Controllerless Networks

Hi

I have a client connecting to a SSID using 802.1X authentication using an iPhone - the iAP is a 205.

The user can connect with no problem, however a few minutes passes and he gets disconnected.

From the AP I ran two commands "show ap debug auth-trace-buf <MAC>" whose output looks correct to me and I don't see any Radius errors for the authentication - so i will say that works correctly.

When the disconnect happens I can see in the debug mgmt-frames there is a "Denied; Ageout"  message - I have no idea what it means and if it indicates a problem -- below is the output from the two commands.

# show ap debug mgmt-frames e4:9a:79:bb:1e:91   

Traced 802.11 Management Frames
-------------------------------
Timestamp        stype       SA                 DA                 BSS                signal  Misc
---------        -----       --                 --                 ---                ------  ----
Jun 29 15:59:23  deauth      04:bd:88:95:b6:31  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31  15      - (internal only)
Jun 29 15:51:10  assoc-resp  04:bd:88:95:b6:31  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31  15      Success
Jun 29 15:51:10  assoc-req   e4:9a:79:bb:1e:91  04:bd:88:95:b6:31  04:bd:88:95:b6:31  0       -
Jun 29 15:51:10  auth        04:bd:88:95:b6:31  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31  15      Success (seq num 0)
Jun 29 15:51:10  auth        e4:9a:79:bb:1e:91  04:bd:88:95:b6:31  04:bd:88:95:b6:31  0       -
Jun 29 15:50:49  deauth      04:bd:88:95:b6:31  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31  15      Denied; Ageout (seq num 0)
Jun 29 15:50:49  assoc-resp  04:bd:88:95:b6:31  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31  15      Success
Jun 29 15:50:49  assoc-req   e4:9a:79:bb:1e:91  04:bd:88:95:b6:31  04:bd:88:95:b6:31  0       -
Jun 29 15:50:49  auth        04:bd:88:95:b6:31  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31  15      Success (seq num 0)
Jun 29 15:50:49  auth        e4:9a:79:bb:1e:91  04:bd:88:95:b6:31  04:bd:88:95:b6:31  0       -

# show ap debug auth-trace-buf e4:9a:79:bb:1e:91

Auth Trace Buffer
-----------------
                                                                                                     
                                                                                                     
Jun 29 15:06:51  station-up             *  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            -   -     wpa2 aes
Jun 29 15:06:51  eap-id-req            <-  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            1   5     
Jun 29 15:06:51  eap-id-resp           ->  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            1   13    Stantons
Jun 29 15:06:51  rad-req               ->  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            31  180   
Jun 29 15:06:51  rad-resp              <-  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31/t_DoleRAD  31  -     
Jun 29 15:06:51  eap-req               <-  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            2   6     
Jun 29 15:06:51  eap-resp              ->  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            2   131   
Jun 29 15:06:51  rad-req               ->  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31/t_DoleRAD  32  316   
Jun 29 15:06:51  rad-resp              <-  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31/t_DoleRAD  32  -     
Jun 29 15:06:51  eap-req               <-  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            3   1024  
Jun 29 15:06:51  eap-resp              ->  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            3   6     
Jun 29 15:06:51  rad-req               ->  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31/t_DoleRAD  33  191   
Jun 29 15:06:51  rad-resp              <-  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31/t_DoleRAD  33  -     
Jun 29 15:06:51  eap-req               <-  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            4   1024  
Jun 29 15:06:51  eap-resp              ->  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            4   6     
Jun 29 15:06:51  rad-req               ->  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31/t_DoleRAD  34  191   
Jun 29 15:06:51  rad-resp              <-  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31/t_DoleRAD  34  -     
Jun 29 15:06:51  eap-req               <-  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            5   1024  
Jun 29 15:06:51  eap-resp              ->  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            5   6     
Jun 29 15:06:51  rad-req               ->  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31/t_DoleRAD  35  191   
Jun 29 15:06:51  rad-resp              <-  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31/t_DoleRAD  35  -     
Jun 29 15:06:51  eap-req               <-  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            6   273   
Jun 29 15:06:51  eap-resp              ->  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            6   336   
Jun 29 15:06:51  rad-req               ->  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31/t_DoleRAD  36  523   
Jun 29 15:06:51  rad-resp              <-  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31/t_DoleRAD  36  -     
Jun 29 15:06:51  eap-req               <-  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            7   69    
Jun 29 15:06:51  eap-resp              ->  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            7   63    
Jun 29 15:06:51  rad-req               ->  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31/t_DoleRAD  37  248   
Jun 29 15:06:51  rad-resp              <-  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31/t_DoleRAD  37  -     
Jun 29 15:06:51  eap-req               <-  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            8   95    
Jun 29 15:06:51  eap-resp              ->  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            8   127   
Jun 29 15:06:51  rad-req               ->  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31/t_DoleRAD  38  312   
Jun 29 15:06:51  rad-resp              <-  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31/t_DoleRAD  38  -     
Jun 29 15:06:51  eap-req               <-  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            9   111   
Jun 29 15:06:51  eap-resp              ->  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            9   63    
Jun 29 15:06:51  rad-req               ->  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31/t_DoleRAD  29  248   
Jun 29 15:06:51  rad-accept            <-  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31/t_DoleRAD  29  -     
Jun 29 15:06:51  eap-success           <-  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            9   4     
Jun 29 15:06:51  wpa2-key1             <-  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            -   117   
Jun 29 15:06:51  wpa2-key2             ->  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            -   117   
Jun 29 15:06:51  wpa2-key3             <-  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            -   151   
Jun 29 15:06:51  wpa2-key4             ->  e4:9a:79:bb:1e:91  04:bd:88:95:b6:31            -   95 

Does the Denied mnessage indicate a problem?

Anything else to check and test to identify the problem?

Some aditional info I think is important -- the client has got a full signal as reported from the device. Airwave however is reporting the client health at 50%.

From the iAP dashboard the specific AP is reporting a few other intefeering APs and a quite a few interfering clients for the AP itself -- I don't think it a problem though as my other clients connecte to the same AP aren't reporting any problems.

A client getting disconnected due to an ageout typically is the result of a timer expiring.

Hi Collin - thanks for pointing me in the right direction.

The only limit I could find was "client inactivity" timer I set this from 1000 seconds (which matches the client complaint that they get disconnected after about 16 minutes) to 3 hours.

So far I haven't recieved the complaint again.