Wireless Client not Associating to WLC

[Owais Khan]

Hi

I am having a very unusual behavior with my WLC, as it has been up and running for sometime now and every thing was working fine but from today I started getting complaints that people are not able to connect to SSID. There is only one SSID being broadcasted which is guest and is having a layer 2 security, that is WPA2 - PSK. The client machine keep trying to acquire an IP address but never gets one. But if you keep trying it will take one eventually after a long time, and while connected it will get disconnected any time when I checked for the logs on the NCS for the a particular client I get this message

Client '60:d8:19:c1:8d:26 (0.0.0.0)' which was associated with interface '802.11b/g/n' of AP 'AP04' is excluded. The reason code is '4(802.1X Authentication failed 3 times.)'.

and for some clients I get reason code 2 - Association failed

I am having a DHCP scope on the controller which is

network         10.124.32.0

subnet mask  255.255.240.0

which can easily accomodate more than 4000 users.

the session timeout is disabled on the WLAN

After multiple attempts to connect to the SSID, when the user is finally connected it is still retaining the same IP as it was having in its previous session.

on some of the logs for some users I noticed on the NCS that the specific user has been blacklisted because of the multiple authentication / association.

Please find the attached client status,,,, I have marked the Policy Manager State & the Radius NAC state,, which seems bit awkward as I never configured them for 802.1x,,, infact Radius NAC state has been disabled....

I have also attached the Debug output for a specific client

[Leo Laohoo]

The client machine keep trying to acquire an IP address but never gets one. But if you keep trying it will take one eventually after a long time, and while connected it will get disconnected any time when I checked for the logs on the NCS for the a particular client I get this message

And what firmware is your controller running on?

Try creating an SSID with OPEN authentication to determine if you are getting this problem.

Are all clients experiencing this problem or only a few?  If a few, what kind of clients?  Smartphones/tablets or a variety of smartphones/tablets, laptops?

[Owais Khan]

firmware:

7.2.103.0

Most of the client are experiencing this problem and its a variety of devices, even happened on my laptop and my phone..

I did a reset on the controller and it seems that it is working fine for now but I can still some logs on the NCS that it is excluding clients somewhere with in the campus with a reason code 4!!!!!

So far it is working fine but I am having this weird feeling that by the end of the day it might happen again and I am still trying to figure out why exactly that happened!!!

[Leo Laohoo]

Create a simple DHCP scope within the WLC itself.  The objective is to determine if you've got any issues within the network.

Is wired having issues with acquiring IP Addresses?

Can you try to get a debug?

[Owais Khan]

Wired clients are having no problems at all....

The DHCP is with in the controller it self.......

I have attached a file in my first post - which is a debug on the controller for a particular client which was having problem connecting to the internet....

[Owais Khan]

hey leo,,

Now there is a separate issue we are facing..... the internet got dead slow...... it was working fine till yesterday......