So a good initial authentication, I see:
(UKTHEOALC1) #show user mac 5c:0a:5b:27:c0:5a
Name: bob123, IP: 10.147.11.11, MAC: 5c:0a:5b:27:c0:5a, Role: guest, ACL: 3/0, Age: 00:01:06 Authentication: Yes, status: started, method: Web, protocol: PAP, server: Internal Bandwidth contract = GUESTBW (100000000 bits/sec) Bandwidth contract = GUESTBW (100000000 bits/sec) Role Derivation: Matched server rule VLAN Derivation: Default VLAN Idle timeout (profile guest-aaa-profile'): 3600 seconds, Age: 00:00:00 Mobility state: Wireless, HA: Yes, Proxy ARP: No, Roaming: No Tunnel ID: 0 L3 Mob: 0 Flags: internal=0, trusted_ap=0, l3auth=1, mba=0, vpnflags=0, u_stm_ageout=1 Flags: innerip=0, outerip=0, vpn_outer_ind:0, download=1, wispr=0 IP User termcause: 0 phy_type: g-HT-20, l3 reauth: 0, BW Contract: up:1 down:1, user-how: 14 Vlan default: 1411, Assigned: 1411, Current: 1411 vlan-how: 1 DP assigned vlan:0 Mobility Messages: L2=0, Move=0, Inter=0, Intra=0, Flags=0x0 SlotPort=0x2100, Port=0x101ab (tunnel 427) Role assigment - L3 assigned role: n/a, VPN role: n/a, Dot1x cached role: n/a Current Role name: guest, role-how: 2, L2-role: guest-logon, L3-role: guest Essid: Guest, Bssid: 00:0b:86:77:ae:61 AP name/group: UKTHEOF01C1E-ORM158D-AP3/UKLONWH Phy-type: g-HT-20 RadAcct sessionID:n/a RadAcct Traffic In 18075/8236132 Out 14393/9260957 (0:18075/0:0:125:44132,0:14393/0:0:141:20381) Timers: L3 reauth 0, mac reauth 0 (Reason: ), dot1x reauth 0 (Reason: ) Profiles AAA:guest-aaa-profile, dot1x:guest-dot1x-profile, mac: CP: def-role:'guest-logon' sip-role:'' via-auth-profile:'' ncfg flags udr 0, mac 0, dot1x 1, RADIUS interim accounting 0 IP Born: 1397730861 (Thu Apr 17 10:34:21 2014) Core User Born: 1397730859 (Thu Apr 17 10:34:19 2014) Upstream AP ID: 0, Downstream AP ID: 0 Device Type: Mozilla/5.0 (Linux; U; Android 4.3; en-gb; GT-I9300 Build/JSS15J) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Saf L3-Auth Session Timeout from Radius: 0 Mac-Auth Session Timeout Value from Radius: 0 Dot1x Session Timeout Value from Radius: 0 CoA Session Timeout Value from Radius: 0 Dot1x Session Term-Action Value from Radius: Default Reauth-interval from role: 0 Number of reauthentication attempts: mac reauth 0, dot1x reauth 0 Address is from DHCP: yes Per-user-log pointer 0x11784cc4 (id 3168), num logs 56
(UKTHEOALC1) #show log user 50 | include 5c:0a:5b:27:c0:5a
Apr 17 11:36:39 :522038: <INFO> |authmgr| username=bob123 MAC=5c:0a:5b:27:c0:5a IP=10.147.11.11 Authentication result=Authentication Successful method=Web server=Internal
Apr 17 11:36:39 :522017: <INFO> |authmgr| MAC=5c:0a:5b:27:c0:5a IP=?? Derived role 'guest' from server rules: server-group=internal, authentication=Web
Apr 17 11:36:39 :522049: <INFO> |authmgr| MAC=5c:0a:5b:27:c0:5a,IP=10.147.11.11 User role updated, existing Role=guest-logon/guest-logon, new Role=guest-logon/guest, reason=User authenticated wie
Apr 17 11:36:39 :522050: <INFO> |authmgr| MAC=5c:0a:5b:27:c0:5a,IP=10.147.11.11 User data downloaded to datapath, new Role=guest/3, bw Contract=16385/16385, reason=Download driven by user role s0
Apr 17 11:36:39 :527000: <DBUG> |mdns| mdns_parse_auth_userrole_message 287 Auth User ROLE: MAC:5c:0a:5b:27:c0:5a, NAME:bob123, ROLE_NAME:guest
Apr 17 11:36:39 :522008: <NOTI> |authmgr| User Authentication Successful: username=bob123 MAC=5c:0a:5b:27:c0:5a IP=10.147.11.11 role=guest VLAN=1411 AP=UKTHEOF01C1E-ORM158D-AP3 SSID=Guest AAAl
Apr 17 11:36:43 :522138: <DBUG> |authmgr| Sibyte-5c:0a:5b:27:c0:5a/10.147.11.11 : User-Agent: Mozilla/5.0 (Linux; U; Android 4.3; en-gb; GT-I9300 Build/JSS15J) AppleWebKit/534.30 (KHTML
I am now having the user roam and try and reconnect.