It's seem to be working...
I changed to "guest-logon" (I don't have the authenticated profile) and I have no more disconnection. Before that the users couldn't transfer a file larger than 50MB and now we tried with a 3GB file and it's OK....
I dont really understand why... What I don't understand either is why some of the user got a L3 role = logon, and others L3 role = guest-logon
Hope you can help me.
#show user-table ip 192.168.172.192
Name: , IP: 192.168.172.192, MAC: 00:26:82:f7:14:56, Role:guest-logon, ACL:1/0, Age: 00:00:48
Authentication: No, status: not started, method: , protocol: , server:
Role Derivation: AAA profile default role
VLAN Derivation: unknown
Idle timeouts: 0, ICMP requests sent: 0, replies received: 0, Valid ARP: 0
Mobility state: Wireless, HA: Yes, Proxy ARP: No, Roaming: No Tunnel ID: 0 L3 Mob: 0
Flags: internal=0, trusted_ap=0, l3auth=0, mba=0
Flags: innerip=0, outerip=0, guest=0, download=1, nodatapath=0, wispr=0
Auth fails: 0, phy_type: g, reauth: 0, BW Contract: up:0 down:0, user-how: 14
Vlan default: 172, Assigned: 0, Current: 172 vlan-how: 0 DP assigned vlan:0
Mobility Messages: L2=0, Move=0, Inter=0, Intra=0, ProxyArp=0, Flags=0x0
Tunnel=0, SlotPort=0x1040, Port=0x10f6 (tunnel 118)
Role assigment - L3 assigned role: n/a, VPN role: n/a, Dot1x cached role : n/a
Current Role name: guest-logon, role-how: 10, L2-role: guest-logon, L3-role: logon
Essid: Hopital Saint Romain, Bssid: d8:c7:c8:0b:29:90 AP name/group: WT.0.2/CH_SAINT_ROMAIN Phy-type: g
RadAcct sessionID:n/a
RadAcct Traffic In 3386969/451011921 Out 2232136/182111465 (51:44633/0:0:6881:58705,34:3912/0:0:2778:52457)
Timers: ping_reply 0, spoof reply 0, reauth 0
Profiles AAA:default-dot1x-psk, dot1x:default-psk, mac: CP: def-role:'guest-logon' sip-role:'' via-auth-profile:''
ncfg flags udr 0, mac 0, dot1x 1, RADIUS interim accounting 0
IP Born: 1365768888 (Fri Apr 12 14:14:48 2013)
Core User Born: 1365767300 (Fri Apr 12 13:48:20 2013)
Upstream AP ID: 0, Downstream AP ID: 0
DHCP assigned IP address 192.168.172.192, from DHCP server 192.168.172.254
Device Type: Windows-Update-Agent
#show user-table ip 192.168.172.188
Name: , IP: 192.168.172.188, MAC: ac:81:12:db:15:04, Role:guest-logon, ACL:6/0, Age: 00:00:05
Authentication: No, status: not started, method: , protocol: , server:
Role Derivation: AAA profile default role
VLAN Derivation: unknown
Idle timeouts: 0, ICMP requests sent: 0, replies received: 0, Valid ARP: 0
Mobility state: Wireless, HA: Yes, Proxy ARP: No, Roaming: No Tunnel ID: 0 L3 Mob: 0
Flags: internal=0, trusted_ap=0, l3auth=0, mba=0
Flags: innerip=0, outerip=0, guest=0, download=1, nodatapath=0, wispr=0
Auth fails: 0, phy_type: g, reauth: 0, BW Contract: up:0 down:0, user-how: 14
Vlan default: 172, Assigned: 0, Current: 172 vlan-how: 0 DP assigned vlan:0
Mobility Messages: L2=0, Move=0, Inter=0, Intra=0, ProxyArp=0, Flags=0x0
Tunnel=0, SlotPort=0x1040, Port=0x10b3 (tunnel 51)
Role assigment - L3 assigned role: n/a, VPN role: n/a, Dot1x cached role : n/a
Current Role name: guest-logon, role-how: 10, L2-role: guest-logon, L3-role: guest-logon
Essid: Hopital Saint Romain, Bssid: d8:c7:c8:0b:2b:00 AP name/group: WT.1.3/CH_SAINT_ROMAIN Phy-type: g
RadAcct sessionID:n/a
RadAcct Traffic In 1359/328586 Out 1593/1538224 (0:1359/0:0:5:906,0:1593/0:0:23:30896)
Timers: ping_reply 0, spoof reply 0, reauth 0
Profiles AAA:default-dot1x-psk, dot1x:default-psk, mac: CP: def-role:'guest-logon' sip-role:'' via-auth-profile:''
ncfg flags udr 0, mac 0, dot1x 1, RADIUS interim accounting 0
IP Born: 1365772286 (Fri Apr 12 15:11:26 2013)
Core User Born: 1365772285 (Fri Apr 12 15:11:25 2013)
Upstream AP ID: 0, Downstream AP ID: 0
DHCP assigned IP address 192.168.172.188, from DHCP server 192.168.172.254
Device Type: Windows-RSS-Platform/2.0 (MSIE 8.0; Windows NT 6.1)