Hello
Here is the logs for the user when the issue happened:
(MAILMAN-LOCAL1) #show log user-debug 50 | include e0:f8:47:36:b5:ac
May 25 09:10:28 :501065: <DBUG> |stm| Get Next/Get Request mac is e0:f8:47:36:b5:ac
May 25 09:11:00 :501065: <DBUG> |stm| Get Next/Get Request mac is e0:f8:47:36:b5:ac
May 25 09:12:17 :501065: <DBUG> |stm| Get Next/Get Request mac is e0:f8:47:36:b5:ac
May 25 09:14:55 :501065: <DBUG> |stm| Get Next/Get Request mac is e0:f8:47:36:b5:ac
May 25 09:16:18 :501095: <NOTI> |stm| Assoc request @ 09:16:18.486355: e0:f8:47:36:b5:ac (SN 2690): AP 137.52.71.121-00:24:6c:c7:54:90-NMB-Terry-51
May 25 09:16:18 :501065: <DBUG> |stm| Client e0:f8:47:36:b5:ac moved from AP BL110_41 to AP NMB-Terry-51
May 25 09:16:18 :501065: <DBUG> |stm| Sending STA e0:f8:47:36:b5:ac message to Auth and Mobility Unicast Encr Open Multicast Encr Open VLAN 0x4db, wmm:0, rsn_cap:0
May 25 09:16:18 :500511: <DBUG> |mobileip| Station e0:f8:47:36:b5:ac, 0.0.0.0: Received disassociation on ESSID: NSU Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name BL110_41 Group NMB-TERRY BSSID 00:0b:86:d7:17:70, phy a, VLAN 1243
May 25 09:16:18 :522036: <INFO> |authmgr| MAC=e0:f8:47:36:b5:ac Station DN: BSSID=00:0b:86:d7:17:70 ESSID=NSU VLAN=1243 AP-name=BL110_41
May 25 09:16:18 :500010: <NOTI> |mobileip| Station e0:f8:47:36:b5:ac, 255.255.255.255: Mobility trail, on switch 137.52.23.20, VLAN 1243, AP BL110_41, NSU/00:0b:86:d7:17:70/a
May 25 09:16:18 :501080: <NOTI> |stm| Deauth to sta: e0:f8:47:36:b5:ac: Ageout AP 137.52.68.241-00:0b:86:d7:17:70-BL110_41 STA has left and is deauthenticated
May 25 09:16:18 :501100: <NOTI> |stm| Assoc success @ 09:16:18.489211: e0:f8:47:36:b5:ac: AP 137.52.71.121-00:24:6c:c7:54:90-NMB-Terry-51
May 25 09:16:18 :501065: <DBUG> |stm| Sending STA e0:f8:47:36:b5:ac message to Auth and Mobility Unicast Encr Open Multicast Encr Open VLAN 0x4e0, wmm:1, rsn_cap:0
May 25 09:16:18 :500511: <DBUG> |mobileip| Station e0:f8:47:36:b5:ac, 0.0.0.0: Received association on ESSID: NSU Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name NMB-Terry-51 Group NMB-TERRY BSSID 00:24:6c:c7:54:90, phy a, VLAN 1248
May 25 09:16:18 :522035: <INFO> |authmgr| MAC=e0:f8:47:36:b5:ac Station UP: BSSID=00:24:6c:c7:54:90 ESSID=NSU VLAN=1248 AP-name=NMB-Terry-51
May 25 09:16:18 :500010: <NOTI> |mobileip| Station e0:f8:47:36:b5:ac, 0.0.0.0: Mobility trail, on switch 137.52.23.20, VLAN 1248, AP NMB-Terry-51, NSU/00:24:6c:c7:54:90/a
May 25 09:16:18 :501105: <NOTI> |AP BL110_41@137.52.68.241 stm| Deauth from sta: e0:f8:47:36:b5:ac: AP 137.52.68.241-00:0b:86:d7:17:70-BL110_41 Reason STA has left and is deauthenticated
May 25 09:16:18 :501000: <DBUG> |AP BL110_41@137.52.68.241 stm| Station e0:f8:47:36:b5:ac: Clearing state
May 25 09:23:01 :501065: <DBUG> |stm| Get Next/Get Request mac is e0:f8:47:36:b5:ac
May 25 09:23:34 :501065: <DBUG> |stm| Get Next/Get Request mac is e0:f8:47:36:b5:ac
May 25 09:24:44 :501065: <DBUG> |stm| Get Next/Get Request mac is e0:f8:47:36:b5:ac
May 25 09:25:24 :501102: <NOTI> |stm| Disassoc from sta: e0:f8:47:36:b5:ac: AP 137.52.71.121-00:24:6c:c7:54:90-NMB-Terry-51 Reason STA has left and is disassocisted
May 25 09:25:24 :501065: <DBUG> |stm| Sending STA e0:f8:47:36:b5:ac message to Auth and Mobility Unicast Encr Open Multicast Encr Open VLAN 0x4e0, wmm:1, rsn_cap:0
May 25 09:25:24 :500511: <DBUG> |mobileip| Station e0:f8:47:36:b5:ac, 0.0.0.0: Received disassociation on ESSID: NSU Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name NMB-Terry-51 Group NMB-TERRY BSSID 00:24:6c:c7:54:90, phy a, VLAN 1248
May 25 09:25:24 :500010: <NOTI> |mobileip| Station e0:f8:47:36:b5:ac, 255.255.255.255: Mobility trail, on switch 137.52.23.20, VLAN 1248, AP NMB-Terry-51, NSU/00:24:6c:c7:54:90/a
May 25 09:25:24 :522036: <INFO> |authmgr| MAC=e0:f8:47:36:b5:ac Station DN: BSSID=00:24:6c:c7:54:90 ESSID=NSU VLAN=1248 AP-name=NMB-Terry-51
May 25 09:25:24 :501000: <DBUG> |stm| Station e0:f8:47:36:b5:ac: Clearing state
May 25 09:25:29 :501109: <NOTI> |AP BL110_41@137.52.68.241 stm| Auth request: e0:f8:47:36:b5:ac: AP 137.52.68.241-00:0b:86:d7:17:60-BL110_41 auth_alg 0
May 25 09:25:29 :501093: <NOTI> |AP BL110_41@137.52.68.241 stm| Auth success: e0:f8:47:36:b5:ac: AP 137.52.68.241-00:0b:86:d7:17:60-BL110_41
May 25 09:25:29 :501095: <NOTI> |stm| Assoc request @ 09:25:29.214864: e0:f8:47:36:b5:ac (SN 42): AP 137.52.68.241-00:0b:86:d7:17:60-BL110_41
May 25 09:25:29 :501100: <NOTI> |stm| Assoc success @ 09:25:29.215795: e0:f8:47:36:b5:ac: AP 137.52.68.241-00:0b:86:d7:17:60-BL110_41
May 25 09:25:29 :501095: <NOTI> |AP BL110_41@137.52.68.241 stm| Assoc request @ 09:25:29.530010: e0:f8:47:36:b5:ac (SN 42): AP 137.52.68.241-00:0b:86:d7:17:60-BL110_41
May 25 09:25:29 :501065: <DBUG> |stm| Sending STA e0:f8:47:36:b5:ac message to Auth and Mobility Unicast Encr Open Multicast Encr Open VLAN 0x4d0, wmm:0, rsn_cap:0
May 25 09:25:29 :500511: <DBUG> |mobileip| Station e0:f8:47:36:b5:ac, 0.0.0.0: Received association on ESSID: NSU Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name BL110_41 Group NMB-TERRY BSSID 00:0b:86:d7:17:60, phy g, VLAN 1232
May 25 09:25:29 :522035: <INFO> |authmgr| MAC=e0:f8:47:36:b5:ac Station UP: BSSID=00:0b:86:d7:17:60 ESSID=NSU VLAN=1232 AP-name=BL110_41
May 25 09:25:29 :500010: <NOTI> |mobileip| Station e0:f8:47:36:b5:ac, 0.0.0.0: Mobility trail, on switch 137.52.23.20, VLAN 1232, AP BL110_41, NSU/00:0b:86:d7:17:60/g
May 25 09:25:29 :501100: <NOTI> |AP BL110_41@137.52.68.241 stm| Assoc success @ 09:25:29.533719: e0:f8:47:36:b5:ac: AP 137.52.68.241-00:0b:86:d7:17:60-BL110_41
May 25 09:25:33 :522026: <INFO> |authmgr| MAC=e0:f8:47:36:b5:ac IP=137.52.232.143 User miss: ingress=0x17f4, VLAN=1232
May 25 09:25:33 :522006: <INFO> |authmgr| MAC=e0:f8:47:36:b5:ac IP=137.52.232.143 User entry added: reason=Sibtye
May 25 09:25:33 :522050: <INFO> |authmgr| MAC=e0:f8:47:36:b5:ac,IP=137.52.232.143 User data downloaded to datapath, new Role=NSU/59, bw Contract=0/0,reason=New user IP processing
May 25 09:25:33 :522026: <INFO> |authmgr| MAC=e0:f8:47:36:b5:ac IP=137.52.232.143 User miss: ingress=0x17f4, VLAN=1232
May 25 09:25:33 :522050: <INFO> |authmgr| MAC=e0:f8:47:36:b5:ac,IP=137.52.232.143 User data downloaded to datapath, new Role=NSU/59, bw Contract=0/0,reason=New user IP processing
May 25 09:25:50 :501114: <NOTI> |stm| Deauth from sta: e0:f8:47:36:b5:ac: AP 137.52.71.121-00:24:6c:c7:54:90-NMB-Terry-51 Reason 255
May 25 09:27:21 :501065: <DBUG> |stm| Get Next/Get Request mac is e0:f8:47:36:b5:ac
May 25 09:27:53 :501065: <DBUG> |stm| Get Next/Get Request mac is e0:f8:47:36:b5:ac
May 25 09:29:13 :501065: <DBUG> |stm| Get Next/Get Request mac is e0:f8:47:36:b5:ac
May 25 09:31:25 :522005: <INFO> |authmgr| MAC=e0:f8:47:36:b5:ac IP=137.52.243.103 User entry deleted: reason=idle timeout
May 25 09:35:22 :501065: <DBUG> |stm| Get Next/Get Request mac is e0:f8:47:36:b5:ac
May 25 09:35:57 :501065: <DBUG> |stm| Get Next/Get Request mac is e0:f8:47:36:b5:ac
May 25 09:37:11 :501065: <DBUG> |stm| Get Next/Get Request mac is e0:f8:47:36:b5:ac