07-02-2014 09:56 PM - edited 07-05-2021 01:10 AM
Hi, we use a 5508 (7.3.112.0) and 3502i APs.
We are having an issue where multiple clients connecting to a single AP(Like in a training room) are being disconnected or generally having a poor user experience.
I have attached a debug of a failed session, I ran a ping simultaneously to the client also attached
Roaming aggressiveness is set to 3.medium
Any ideas?
Thanks
Brendan
07-02-2014 10:50 PM
I'd upgrade to 7.6.120.X.
07-03-2014 06:55 PM
Thanks Leo, I had a quick read through the revision notes, there is nothing there that points to the type of behavior we are experiencing, have you had this type of issue in the field and this is what resolved the problem?
07-03-2014 07:33 PM
Hello Brendan,
You have posted in the Small Business Forums, and we don't usually support the Aironet APs.
You will probably have better luck getting an answer if you move your post to the Wireless Mobility section.
Thank you for choosing Cisco,
Christopher Ebert - Advanced Network Support Engineer
Cisco Small Business Support Center
07-04-2014 01:33 AM
Try this: http://www.cisco.com/en/US/products/ps6366/products_qanda_item09186a00808b4c61.s html
The ability to configure the WPA-Handshake timeout through the WLCs was integrated in software release 4.2 and later. You do not need this option in earlier WLC software versions.
These commands can be used to change the WPA Handshake timeout:
config advanced eap eapol-key-timeout <value>
config advanced eap eapol-key-retries <value>
The default values continue to reflect the WLCs current behavior.
- the default value for eapol-key-timeout is 1 second.
- the default value for eapol-key-retries is 2 retries
Note: On IOS APs, this setting is configurable with the dot11 wpa handshake command.
You can also configure the other EAP parameters with the options under the config advanced eap command.
(Cisco Controller) >config advanced eap ?
eapol-key-timeout
Configures EAPOL-Key Timeout in seconds.
eapol-key-retries
Configures EAPOL-Key Max Retries.
identity-request-timeout
Configures EAP-Identity-Request Timeout in seconds.
identity-request-retries
Configures EAP-Identity-Request Max Retries.
key-index
Configure the key index used for
dynamic WEP(802.1x) unicast key (PTK).
max-login-ignore-identity-response
Configure to ignore the same username count
reaching max in the EAP identity response
request-timeout
Configures EAP-Request Timeout in seconds.
request-retries
But again, these timings are during an authentication for the uni-cast key, not the group key (multicast/broadcast key).
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: