- Following this document https://blogs.cisco.com/networking/new-software-architecture-enables-session-aware-networking-to-massively-scale-authentication-and-access-policy-control , SANET refers to Authentication methods available including 802.1X, Web Authentication, and MAC Authentication Bypass (MAB) , ISE. Therefore you can check (for instance) ISE logs and lookup that particular authentication request for a client and check why it fails. For the clients that disconnect also use client debugging as described in https://logadvisor.cisco.com/logadvisor/wireless/9800/9800ClientConnectivity , you can have client debugs analyzed with : https://cway.cisco.com/wireless-debug-analyzer
This may provide more insights as to the client behavior.
Appendix : - Review your 9800 controller configuration with the CLI command : show tech wireless , have the output analyzed by https://cway.cisco.com/tools/WirelessAnalyzer/ , please note do not use classical show tech-support (short version) , use the command denoted in green for Wireless Analyzer. Checkout all advisories!
M.
-- ' 'Good body every evening' ' this sentence was once spotted on a logo at the entrance of a Weight Watchers Club !
