Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

802.11x clients disconnecting from APs

Hey guys,

I am looking into some reports I have of users wifi dropping of causing interruptions to the the applications they are using.

The network they are connected on is a SSID which is secured using 802.11x. They all connect fine and seem to be connected correctly, but a lot of clients are frequently disconnected (they do manage to reconnect with a small drop in connectivity in between).

The time they can stay connected varies from device to device, but tends to be less than 10 minutes. Devices that stay in one location and dont roam at all are also experiencing these issues.

Below is the troubleshooting output from WCS for a client who is having this issue. It covers both the disconnection and then the clients reconnection a couple of minutes later.

 

08/23/2014 21:55:19 AKDT

ERROR

10.10.2.8

EAPOL-key is retransmitted.

08/23/2014 21:55:20 AKDT

ERROR

10.10.2.8

EAPOL-key is retransmitted.

08/23/2014 21:55:21 AKDT

ERROR

10.10.2.8

De-authentication sent to client. slot 1 (claller 1x_ptsm.c:534)

08/23/2014 21:55:21 AKDT

ERROR

10.10.2.8

 

08/23/2014 21:55:21 AKDT

ERROR

10.10.2.8

EAPOL-key is invalid, scheduling client for deletion.

08/23/2014 21:55:41 AKDT

ERROR

10.10.2.8

De-authentication sent to client. slot 1 (claller apf_ms.c:5113)

08/23/2014 21:55:41 AKDT

INFO

10.10.2.8

Radius packet received. Accounting-Response received from RADIUS server 10.10.102.2, receiveId = 0

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Controller association request message received.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Association request received from a client has an invalid RSN IE.(One reason could be mismatch in WPA2 algorithm).

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

The WLAN to which client is connecting requires 802 1x authentication.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Client moved to associated state successfully.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Received EAP Response from the client.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

EAP response from client to AP received.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Radius packet received. Access-Challenge received from RADIUS server 10.10.10.20, receiveId = 2

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Received Access-Challenge from the RADIUS server for the client.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Sending EAP request to client from radius server.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

EAP response from client to AP received.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Radius packet received. Access-Challenge received from RADIUS server 10.10.10.20, receiveId = 2

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Received Access-Challenge from the RADIUS server for the client.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Sending EAP request to client from radius server.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

EAP response from client to AP received.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Radius packet received. Access-Challenge received from RADIUS server 10.10.10.20, receiveId = 2

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Received Access-Challenge from the RADIUS server for the client.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Sending EAP request to client from radius server.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

EAP response from client to AP received.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Radius packet received. Access-Challenge received from RADIUS server 10.10.10.20, receiveId = 2

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Received Access-Challenge from the RADIUS server for the client.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Sending EAP request to client from radius server.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

EAP response from client to AP received.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Radius packet received. Access-Challenge received from RADIUS server 10.10.10.20, receiveId = 2

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Received Access-Challenge from the RADIUS server for the client.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Sending EAP request to client from radius server.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

EAP response from client to AP received.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Radius packet received. Access-Challenge received from RADIUS server 10.10.10.20, receiveId = 2

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Received Access-Challenge from the RADIUS server for the client.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Sending EAP request to client from radius server.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

EAP response from client to AP received.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Radius packet received. Access-Challenge received from RADIUS server 10.10.10.20, receiveId = 2

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Received Access-Challenge from the RADIUS server for the client.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Sending EAP request to client from radius server.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

EAP response from client to AP received.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Radius packet received. Access-Challenge received from RADIUS server 10.10.10.20, receiveId = 2

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Received Access-Challenge from the RADIUS server for the client.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Sending EAP request to client from radius server.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

EAP response from client to AP received.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Radius packet received. Access-Challenge received from RADIUS server 10.10.10.20, receiveId = 2

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Received Access-Challenge from the RADIUS server for the client.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Sending EAP request to client from radius server.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

EAP response from client to AP received.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Radius packet received. Access-Accept received from RADIUS server 10.10.10.20, receiveId = 2

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Received Access-Accept from the RADIUS server for the client.

08/23/2014 21:59:50 AKDT

ERROR

10.10.2.8

802.1x authentication message received, static dynamic wep supported.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Received eap success from the client.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

802.1x authentication was completed successfully.

08/23/2014 21:59:50 AKDT

INFO

10.10.2.8

Client Moved to DHCP Required State.

08/23/2014 21:59:52 AKDT

INFO

10.10.2.8

Received DHCP request, received during mobility handshake.

08/23/2014 21:59:53 AKDT

INFO

10.10.2.8

Mobility role update request. from Unassociated to Local Peer = 0.0.0.0, Old Anchor = 0.0.0.0, New Anchor = 10.10.2.8

08/23/2014 21:59:53 AKDT

INFO

10.10.2.8

Mobility role changed. State Update from Mobility-Incomplete to Mobility-Complete, mobility role=Local, client state=APF_MS_STATE_ASSOCIATED

08/23/2014 21:59:53 AKDT

INFO

10.10.2.8

DHCP successful.

08/23/2014 21:59:53 AKDT

INFO

10.10.2.8

Client has got IP address, no L3 authentication required.

08/23/2014 21:59:53 AKDT

INFO

10.10.2.8

Client IP address is assigned.

08/23/2014 21:59:53 AKDT

INFO

10.10.2.8

Radius packet received. Accounting-Response received from RADIUS server 10.10.102.2, receiveId = 0

08/23/2014 21:59:54 AKDT

INFO

10.10.2.8

Dhcp Information. transmitting DHCP REQUEST (3)

08/23/2014 21:59:54 AKDT

INFO

10.10.2.8

Dhcp Information. op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1

08/23/2014 21:59:54 AKDT

INFO

10.10.2.8

Dhcp Information. xid: 0x5cd526b (97342059), secs: 5, flags: 0

08/23/2014 21:59:54 AKDT

INFO

10.10.2.8

Dhcp Information. chaddr: 1c:ab:a7:XX:XX:XX

08/23/2014 21:59:54 AKDT

INFO

10.10.2.8

Dhcp Information. ciaddr: 0.0.0.0, yiaddr: 0.0.0.0

08/23/2014 21:59:54 AKDT

INFO

10.10.2.8

Dhcp Information. siaddr: 0.0.0.0, giaddr: 10.10.12.8

08/23/2014 21:59:54 AKDT

INFO

10.10.2.8

Dhcp Information. requested ip: 10.10.12.48

08/23/2014 21:59:54 AKDT

INFO

10.10.2.8

Received DHCP ACK ,dhcp server set.

08/23/2014 21:59:54 AKDT

INFO

10.10.2.8

Dhcp Information. transmitting DHCP ACK (5)

08/23/2014 21:59:54 AKDT

INFO

10.10.2.8

Dhcp Information. op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0

08/23/2014 21:59:54 AKDT

INFO

10.10.2.8

Dhcp Information. xid: 0x5cd526b (97342059), secs: 0, flags: 0

08/23/2014 21:59:54 AKDT

INFO

10.10.2.8

Dhcp Information. chaddr: 1c:ab:a7:XX:XX:XX

08/23/2014 21:59:54 AKDT

INFO

10.10.2.8

Dhcp Information. ciaddr: 0.0.0.0, yiaddr: 10.10.12.48

08/23/2014 21:59:54 AKDT

INFO

10.10.2.8

Dhcp Information. siaddr: 0.0.0.0, giaddr: 0.0.0.0

08/23/2014 21:59:54 AKDT

INFO

10.10.2.8

Dhcp Information. server id: 1.1.1.1 rcvd server id: 10.10.10.20

 

Any ideas on where to start looking?

  • Security and Network Management
Everyone's tags (1)
1 REPLY
New Member

Hey,The controller disconnect

Hey,

The controller disconnect the client, but the reason is not clear.

Do you face this problem for 2.4 GHz / 5 GHz / both radios?

Have you noticed if it happened for clients connected to the same AP?

 

I think running (debug client <mac1, mac2, .. > would be more helpful to show what happened exactly)

 

If you were able to capture these debugs .. please share them here.

 

Cheers,

Nour

222
Views
0
Helpful
1
Replies
This widget could not be displayed.