WLC and client connection issue

[Bill Sparks]

Hello,

I have a AIR-WLC2112-K9 running code version 7.0.251.2. I have a weird issue where sometimes client(s) will connect to the wireless and obtain an IP address, but they won't have network access. It appears to be totally random. I.E. i could have the same model laptop with the same version Nic driver and the same everything, and one would connect to my WPA2 SSID and the other would not.  Recently, I was troubleshooting the issue on 2 identically configured/same model laptops. On the laptop that was unable to access the network, i changed the NIC's WPA2 security from AES to TKIP, and it connected immediately. But i looked at the other identical laptop which connected without issue, and it was configured for WPA2 AES. The issue seems to come and go. I have the 11 access points total with the following models:

• AIR-LAP1131AG-A-K9 
• AIR-LAP1142N-A-K9

At first, I thought it was the client wireless config, but the issue has happened on several different models that work fine on other networks and there's no apparent consistency. The users can take their laptop home and connect without issue to their home wireless. 

I was hoping to get some helpful information for troubleshooting this issue?

Thanks,

Bill

[Rasika Nayanajith]

Have you looked at "debug client <mac_address>" output when working & not working. That shoul help you to identify what's going on.

If it is PSK below should help you to understand the steps

http://mrncciew.com/2014/10/17/wlc-client-debug-part-2/

HTH

Rasika

*** Pls rate all useful responses ***

[Bill Sparks]

Sorry I am late with the response. I haven't been on site. I will try this today and update.

Thanks for the information.

Bill

[Scott Fella · Accepted solution]

Seems like the setup on the WLAN is wrong and the laptop profile will need to be deleted and updated.  You should now have a mix of WPA\TKIP and WPA2\AES defined on the WLAN.  This will cause issues you are seeing.  That being said, once you define the WLAN as WPA2\AES, then you need to either recreate the profile on each machine or you push this new policy via GPO.  The laptop would be setup as WPA2-Personal if using preshared key or WPA2-Enterprise if using 802.1x. 

Make sure you delete the profile and create it again after the WLAN is reconfigured.

Since you mentioned it works well at home, tells me that your configuration is not right.

-Scott

[Bill Sparks]

Sorry I am late with the response.  I will try this today and update.

Thanks for the information.

Bill

[Scott Fella · Accepted solution]

Keep us posted. 

-Scott