Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

GUEST User gets disconnected on Guest Wlan on 2602 ap in Flexconnect mode

Hey guys,

I have configured a guest Wlan for guest users in remote site. The Ap's are in flexvonnect mode and authentication is web authentication where a lobby user generates and distributes passwords to guest. The guest devices however gets disconnected after 10-15 minutes and needs to be reauthenticated.

I have disabled session timeout feature but still no relief.

Any comments ???

Thanks

2 ACCEPTED SOLUTIONS

Accepted Solutions
VIP Purple

GUEST User gets disconnected on Guest Wlan on 2602 ap in Flexcon

HI Sandeep,

I think, it's a expected. client has to re-login/reauth after session timeout or deauth.

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008067489f.shtml

Note: If clients are active after successful login, they will get           de-authenticated and entry can still be removed from the controller after the           session timeout period configured on that WLAN (for example,1800 seconds by           default and can be changed using this CLI command: config wlan           session-timeout ). When this           occurs, client entry is removed from the controller. If the client associates           again, it will move back in a Webauth_Reqd state.

If clients are in Webauth_Reqd state, no matter if they are active or       idle, the clients will get de-authenticated after a web-auth required       timeout period (for example, 300 seconds and this time is non-user       configurable). All traffic from the client (allowed via Pre-Auth ACL) will be       disrupted. If the client associates again, it will move back to the       Webauth_Reqd state.

There is an enhancement request filed esp. for your situation with Pre-auth ACL.

CSCtj32812    DHCP Option to mitigate the problem of guest client rejoining network

Regards

Dont forget to rate helpful posts

Hall of Fame Super Silver

Re: GUEST User gets disconnected on Guest Wlan on 2602 ap in Fle

Change the idle timer.... This is what's needed when you are using WebAuth or PassThrough.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
4 REPLIES
VIP Purple

GUEST User gets disconnected on Guest Wlan on 2602 ap in Flexcon

HI Sandeep,

I think, it's a expected. client has to re-login/reauth after session timeout or deauth.

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008067489f.shtml

Note: If clients are active after successful login, they will get           de-authenticated and entry can still be removed from the controller after the           session timeout period configured on that WLAN (for example,1800 seconds by           default and can be changed using this CLI command: config wlan           session-timeout ). When this           occurs, client entry is removed from the controller. If the client associates           again, it will move back in a Webauth_Reqd state.

If clients are in Webauth_Reqd state, no matter if they are active or       idle, the clients will get de-authenticated after a web-auth required       timeout period (for example, 300 seconds and this time is non-user       configurable). All traffic from the client (allowed via Pre-Auth ACL) will be       disrupted. If the client associates again, it will move back to the       Webauth_Reqd state.

There is an enhancement request filed esp. for your situation with Pre-auth ACL.

CSCtj32812    DHCP Option to mitigate the problem of guest client rejoining network

Regards

Dont forget to rate helpful posts

Hall of Fame Super Silver

Re: GUEST User gets disconnected on Guest Wlan on 2602 ap in Fle

It is fine that you disable the session timer, but you need to increase the idle timer. The default is 300 seconds and typically I would set that to 2-4 hours. This affects many Apple devices not too many windows machines. If the idle timer expires, the guest will be forced to login again. For example, if the iPad screen goes down, the idle timer counts down and when the value expires, the WLC removes the devices. The user is then forced to login using the browser.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
New Member

GUEST User gets disconnected on Guest Wlan on 2602 ap in Flexcon

Hey ..Thanks guys.

Is this the case by default when authentication is web based , becasue users connected to other wlans donot get disconnected, where authentication mechanism is different.

..

Hall of Fame Super Silver

Re: GUEST User gets disconnected on Guest Wlan on 2602 ap in Fle

Change the idle timer.... This is what's needed when you are using WebAuth or PassThrough.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
422
Views
0
Helpful
4
Replies
CreatePlease to create content