Wireless users getting EAP time-out Error

[Rahul Wankhade]

Please refer below logs which I captured in RA trace. 

2026/07/03 05:06:56.166 client-orch-sm Controller initiated client deletion with code: CO_CLIENT_DELETE_REASON_CLIENT_EAP_TIMEOUT_FAILURE. Explanation: Client reported EAP error on deauth frame. Actions: Check AAA server, and collect RA trace and over the air capture

2026/07/03 05:06:56.193 client-orch-sm Controller initiated client deletion with code: CO_CLIENT_DELETE_REASON_FT_AUTH_RESPONSE. Explanation: Client failed pre-authentication during FT roaming. Actions: None required, if this happens frequently, collect RA and AP side debugs for the client

What could be the issue ? on ISE end no disconnection, looks good. FT also disabled on WLC. Please help here to fix this issue. 

@cisco wireless 

[balaji.bandi]

When an EAP timeout (CO_CLIENT_DELETE_REASON_CLIENT_EAP_TIMEOUT_FAILURE) occurs, it means the WLC sent an EAP-Request challenge payload to the client, but the client completely failed to reply within the allocated window.

Tweak the WLC Client EAP Timers (Prevent the Drop)

Please tell us more about the environment, the WLC Model and OS Code version, and the AP model. Does this occur on all client devices or only some device models?

Has this worked for you, or do you continue to have an issue? If this recently started, what has changed any OS upgrades on WLC or end devices?

Also, please try a client-side driver update, and on the core side, upgrade to the latest stable code and check for any bugs around.

[Mark Elsen]

  - @Rahul Wankhade            What access point models are you using ?
                                             + What is the 9800 controller current software version ?

  M.

[Rahul Wankhade]

Hi @Mark Elsen thanks for your response. 

AP model CW9164I-ROW,  EWLC C9500-24Y4C software version  C9800-Wirele 17.12.04. C C9800-SW-iosxe-wlc.17.12.04.SPA.bin

[Mark Elsen]

  - @Rahul Wankhade                      Check if this can help :
                                                                  conf t
                                                                                     wireless security dot1x identity-request retries 10
                                                                                     wireless security dot1x identity-request timeout 1
                                                                                     wireless security dot1x request retries 10
                                                                                     wireless security dot1x request timeout 1

 M.

[Rahul Wankhade]

@Mark Elsen but its not too aggressive ? 

[Mark Elsen]

  - @Rahul Wankhade                    It should be tried . as a first workaround to test, because it could be a driver bug

  M.

[aleabrahao]

@Rahul Wankhade What is your controller version and AP model?
Could you please send a screenshot confirming that FT is indeed disabled?

[Leo Laohoo]

---

@Rahul Wankhade wrote:

CO_CLIENT_DELETE_REASON_CLIENT_EAP_TIMEOUT_FAILURE

---

What is the wireless NIC of the client?  I want to know the exact brand and exact model of the wireless NIC.

[Rahul Wankhade]

Hi @Leo Laohoo thanks for your response. Below are the requested Information. Its Windows HP laptop. and Its multiple not single end device. 

Device: Intel(R) Wi-Fi 6 AX201 160MHz

PNP ID: PCI\VEN_8086&DEV_A0F0&SUBSYS_00748086&REV_20\3&11583659&0&A3

Guid: {8686678C-B254-4BD5-B937-A3A4DB019AA7}

Current driver version: 24.40.0.4

Driver date: 4-13-2026

DevNode flags: 0x180200a

[Leo Laohoo]

Try and configure the wireless NIC settings for 802.11ac and see if this improve things.

[Rahul Wankhade]

Pls share the step ? does its need admin rights ? 

[Leo Laohoo]

---

@Rahul Wankhade wrote:
Pls share the step ? does its need admin rights ? 

---

No idea.  Talk to the team that manages the laptop OS.  

Set 802.11n/ac/ax Wireless Mode to 802.11ac. 

Set Preferred band to Prefer 5 Ghz band.

Set Roaming aggressiveness to Medium-High.

Reference:  Advanced Intel® Wireless Adapter Settings

[Rahul Wankhade]

Hi @balaji.bandi Thanks for your response. 

AP model CW9164I-ROW,  EWLC C9500-24Y4C software version  C9800-Wirele 17.12.04. C C9800-SW-iosxe-wlc.17.12.04.SPA.bin

Device: Intel(R) Wi-Fi 6 AX201 160MHz

PNP ID: PCI\VEN_8086&DEV_A0F0&SUBSYS_00748086&REV_20\3&11583659&0&A3

Guid: {8686678C-B254-4BD5-B937-A3A4DB019AA7}

Current driver version: 24.40.0.4

Driver date: 4-13-2026

DevNode flags: 0x180200a

Tweak the WLC Client EAP Timers (Prevent the Drop)  >> Please share the config sample 

[aleabrahao]

@Rahul Wankhade Is PMF enabled? If it is set to "Required," try changing it to "Optional" or disabling it.