cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1234
Views
4
Helpful
19
Replies

WLC Fast Transition

hs08
VIP
VIP

I have 2 SSID, 1st SSID the Fast Transition set to Adaptive and 2nd SSID set to Disabled and all client working normally. When i move the WLC (AP in flex mode) from one location to another location why iphone can't connect to the 1st SSID which Fast Transition set to Adaptive? Other client such as android, windows laptop can connect to this SSID.

When the WLC back online then the iphone can connect to the SSID. Anyone know why?

19 Replies 19

yes the error seem like incorrect password, but if the iphone user connect to non FT ssid then they able to connect.


@hs08 wrote:
yes the error seem like incorrect password, but if the iphone user connect to non FT ssid then they able to connect.

How many iPhones are in that site, just one?

What firmware is in that phone?

aleabrahao
Meraki Community All-Star
Meraki Community All-Star

@hs08 take a look at my answer and @Stefan Mihajlov 😉

I am not a Cisco employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.

@hs08When WLC goes down, FlexConnect AP loses access to FT key cache thats normally maintained on controller — and 802.11r only works properly when centralized key exchange is available... iPhones, whenever the SSID advertises FT will insist on trying fast transition auth path, and if that fails, they just give up instead of falling back 🙂

Android and Windows clients are more forgiving — if FT fails, they quietly fall back to a normal WPA2-PSK 4-way handshake and connect just fine, once WLC comes back online and AP re-syncs with it, FT key cache is available again, so iPhones connect without issues

If this helped, please mark it as Helpful.

Rich R
VIP
VIP

@hs08 you already have most of the answer from @aleabrahao and @Stefan Mihajlov but the devil is in the detail.
You have not stated:
- WLC model
- running code version
- AP model
all of these are relevant to the features in play.
Depending on the answers to those questions, refer to these docs to understand what you are seeing:
https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/112042-technote-wlc-00.html
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/technical-reference/cat-9800-flexconnect-branch-deployment-guide-og.html
https://www.cisco.com/c/en/us/td/docs/wireless/access_point/feature-matrix/ap-feature-matrix.html

And remember FT Adaptive is not recommended anymore:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/technical-reference/c9800-best-practices.html#Enable80211rFastTransition

 

------------------------------
Please click Helpful if this post helped you and Accept as Solution if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's   and   TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's,   Best Practices for 9800 WLC's   and   Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.196.0, latest 9800 releases, 8.5.182.12 (8.5.182.13 for 3504) and 8.5.182.109 (IRCM, 8.5.182.111 for 3504)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
Field Notice: FN74383 APs Running 17.12.4/5/6/6a May Run Out of Flash Space Preventing Upgrades
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs
Default AP console baud rate from 17.12.x is 115200 - introduced by CSCwe88390
AP supported channel lookup: https://apchannels.cisco.com/
Review Cisco Networking for a $25 gift card