Wireless user limited access after period time using WPA2 PEAP+MSCHAPv2

[nvanphuong]

Dear Sir/Madam,

I've deployed Cisco wireless controller for my Customer using PEAP + MSCHAPv2 authentication, WPA2 encryption.

The Topology:

User ---> AccessPoint ---> WLC 5508 ---> Cisco ACS 5.1 ---> Microsoft AD user

User (windows 7) can successfully connect to WLC, authentication, ... and go to Internet.

But after period time (about 15 minute), the connection is disconnect (limited access); user must disconnect and reconnect to go to Internet.

I check authentication log on ACS 5.1, see that user attempt authentication many time (10 time or more after period 2 minute). Is this normal behavior?

Please help me find out the problem.

Attached file is log on ACS

Thanks in advance

Phuong.

[Surendra BG]

run the below debug on the controller and paste the same here..

CONTROLLER> debug client

Regards

Surendra