WLC 2504 dropping users

[Salvador Antonio Quintanilla Mendoza]

Hi,

I have issues with a WLC 2504, users report a connection lost, then the admin restart the WLC and the issue is resolved for a while....

Wireless Controller
Marca: Cisco
Modelo: AIR-CT2504-K9
Software Version: 7.6.130.0

I found a lot of this messages in the WLC, any idea?

%*spamApTask7: Mar 10 17:46:40.447: #LWAPP-3-REPLAY_ERR: spam_lrad.c:35169 The system has received replay error on slot 0, WLAN ID 1, count 2 from AP bc:67:1c:e9:c0:f0
%*spamApTask7: Mar 10 17:44:40.459: #LWAPP-3-REPLAY_ERR: spam_lrad.c:35169 The system has received replay error on slot 0, WLAN ID 1, count 1 from AP bc:67:1c:e9:c0:f0
*spamApTask7: Mar 10 17:12:40.646: #LWAPP-3-REPLAY_ERR: spam_lrad.c:35169 The system has received replay error on slot 0, WLAN ID 1, count 1 from AP bc:67:1c:e9:c0:f0

(filed attached)

[Rasika Nayanajith]

Hi

You have to check what's going on near AP bc:67:1c:e9:c0:f0

Below is the explanation of the error message you are getting.

Error Message %LWAPP-3-REPLAY_ERR: Received replay error on slot [dec], WLAN ID [dec], count [dec] from AP [hex]:[hex]:[hex]:[hex]:[hex]:[hex]

Explanation The controller has received a replay error on the specified AP and WLAN.

Recommended Action Check if there is a replay attack in the network.

http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-0/message/guide/sysmsg80/lradsim_lwapp_msgs15.html#pgfId-1008440

HTH

Rasika

**** Pls rate all useful responses ****

[Salvador Antonio Quintanilla Mendoza]

And how can I verify if there is an attack?? some tool? or confuguration that i can apply in order to resolve this?