There are 2 primary ways that AirWave gets information about users:
1. SNMP Polling. AirWave asks the controller to tell us about all the users' VLANS, roles, ip addresses, bandwidth usage, etc. We usually poll for user data every 5 or 10 minutes, and the level of data we get from this is very detailed.
2. SNMP Traps. When users associate, authenticate or roam, a controller can send a trap to an AirWave server. Traps are great because nearly real-time data is sent to AirWave, but the downside is that the traps don't contain all the data that AirWave wants.
Today, when AirWave gets a trap, we create a session for the user with the limited data and we attempt to update it on the next poll. If the user has disconnected by the time we poll, AirWave doesn't know his VLAN (nor any of the other stuff that wasn't in the trap). If your controllers are sending traps to AirWave, it's almost certainly this behavior that's causing a lot of the users' VLANs to show as unknown in your report.