[Wifi] Forced to reconnect when users roam from AP1 to AP2

[wcs000001]

Hello all,

I am having some troubles with client roaming on a 5508 controller running firmware 7.0.220.0.

As soon as a client roams between 2 APs, an authentification is requested. Moving from one AP to another, users must login again.

Is someone has already experienced or had his problem? Is there has an option at the wireless controller to activate?

Thank you in advance

[Rasika Nayanajith]

Pls attach "debug client <client_mac_address> output taken from your WLC while this roam occur. That will tells us why roaming is not working.

Also attach "show wlan <wlan_id> output as well.

HTH

Rasika

[wcs000001]

Hi,

For now, i don't have an example of "debug client"

Pls check what i found in the logs

[Rasika Nayanajith]

Hi,

Disable (untick in WLC GUI) below settings highlighted in RED. See whether that helps. 

If no difference , the get the "debug client <mac_address>" output  when that client is roaming to further assist

(Cisco Controller) >show wlan 1

 Wi-Fi Protected Access (WPA/WPA2)............. Enabled
      WPA (SSN IE)............................... Enabled
         TKIP Cipher............................. Enabled
         AES Cipher.............................. Enabled
      WPA2 (RSN IE).............................. Enabled
         TKIP Cipher............................. Enabled
         AES Cipher.............................. Enabled

(Cisco Controller) >show wlan 2

 Wi-Fi Protected Access (WPA/WPA2)............. Enabled
      WPA (SSN IE)............................... Enabled
         TKIP Cipher............................. Disabled
         AES Cipher.............................. Enabled
      WPA2 (RSN IE).............................. Enabled
         TKIP Cipher............................. Disabled
         AES Cipher.............................. Enabled
      Auth Key Management
         802.1x.................................. Disabled
         PSK..................................... Enabled
         CCKM.................................... Disabled
         FT(802.11r)............................. Disabled
         FT-PSK(802.11r)......................... Disabled

Pls do not forget to rate our responses if that helpful to you.

HTH

Rasika

[mohanak]

Foreign WLC loses anchor information during inter-controller roam

CSCud59643

Description

Symptom: failed inter-controller roam on wlan mapped to same anchor for 5508 at 7.0.220.0

Conditions:A layer-2 inter-controller roam between two 5508's both mapped to same anchor 5508 all on 7.0.220.0, sometimes do not pass the the achor ip information during the mobility messaging. Due to this, client gets mapped to foreign-1 as mobility peer while on foreign-2 losing its network access. Client entry automatically gets removed form anchor.

Issue not observed on two 4400 foreign WLC mapped to same DMZ 5508 anchor at 7.0.220.0

Workaround:Clearing client entries from both foreign WLC resolves issue and clients perform inter-controller roaming fine for certain period of time and then hit the same state again.

[wcs000001]

hi,

i just have one WLC for 21 AP

[Dhiresh Yadav]

Hi ,

Your logs are not helpful to advice you.

When your client is connected to one AP ..check "sh client detail <mac-address>" to see if it can see any neighbor APs with good signal strength where it can actually roam. Specially the 2nd AP where you are going to roam. There might be coverage hole in between where client doesnt think it can roam. If it is good and still it re-authenticates , then there might be client issue also as why it is sending Association request again. So as others requested "debug client <mac-address>" will give the exact picture.

I hope both the APs are connected to the same WLC.