Wireless printer disconnect from WiFi

tan_tran81 · ‎10-01-2013

Hi Guys,

This is my first post topic.

We have a strange problem with wireless network dropping out on printers.

Our network has couples of AIR-CAP3502I (around 60 of them) and WLC4404 . Most of those AIR CAP are located at our retail stores and running in HREAP mode. SSID is configured as local switching / central authen with WPA2 / AES.

It works perfectly fine on laptop / and other mobile device but just not printers. We tried Brother and HP wireless printer and they're both having same issue.

Every now and then, printer disconnected from wireless network. It is shown as associated on controller, but we can't ping it at all from local network to the printer

The funny thing is, when this happened, we could ping the printer from Head office. (I forgot to mention, we have MPLS network between stores and HO, router is also Cisco gear).

Only way to fix this is reboot the printer.

Has anyone bump into this situation before?

Many thank,

Tandy

Scott Fella · ‎10-02-2013

Post your show WLAN

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***

tan_tran81 · ‎10-02-2013

Hi,

Below is config detail.

WLAN Identifier.................................. 3

Profile Name..................................... MyCompany

Network Name (SSID).............................. MyCompany

Status........................................... Enabled

MAC Filtering.................................... Disabled

Broadcast SSID................................... Enabled

AAA Policy Override.............................. Disabled

Network Admission Control

Radius-NAC State............................... Disabled

SNMP-NAC State................................. Disabled

Quarantine VLAN................................ 0

Maximum number of Associated Clients............. 0

Number of Active Clients......................... 25

Exclusionlist.................................... Disabled

Session Timeout.................................. Infinity

CHD per WLAN..................................... Enabled

Webauth DHCP exclusion........................... Disabled

Interface........................................ int-wifi

Multicast Interface.............................. Not Configured

--More-- or (q)uit

WLAN ACL......................................... unconfigured

DHCP Server...................................... Default

DHCP Address Assignment Required................. Disabled

Static IP client tunneling....................... Disabled

Quality of Service............................... Silver (best effort)

Scan Defer Priority.............................. 4,5,6

Scan Defer Time.................................. 100 milliseconds

WMM.............................................. Allowed

WMM UAPSD Compliant Client Support............... Disabled

Media Stream Multicast-direct.................... Disabled

CCX - AironetIe Support.......................... Disabled

CCX - Gratuitous ProbeResponse (GPR)............. Disabled

CCX - Diagnostics Channel Capability............. Disabled

Dot11-Phone Mode (7920).......................... Disabled

Wired Protocol................................... None

IPv6 Support..................................... Disabled

Peer-to-Peer Blocking Action..................... Disabled

Radio Policy..................................... All

DTIM period for 802.11a radio.................... 6

DTIM period for 802.11b radio.................... 6

Radius Servers

Authentication................................ Global Servers

Accounting.................................... Global Servers

--More-- or (q)uit

Dynamic Interface............................. Disabled

Local EAP Authentication......................... Disabled

Security

802.11 Authentication:........................ Open System

Static WEP Keys............................... Disabled

802.1X........................................ Disabled

Wi-Fi Protected Access (WPA/WPA2)............. Enabled

WPA (SSN IE)............................... Disabled

WPA2 (RSN IE).............................. Enabled

TKIP Cipher............................. Disabled

AES Cipher.............................. Enabled

Auth Key Management

802.1x.................................. Disabled

PSK..................................... Enabled

CCKM.................................... Disabled

FT(802.11r)............................. Disabled

FT-PSK(802.11r)......................... Disabled

FT Reassociation Timeout......................... 20

FT Over-The-Air mode............................. Enabled

FT Over-The-Ds mode.............................. Enabled

CCKM tsf Tolerance............................... 1000

CKIP ......................................... Disabled

--More-- or (q)uit

IP Security................................... Disabled

IP Security Passthru.......................... Disabled

Web Based Authentication...................... Disabled

Web-Passthrough............................... Disabled

Conditional Web Redirect...................... Disabled

Splash-Page Web Redirect...................... Disabled

Auto Anchor................................... Disabled

H-REAP Local Switching........................ Enabled

H-REAP Local Authentication................... Disabled

H-REAP Learn IP Address....................... Disabled

Client MFP.................................... Disabled

Tkip MIC Countermeasure Hold-down Timer....... 60

Call Snooping.................................... Disabled

Roamed Call Re-Anchor Policy..................... Disabled

SIP CAC Fail Send-486-Busy Policy................ Enabled

SIP CAC Fail Send Dis-Association Policy......... Disabled

Band Select...................................... Disabled

Load Balancing................................... Disabled

Mobility Anchor List

WLAN ID IP Address Status

------- --------------- ------

Scott Fella · ‎10-02-2013

I would set the DTIM to 2 and also enable H-REAP Learn IP Address.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***

Leo Laohoo · ‎10-02-2013

It is shown as associated on controller, but we can't ping it at all from local network to the printer

when this happened, we could ping the printer from Head office.

Sounds like either the ARP is going awry.

What happens when this happens and you run a traceroute from the local network?

tan_tran81 · ‎10-03-2013

Hi guys,

Thanks for quick reply,

Below is traceroute from local network

Tracing route to 10.2.46.250 over a maximum of 30 hops

1 printer.mynet.int [10.2.46.10] reports: Destination host unreachable.

show arp on the local router

Internet 10.2.46.250 0 0080.92a9.cb51 ARPA BVI1

The mac-address is correct.

Ping from local host computer

Pinging 10.2.46.250 with 32 bytes of data:

Reply from 10.2.46.10: Destination host unreachable.

Ping from Head Office network

Pinging 10.2.46.250 with 32 bytes of data:

Reply from 10.2.46.250: bytes=32 time=43ms TTL=251

Reply from 10.2.46.250: bytes=32 time=44ms TTL=251

Controller show AP is in associated and I can ping the HREAP AP

I've tried suggestion from Scott to change DTIM and Learn client IP Address but it doesn't seem to fix the problem.

Many thanks

rajasekharak · ‎10-07-2013

Have you tested the printers before deploying in production? It could be an printer driver firmware/ setting issue causing this.

Raja

tan_tran81 · ‎10-08-2013

Hi,

Both HP and Brother are tested at HO network and works fine for few weeks prior sent to remote site.

I don't think it related to driver because it happened at network layer. All firmware on printers are latest version.

In previous post, when issue occur, I'm still able to ping printer from head office but not local. This makes me think issue sits within hreap ap.

Is there a way I could enable debug to see what happening on ap based on printer MAC address?

Many thanks,

Tandy.

Sent from Cisco Technical Support iPhone App

tan_tran81 · ‎10-08-2013

Hi all,

Leo post is pointed to the problem.

When issue occurs, all local computer does not have arp entry except router which explain why we could ping from head office but not locally.

If I add static arp entry, I can ping from local.

I capture traffic on one of computer and see arp broadcast is sent but nothing receive.

Could it be ap drop arp request somehow?

Sent from Cisco Technical Support iPhone App

Leo Laohoo · ‎10-08-2013

Can you check your Subnet Mask and Default Gateway of your printers and make sure they match with the router?

What is the model of your router?

tan_tran81 · ‎10-09-2013

Yes, they are correct.

Sent from Cisco Technical Support iPhone App

tan_tran81 · ‎10-09-2013

Router is C1801.

Sent from Cisco Technical Support iPhone App

Abhishek Abhishek · ‎10-09-2013

Yes, it may be the issue of ARP where the IP is not getting mapped to the MAC address. Try to do the static binding of the MAC address of the printer.

tan_tran81 · ‎10-10-2013

Static arp entries will work but I think this is alternative option.

Still have to find out why ap not forwarding arp request.

Anyone got suggestion?

Sent from Cisco Technical Support iPhone App

tan_tran81 · ‎10-13-2013

Hi Guys,

Just another found:

Client on wired network send arp req broadcast. This request reaches router interface and all other wired devices

except wireless client.

debug arp on AP itself and never received any rcvd response.

Can anyone please help? This problem is insane.

Many thanks.