Wireless Access

Reply
Occasional Contributor I
Posts: 8
Registered: ‎03-19-2013

Some smartphone clients can't connect

Hi all,

 

In my new controller 7205 with 6.4.4.5 version we are experiencing some connection problems. It's a wifi with dot1x auth and internal DHCP for ip assignment. As you can see in the debug log of one of affeted user, The authentication aginst Radius is correct (I can confirm this with Radius logs), and after, when smartphone client ask for IP, it never gets... But if you see the logs or DHCP binding, the controller is offering correctly the IP to client.

 

The only error you see in the log, is this Deauthentication --->

 

Mar 29 10:07:12 :522245:  <DBUG> |authmgr|  user_age() called for MAC bc:f5:ac:f7:5b:0f IP 192.168.56.9.
Mar 29 10:07:17 :501102:  <NOTI> |AP AP-SISTEMAS@172.18.8.30 stm|  Disassoc from sta: bc:f5:ac:f7:5b:0f: AP 172.18.8.30-84:d4:7e:ae:3c:13-AP-SISTEMAS Reason STA has left and is disassociated
Mar 29 10:07:17 :501000:  <DBUG> |AP AP-SISTEMAS@172.18.8.30 stm|  Station bc:f5:ac:f7:5b:0f: Clearing state
Mar 29 10:07:17 :522296:  <DBUG> |authmgr|  Auth GSM : USER_STA delete event for user bc:f5:ac:f7:5b:0f age 0 deauth_reason 8
Mar 29 10:07:17 :522036:  <INFO> |authmgr|  MAC=bc:f5:ac:f7:5b:0f Station DN: BSSID=84:d4:7e:ae:3c:13 ESSID=gsmart VLAN=56 AP-name=AP-SISTEMAS
Mar 29 10:07:17 :522234:  <DBUG> |authmgr|  Setting idle timer for user bc:f5:ac:f7:5b:0f to 300 seconds (idle timeout: 300 ageout: 0).
Mar 29 10:07:17 :501000:  <DBUG> |stm|  Station bc:f5:ac:f7:5b:0f: Clearing state

 

 

If you wait several minutes.... finally the client can connect correctly, but if the client moves from an AP to another AP (roaming), the problem returns...

 

Can you help me please?

 

With my old controller (3200XM) with 6.4.2.2 version I have not this problem... and the only difference in settings between old and new controller is in the old I had forced ARM to max Tx EIRP... in the RF Management options... but I don't think this is the problem.

 

Thanks in advance,

 

Carlos

MVP
Posts: 4,227
Registered: ‎07-20-2011

Re: Some smartphone clients can't connect

What APs are you using ?

Do you have 802.11k enabled ?

What type of smarphones are you having issues with ?

Can you share the user-role ACLs, show rights 

How's ARM EIRP levels configured ?

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Occasional Contributor I
Posts: 8
Registered: ‎03-19-2013

Re: Some smartphone clients can't connect

What APs are you using ?

105, 93 and some 205's models

 

Do you have 802.11k enabled ?

nop...

 

What type of smarphones are you having issues with ?

Android... with IOS I think no problem right now...

 

Can you share the user-role ACLs, show rights 

"ip access-list session ses_pol_PTM-gsmart-Auth_role
  user   alias "Private Networks" any  deny
  user any any  permit"

As you can see... for this service we have a very simple config... so only permit access to internet for the smartphones

 

How's ARM EIRP levels configured ?

802.11a Max Tx EIRP18 and Min Tx EIRP 12

802.11g Max Tx EIRP9 and Min Tx EIRP 6

before... with old controller I had configured 127 value for min and max...

 

Thanks

 

Carlos

 

MVP
Posts: 4,227
Registered: ‎07-20-2011

Re: Some smartphone clients can't connect

Sincd you have 802.11ac APs and 802.11n Make sure have 80 MHz and VHT disable



Sent from Outlook for iPhone
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Occasional Contributor I
Posts: 8
Registered: ‎03-19-2013

Re: Some smartphone clients can't connect

I can sure that VHT is disable.... but, where I can see the 80 MHz config?

 

 

MVP
Posts: 4,227
Registered: ‎07-20-2011

Re: Some smartphone clients can't connect

Under ARM
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Occasional Contributor I
Posts: 8
Registered: ‎03-19-2013

Re: Some smartphone clients can't connect

Ok I see... thanks... I had it Enable... so right now I will disable 80MHz support

Occasional Contributor I
Posts: 8
Registered: ‎03-19-2013

Re: Some smartphone clients can't connect

Hello,

 

I can confirm... the problem occurs when I move from an Access Point to another Access Point... Then the client (smartphone) can't connect until a few minutes... Looks like the connection had freezed a few minutes... The client remains in "getting IP" continuosly... but in the logs, the controller offers an IP address to client without problem, so I think that the DHCP isn't the problem...

 

Regards...

MVP
Posts: 4,227
Registered: ‎07-20-2011

Re: Some smartphone clients can't connect

You mentioned that you originally had your EIRP (Power) set to Max , if you started seeing issues after lowering it you probably should look at your AP and signal distribution and make sure that there isn't a big gap between APs

Did you guys performed a site survey ?

Also depending on how many 802.11ac APs you have in your environment disabling 80 MHz will definitely improve the channel distribution

Are you using DFS channels by any chance ?
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Occasional Contributor I
Posts: 8
Registered: ‎03-19-2013

Re: Some smartphone clients can't connect

Hi,

 

I'm not using DFS channels... Respect to 802.11ac APs, actually I have only two 205 Aps and 45 APs 105's or 93. Anyway I have already disable 80 Mhz.

 

I'm going to try to increase the EIRP in order to check if this solve my problem... although I don't think...

 

Thanks...

 

Carlos

Search Airheads
Showing results for 
Search instead for 
Did you mean: