Aironet 1252 AG Issues

threatcon · ‎07-24-2012

Hello,

I have 2 Cisco 1252 AGs setup in a workgroup bridge. I have clients connected to the workgroup bridge access point via ethernet. If the clients are not active, the root access point deauthenticates and disassociates the clients every 6 minutes. The only way to bring them back up is to log into the workgroup bridge access point, ping them, the log int the root access point and ping them. If I do not ping them from the root access point, when I perform "sh dot11 associations" the clients will show but with 0.0.0.0 IP address. How do I get the root to stop deauthenticating the clients?

WBG#ping 172.18.203.110

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.18.203.110, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/12 ms
WBG#ping 172.18.203.111

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.18.203.111, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/8 ms
WBG#
Root#sh dot11 ass

802.11 Client Stations on Dot11Radio0:

SSID [Root] :

MAC Address    IP address      Device        Name            Parent         Stat                                                                                                                     e
0016.2510.xxxx 0.0.0.0         WGB-client    -               2894.0f8d.xxxx Asso                                                                                                                     c
0016.2510.xxxx 0.0.0.0         WGB-client    -               2894.0f8d.xxxx Asso                                                                                                                     c
08d0.9f6f.xxxx 0.0.0.0         WGB-client    -               2894.0f8d.xxxx Asso                                                                                                                     c
2894.0f8d.xxxx 172.18.203.109 WGB           WBG       self           Asso                                                                                                                     c

Root#ping 172.18.203.110

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.18.203.110, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/4/12 ms
Root#ping 172.18.203.111

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.18.203.111, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/5/12 ms
Root#sh dot11 ass

802.11 Client Stations on Dot11Radio0:

SSID [Root] :

MAC Address    IP address      Device        Name            Parent         State
0016.2510.xxxx 172.18.203.110 WGB-client    -               2894.0f8d.xxxx Assoc
0016.2510.xxxx 172.18.203.111 WGB-client    -               2894.0f8d.xxxx Assoc
08d0.9f6f.xxxx 0.0.0.0         WGB-client    -               2894.0f8d.xxxx Assoc
2894.0f8d.xxxx172.18.203.109 WGB           WBG       self           Assoc

Log.

Jul 24 20:46:59.066: %DOT11-6-ADD: Interface Dot11Radio0, Station 0016.2510.xxx Associated to Parent 2894.0f8d.xxx

Jul 24 20:47:07.190: %DOT11-6-ADD: Interface Dot11Radio0, Station 0016.2510.xxx Associated to Parent 2894.0f8d.xxx

Jul 24 20:53:00.402: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0016.2510.xxx

Jul 25 00:02:35.314: %DOT11-6-ADD: Interface Dot11Radio0, Station 0016.2510.xxx Associated to Parent 2894.0f8d.xxx

Jul 25 00:02:45.510: %DOT11-6-ADD: Interface Dot11Radio0, Station 0016.2510.xxx Associated to Parent 2894.0f8d.xxx

Jul 25 00:08:00.462: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0016.2510.xxx

Jul 25 00:12:39.637: %DOT11-6-ADD: Interface Dot11Radio0, Station 0016.2510.xxx Associated to Parent 2894.0f8d.xxx

Jul 25 00:12:43.705: %DOT11-6-ADD: Interface Dot11Radio0, Station 0016.2510.xxx Associated to Parent 2894.0f8d.xxx

Jul 25 00:19:00.465: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0016.2510.xxx

Jul 25 00:50:46.789: %DOT11-6-ADD: Interface Dot11Radio0, Station 0016.2510.xxx Associated to Parent 2894.0f8d.xxx

Jul 25 00:50:49.929: %DOT11-6-ADD: Interface Dot11Radio0, Station 0016.2510.xxx Associated to Parent 2894.0f8d.xxx

Jul 25 00:57:00.481: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0016.2510.xxx

Jul 25 00:58:00.481: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0016.2510.xxx

Jul 24 20:46:59.066: %DOT11-6-ADD: Interface Dot11Radio0, Station 0016.2510.xxx Associated to Parent 2894.0f8d.xxx
Jul 24 20:47:07.190: %DOT11-6-ADD: Interface Dot11Radio0, Station 0016.2510.xxx Associated to Parent 2894.0f8d.xxx
Jul 24 20:53:00.402: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0016.2510.xxx
Jul 24 20:53:00.402: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0016.2510.xxx
Jul 25 00:02:35.314: %DOT11-6-ADD: Interface Dot11Radio0, Station 0016.2510.xxx Associated to Parent 2894.0f8d.xxx
Jul 25 00:02:45.510: %DOT11-6-ADD: Interface Dot11Radio0, Station 0016.2510.xxx Associated to Parent 2894.0f8d.xxx
Jul 25 00:08:00.462: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0016.2510.xxx
Jul 25 00:08:00.462: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0016.2510.xxx
Jul 25 00:12:39.637: %DOT11-6-ADD: Interface Dot11Radio0, Station 0016.2510.xxx Associated to Parent 2894.0f8d.xxx
Jul 25 00:12:43.705: %DOT11-6-ADD: Interface Dot11Radio0, Station 0016.2510.xxx Associated to Parent 2894.0f8d.xxx
Jul 25 00:19:00.465: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0016.2510.xxx
Jul 25 00:19:00.465: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0016.2510.xxx
Jul 25 00:50:46.789: %DOT11-6-ADD: Interface Dot11Radio0, Station 0016.2510.xxx Associated to Parent 2894.0f8d.xxx
Jul 25 00:50:49.929: %DOT11-6-ADD: Interface Dot11Radio0, Station 0016.2510.xxx Associated to Parent 2894.0f8d.xxx
Jul 25 00:57:00.481: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0016.2510.xxx
Jul 25 00:58:00.481: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0016.2510.xxx

Amjad Abdullah · ‎07-24-2012

Do you have any kind of timeout enabled on either your root or WGB APs?
Do you have ARP caching enabled?
What security is used for the infrastructure SSID?

Rating useful replies is more useful than saying "Thank you"

threatcon · ‎07-25-2012

Amjad,

thanks for the reply. There are no timeouts set, I am using WPA-PSK for security and I have never turned on ARP caching. How would I check that?

Amjad Abdullah · ‎07-26-2012

Do the clients have static or dhcp IPs?

I suspected some kind of timeout either configured or default that causes the issue but I am not sure. If the root AP is lightweight We would have checked some stuff on the controller but my experience with autonomous is shallow when it gets to timers stuff! Sorry.

The docs can be helpful though about troubleshooting WGB issues.

I am a bit busy so cant do that atthe mean time but you bcan oogle and read cisco doccs about i.

HTH

Amjad

Sent from Cisco Technical Support iPad App

Rating useful replies is more useful than saying "Thank you"