12-15-2011 04:28 PM - edited 07-03-2021 09:15 PM
Hello:
I have a couple wireless controllers running 6.0.202, one acting as an anchor, the other as a foreign controller, and I have a WLAN shared between them that uses web athentication. My question is, is there a web auth timeout command where it forces the user to log back in after so many minutes? If so, what is the default timer, and how do I change it?
Also, would I need to adjust this timer on both the anchor and foreign controllers, or the just the anchor?
Solved! Go to Solution.
12-15-2011 05:13 PM
Hello,
There are 2 timers that often come up for discussion.
1) Session timeout - This is specific to WLAN and by default is 1800 seconds (30 minutes). Once a client authenticates every 30 minutes they will be sent a deauth from the WLC. The main reason is to rekey your PMK and GMK. A guest will get the login screen every 30minutes as well.
2) User idle time out - This is set to 300 seconds (5 minutes). If the WLC doesnt see the traffic from the client in 5 minutes it deletes the client. Thus causing the guest to get the screen. This is a global change.
Any changes you do on the anchor controller wlan you need to make sure it matches on the foreign controllers.
Does that help?
12-16-2011 10:54 AM
The session timeout is specified via the advanced tab on each of the WLANs that you create on the WLC.
User idle timeout is under the Controller tab of the GUI.
12-15-2011 05:13 PM
Hello,
There are 2 timers that often come up for discussion.
1) Session timeout - This is specific to WLAN and by default is 1800 seconds (30 minutes). Once a client authenticates every 30 minutes they will be sent a deauth from the WLC. The main reason is to rekey your PMK and GMK. A guest will get the login screen every 30minutes as well.
2) User idle time out - This is set to 300 seconds (5 minutes). If the WLC doesnt see the traffic from the client in 5 minutes it deletes the client. Thus causing the guest to get the screen. This is a global change.
Any changes you do on the anchor controller wlan you need to make sure it matches on the foreign controllers.
Does that help?
12-16-2011 10:47 AM
Yes it does, thanks! However, I do have one more question: what are the actual commands to modify these timers?
12-16-2011 10:54 AM
The session timeout is specified via the advanced tab on each of the WLANs that you create on the WLC.
User idle timeout is under the Controller tab of the GUI.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide