Problem with Web Auth and ARP_ORPHANPKT

[Juan Ibañez]

I have WLC 5508 version 7.2.111.3 and SSID with (WPA2,AuthPSK,Web-Auth) and have  web-auth problem ,  the client needs reauth every 20 minutes, and the Enable Session Timeout is 7200 seconds. how i fix this problem?

[ISHANT VARSHNEY]

Hi,

This needs some troubleshooting.

I would do the following :

1.) Check if the user need to re-auth if the user is active or if it is idle for 20 minutes.

2.) If this happens when it is idle then check user idle timeout under controller >> General >> User idle timeout and check if it is set to 1200 sec.

3.) If this issue occurs when active then I will try disable enable session timeout feature and check. (set it to "0" sec to disable it).

4.) If with 0 sec the issue occurs then most probably there is something on the client side causing the client to drop every 20 min.

5.) If with 0 there is no session timeout and with 7200 it's dropping at 20 minutes I would open a case with CISCO TAC to investigate further.

HTH.

Thanks Regards,

Ishant

**** Pls rate all useful responses. Each time you rate a response Cisco will donate $1 to Kiva ****

[Scott Fella]

Just to add. v7.2 is only recommended for FIPS and you should move to v7.4.121.0 or v7.6.110.0 if you need features.  Also look at updating the FUS. 

With webauth, I typically disable the session timer and set the idle timer to 7200 or 14400. This keeps the clients in the run state even if they are in sleep mode.  With v7.6, there is a feature called sleeping clients in which you can prevent clients from seeing the WebAuth page up to 30 days. 

Please rate helpful post and Cisco Support Community will donate to Kiva

Scotty