WiSM and ACS frequen reauthentications

[with_joerg]

We have a WiSM deployed. The WLANs use WPA2 and the session timeout is set to default (1800). The ACS is set to authenticate the LEAP clients against a windows AD server.

Clients can associate to the WLAN without any trouble. But they need to reauthenticate every minute although the signal is stable. The clients do not notice this. The only trouble we have is that there are tons of entries (150 clients reauthenticating every minute ) in the ACS and the Controller log says twice a day that the ACS stopped responding for a short period of time.

I think this could be a setting in the ACS or the trouble might come from the backend DB. What do you think? What could I do to get this down to an acceptable level?

[dsidley]

Check the user group properties in the ACS that your wireless users are authenticating against... there is a property near the bottom called "ieee session timeout" or something to that effect (in seconds)

If you don't see this property then you will have to add it via the ACS services menu

[with_joerg]

Thanks!

In the IETF Radius attributes there is a "[027] session timeout". Could that be it?

--Joerg