User Idle Timeout

[Koal]

Hi All!

Is it possible to configure a "User Idle Timeout"?

Have not found anything on the Dashboard.

BR

[Philip D'Ath]

And idle timeout for what, and what would this timeout achieve?

[Koal]

A User Idle Timeout for the Wireless Clients!

[Philip D'Ath]

Are you referring to clients authenticated using a splash page?

Wireless/Splash Pages/Splash Frequency

[Koal]

Clients authenticate with PSK!

[Philip D'Ath]

If they are using WPA and PSK what is the point of having an idle timeout? They will simply immediately re-associate since they are using an authenticated connection.

[Koal]

Hi Philip!

Sorry for the delay. Im talking about Apple IPhones! When they not longer active in the Wireless, they go automaticaly in sleep mode (maybe they deactivate the wireless?!). After reactivation of the Phone they have to login again with their credentials. Is there a posibility to configure an Idletimeout?

[Philip D'Ath]

Alas this is a much complained about iOS security feature. We can't change it, as Apple designed it to work that way.

[Trakmasters]

I had the same issue with a few nest thermostats on the mr34. I called meraki and relayed the problem, they push a fix to my AP and I never had a problem again. I had the same issue, but not on my IOS devices. And we use enterprise for our iOS devices. There is nowhere in the dashboard to change this.

[aruscheng]

Bro, I am facing the same issue with you.

Can I know the the version ID of the bug fix or the Meraki case ID for information? Many thanks!

[aruscheng]

I have talked with Meraki today, find out that this issue is caused by DCD enabled.

If you don't want the user to re-authentication again, you can find a function named "Enable data-carrier detect?" under the access control page. Disable it and will be fine!

*** Quote from Meraki ***
If data-carrier detect is enabled, sessions will be revoked and accounted for whenever a client disassociates from a network. To allow clients to reassociate to the network without re-authorization, do not enable data-carrier detect. See also RFC 2866 §5.10.
*******************************

[cmazur]

Where is this DCD disable feature? on the phone, on the Meraki dashboard, etc?

thanks

[aruscheng]

DCD feature is under the Meraki Dashboad > Wireless > Access control.

For my environment, association requirements are open and splash page is using "Sign-on with my RADIUS".

L2 & L3 settingDCD feature

[Jeff Lin]

If DCD feature disable and client wireless signal didn't appear near Meraki AP, how long client need to re-authentication when client appear again ?

[aruscheng]

It should depends on what method that you choose for the authentication and the session expires or not.

If the session does not expires, there is no re-authentication requirement.

So, the client endpoint re-associate to the SSID within 2-3 sec.

Otherwise, the authentication method will affect the association time because of the network latency problem etc.

In my environment, I have choose Meraki Cloud for authentication.

First time, it takes around 12 sec and re-associate takes 2-3 sec (session does not expires).