wake Time............................ Enabled
Advanced Scheduling Requests..................... Disabled

Mobility Anchor List
WLAN ID IP Address Status Priority
------- --------------- ------ --------

802.11u........................................ Disabled

MSAP Services.................................. Disabled

Local Policy

--More-- or (q)uit
----------------
Priority Policy Name
-------- ---------------

Lync State ...................................... Disabled
Audio QoS Policy................................. Platinum
Video QoS Policy................................. Platinum
App-Share QoS Policy............................. Platinum
File Transfer QoS Policy......................... Platinum
Lync State ...................................... Disabled
Audio QoS Policy................................. Platinum
Video QoS Policy................................. Platinum
App-Share QoS Policy............................. Platinum
File Transfer QoS Policy......................... Platinum
File Transfer QoS Policy......................... Platinum
QoS Fastlane Status.............................. Disable
Selective Reanchoring Status..................... Disable
Lobby Admin Access............................... Disabled

Fabric Status
--------------

Fabric status.................................... Disable

--More-- or (q)uit
Vnid Name........................................
Vnid............................................. 0
Applied SGT Tag.................................. 0
Peer Ip Address.................................. 0.0.0.0
Flex Acl Name....................................
Flex IPv6 Acl Name...............................
Flex Avc Policy Name.............................

U3-Interface................................... Disable

U3-Reporting Interval.......................... 30

[Mr dum]

I see in every clinet have sign this

Is it okey ?

 

[Sandeep Choudhary]

Hi,

Please uncheck the Session Timeout box and rest leave the as it is and give a try .

Regards

Dont forget to rate helpful posts

[Mr dum]

Aifter I change to uncheck the session timeout still relog again and again

[Sandeep Choudhary]

Please enable the sleeping timeout as well. 

here is the example from my WLC:

Session Timeout.................................. 86400 seconds
User Idle Timeout................................ 300 seconds
Sleep Client..................................... enable
Sleep Client Timeout............................. 1440 minutes
Sleep Client Auto Auth Feature................... Enabled

Regards

Dont forget to rate helpful posts

[Rich R]

Yep I already recommended Sleeping Client in my earlier reply!