I have a problem with clients that are associated to an AP but loose connectivity to the network (ping tested),
the AP is LWAPP 1140, IOS, c1140-k9w8-mx.124-21a.JHA, managed by a WLC 5508,
the AP is HREAP configured and there are other AP's with the same configuration that works fine.
This has been working fine, but a week ago the network security departament, do some changes on the security policy using the Cisco ACS and now the client are also filtered using the mac address, i only have problems on one AP located on another site where the WLC is located.
The AP shows no logs of network disconnection, or losing connectivy with the WLC, for me the AP is OK.
but the client is connected to the network doing pings to the dns server for example, after a while (maybe 10 mins) the pings drops, but the client is still connected to the wireless SSID, i have to disconnect and reconnect it again so the pings replies again. I use netstumbler and confirm that the signal is OK, and that the SSID is still operational when this happens.
I think this maybe has to do with deauthentication
how could i debug this, so i could show the net security departament that the problem is not the AP or the WLC, or maybe i can realize that this is a network problem.
If the client shows up in the wlc and under the monitor client ,the policy state of the client is in run, that means the client has successfully authenticated and is on the wireless. This means it must be a network issue. SO go to the monitor tab and click on clients and click on the client mac address. You will see the policy manager state and look to see if its in RUN.
Transferring Crash file from standby: Login to the Active WLC in HA.
From CLI: (Cisco Controller) >transfer upload datatype crash (Cisco
Controller) >transfer upload filename (Cisco
Controller) >transfer upload mode tftp (Cisco Controller) >transfer
This is the start of a display filter cross reference between Wireshark
and OmniPeek. The 1st installment is a table of advanced filters. More
filters will be added as time allows. It is a living doc, so check back
for changes every so often Please feel f...