Wlc webauth devices timeout and have to reauth
We are in the process of setting up a new guest wireless network using our current WLC 4402 (code 7.0.98). Guests will use web auth to gain access to our network. We will also use this same network for our company (personal) handheld devices to gain access ie allow iphones, ipads, androids to access Internet , etc.
The problem right now is that users fire open their mobile browser and authenticate to gain access. Then for whatever reason, maybe they step out of the office or reboot their phone, their device has deauthenticated and to gain access again they have to reauth via their browser. I've seen similar posts on the boards, but haven't found an exact answer.
Could someone tell me where/how to change the setting to allow users to remain authenticated once they authenticate? Thanks
To elaborate a little more, there are primarily two causes for the scenario described.
1) The Session Timeout has expired. This is 1800 second by default (30 minutes) and is located on the Advanced Tab of the WLAN Configuration. It is a per WLAN setting, and your client will be removed at the session timeout meaning they will have to reauthenticate. For PSK or EAP type security, this might be seamless in the background, but you see the impact for web auth since it requires manual input.
2) The Idle Timeout has expired. This is 300 seconds by default (5 minutes) and is located on the Controller Tab of the WLC GUI. It is a global setting, and your client will be removed from the WLC after having recieved no traffic from the client. This is something that might happen with smartphones as they could shutoff the radio as soon as you stop using it, and definitely could trigger if you reboot a device and don't associate within 5 minutes.
With that said, I believe there is a bug in 7.0.98.0 where Idle Timeout is hit earlier than 5 minutes due to max retries. And smartphones going into powersave off and on is the trigger.
So... my suggestion is for you to figure out why your clients are being removed (debug client ) and if it says Idle-Timeout and you know the device isn't idle, then upgrade to 7.0.116.0.
Similar Messages
-
Is it possible to have filters for one account on 3 devices ? And have the same results/folders.
I have one email account on 3 devices and I need to filter all received emails, on all 3 devices. Same folders and same filters.
If I create a filter rule on one PC then I can't find the filtered emails ( that are in the new created folder on PC no.1 ) on the other devices. What can I do?To answer the question as stated in your topic, it's possible but not easy.
Obviously you can enter the same filters by hand on each installation of Thunderbird, but it's tedious and error-prone. You can set them up on one machine and copy the filter files over to the other machines. Also tedious and error-prone.
The way you describe the messages vanishing from sight suggests strongly that you're currently using POP, and this has no way of making use of shared folders. To continue working in this way, all you could do is set each client to leave a copy on the server for the others and painstakingly manage a set of filters on each and every machine, keeping them in synch by hand and careful management. (And ditto for your folders.) You'd also have to attend to the POP server from time to time to remove accumulated messages left there by your clients.
The real answer to this and your later question is to use an IMAP-connected account, where all your data lives in one place, on the email provider's server, and all your devices simply look at and work with one common set of data. Any filtering, editing, moving, etc you did on one machine would very quickly become visible on the other machines. In fact. the ability for more than one machine to be simultaneously be working on the same message becomes a somewhat worrying possibility. It's not clear if this is a likely event in your scenario.
Even using IMAP, if you filter at the client then you'd still have the issue of managing multiple instances of your filters, and the final part of this is to make use of filtering offered by the server; then the filtering takes place "at source" and you have just one filter set to maintain.
If your current email provider doesn't provide IMAP, and cannot offer it, then there are many alternatives who will. If it's for business then I think you should look for a paid-for service that includes guarantees, backups and an SLA. Your domain provider should be able to offer this.
For personal use, many of the free suppliers are worth considering. Googlemail works well, but if you're uneasy about their pervasiveness, have a look at gmx/1&1. Microsoft's hotmail/live mail/outlook.com offers IMAP. Yahoo! probably does (please check in your locality) but they have a bad track record and a lamentable reputation and I wouldn't want to entrust them with any precious material. -
When switching from one page to another, browser timeouts and have to refresh
I know I am antiquated, however, I have dial up still. I have never had this problem until recently. When going from one page (even in email) the browser does not load and I have to refresh or it will sit there giving no error and doing nothing. Resetting fire fox does not work.
Check the connection settings.
*Tools > Options > Advanced > Network : Connection > Settings
*https://support.mozilla.org/kb/Options+window+-+Advanced+panel
If you do not need to use a proxy to connect to internet then try to select "No Proxy" if "Use the system proxy settings" or one of the others do not work properly.
See "Firefox connection settings":
*https://support.mozilla.org/kb/Firefox+cannot+load+websites+but+other+programs+can
You can also try to disable IPv6
*http://kb.mozillazine.org/Error_loading_websites
You can try to reset (power off/on) the router.
You can check the Network tab in the Web Console (Firefox/Tools > Web Developer;Ctrl+Shift+K) to see if that gives any clues about the cause.<br />
You can click an entry to see the response headers and check the Timings tab in the right pane.
*https://developer.mozilla.org/en/Tools/Web_Console
Note that your System Details List shows that you have a user.js file in the profile folder to initialize some prefs on each start of Firefox.
The user.js file is only present if you or other software has created it, so normally it wouldn't be there.
you can check its content with a plain text editor if you didn't create this file yourself.
The user.js file is read each time you start Firefox and initializes preferences to the value specified in this file, so preferences set via user.js can only be changed temporarily for the current session.
*http://kb.mozillazine.org/Preferences_not_saved -
Issues with WLC 7.0.116 and iPhone/iPads iOS devices
We are using a WLC 2106 running 7.0.116 and notice that when iPhones are streaming data (e.g. YouTube) during WPA re-auths we get the following log entry:
Max EAPOL-key M3 retransmissions exceeded for client xxxxx
And the iPhone prompts for the username/password for EAP-PEAP.
This occurs on two different lab setups, one local auth, one MS IAS. Changing EAPOL timeout settings does not fix the problem.
Note that we rolled back to WLC 6.x software and the problem appears fixed. Is this a known issue in 7.0.116 that others have seen?
thanks,
SimonIts speculation at this point stating its tied to CPU processing. If you obtain a capture of both low CPU and high CPU you could then state its CPU bound.
Specific to the session timeout, Increasing or disabling it makes sense. The only purpose of the session timeout is to regen the MSK keys which then seed the PMK,GMK. Cisco recommends to disable session timeout on voice because of its known problems with voice reliability.
In addition, client idle timeout impacts Apple "i" deivces more than any other divice. Do a lab and capture the traffic coming out of a iPad for exmaple. These devices dont chatter on the network like other devices.
Its not uncommon for iPads to drop off the network with default settngs on the WLC (but this doesnt explain your 7 vs 6 code). In fact we lab this where iPads client records get deleted after 300 seconds (default timer) and have to reauth becuase of this very issue. An adjustment of the timers aided this situation.
Call TAC see what they tell you ... I suspect they will review these same items and the EAP timeout, that you mentioned already.
I just checked and we have 768 ipads on our network at this very moment including mine.
I just moved my auth time to 5 minutes and I am pulling youtube and watched 3 auths and there is no problems.
You need to do a L2 capture and see what the iPad is doing. If the ipad sends its EAP creds and the WLC doesnt respond then you know its the WLC. -
Have you been getting timeouts and other weird connection issues lately?
Internet connection has become a bit wonky as of late, have you been experiencing some or all of the following symptons?
1) Most internet speed test sites just stop before completing as if they have timed out (i.e. speedtest.net).
2) Sites will start loading quickly but then sometimes randomly stop and have to be manually refreshed.
3) Downloads will randomly stop downloading for some moments before resuming (particularly from Steam)
4) Tracert to some websites that were causing issues show timeouts on peering with Alter.net servers.
Looks like there are some issues between Verizon and Alter.net (formerly MCI, now Verizon owned) in NY.... Any word on when we can expect a resolution? This is quite frustrating as it affects a good amount of traffic.I'm a little further east than you out here on Long Island, Touyats, but I've seen none of the issues you or the Original Poster here are experiencing.
Assuming you're having the problems on a device connected to your router by Ethernet cable (WiFi opens up an entire range of other possible problems) you might try getting your router assigned a new WAN IP address.
If you want to give that a try, see this post for the steps involved:
http://forums.verizon.com/t5/FiOS-Internet/How-am-I-able-to-change-my-ip-address/m-p/703336#M47733 -
I have an Iphone 4S and It won't let me watch videos on my safari, which I do everyday. It says that I am connectef to a tv, yet I have not connected it to a tv during the entire time i've owned this product. I have not connected it to anything bluetooth either. It plays the sound through the device, but it will not play the video at all. the update is IOS 6.1.3
Try disabling the computer's antivirus and firewall.
- Next try the manual install method of:
iDevice Troubleshooting 101 :: iPhone, iPad, iPod touch
Place the iPod in recovery mode after the firmware download is complete and then restore using the instructions in the article. Sometimes recovery mode timeouts and returns to disabled before the firmware download is complete.
- Then try on another computer -
ISE Profiling for Wireless Devices (WLC 5508) like Laptops and Mobile Devices
Hi,
We have integrated WLC 5508 to cisco ise 3315 with ios 1.1.1 and using Guest Sponsor portal for wireless guest users.
Where we have created open ssid in wlc and redirect web login portal in wlc for guest users. We have enable all respective node in policy service for profiling and also configure snmp in wlc as well as in ise.
When guest user is connected to open ssid its get redirected to web login page of ise portal and when it gets login we are only able to see the username which guest user login but not the end device in monitoring log.
Wireless End devices are not able to get profiled can any one tell me what configuration I need to do on ise or wlc side to profiled end guest wireless device like android,iphone and laptops
Thanks
PranavHi Tarikh,
I only want to identify the end devices for wilress guest user. I have configured MAB Authentication and configure autorization policy where in mention identity group any condition as wlc web authentication and athorization profile only guest mentioning plain access for the same.
Can you help me how I can achived profiling for wirless guest devices. I have configured all profiling probes . Enable snmp on wlc as well as in network devices.
What else I need to configured to achived just identiting device nothing but profiling and which should reflect in authnetication logs.
Thanks
Pranav -
when I plug my iPhone in to my computer, iTunes doesn't recognize it as a device. I have deleted and re-downloaded iTunes twice which seems to fix the problem temporarily but then the next time I plug my phone in, the device is not recognized.
What happens if you go to iTunes > File > Devices, do you get the option to Sync iPhone?
You could try a reinstall of iTunes. OS X Yosemite: Reinstall apps that came with your Mac -
I am trying to restore an older iPod Touch, but do not have the passcode. I am getting an error message saying that I need to free up some space, but I cannot because I don't have the passcode and have never synced this device to my account. Help..
If it is asking for the screen-lock passcode then:
Place the iOS device in Recovery Mode and then connect to your computer and restore via iTunes. The iPod will be erased.
iOS: Wrong passcode results in red disabled screen
If recovery mode does not work try DFU mode.
How to put iPod touch / iPhone into DFU mode « Karthik's scribblings
For how to restore:
iTunes: Restoring iOS software
To restore from backup see:
iOS: Back up and restore your iOS device with iCloud or iTunes
If you restore from iCloud backup the apps will be automatically downloaded. If you restore from iTunes backup the apps and music have to be in the iTunes library since synced media like apps and music are not included in the backup of the iOS device that iTunes makes.
You can redownload most iTunes purchases by:
Downloading past purchases from the App Store, iBookstore, and iTunes Store
If problem what happens or does not happen and when in the instructions? When you successfully get the iPod in recovery mode and connect to computer iTunes should say it found an iPod in recovery mode.
Otherwise follow varjak paw recommendation -
I was told I would have to set up 3 separate iTunes accounts, but is that the only way? It has been very frustrating b/c I don't need my husbands or daughters contacts on my phone. And anytime one downloads an app, it pops up on the other devices. I like the intent the cloud, but it is getting frustrating to manage all of my devices individually.
thanks!!Without separate accounts and IDs, how would you imagine or manage different people?
I assume that they all have their own separate login accounts for Mac OS. They should. But that isn't enough if all the household iTunes are under one ID, they would get mixed into one ID in the database.
Was it though through far enough? probably not. Getting the cloud concept working seems as far as it went with more work to be done to handle devices, IDs, and accounts, and to avoid just this mess and mishmash. -
We have just moved from MobileMe, where we had a 'Family account' (and we each have our own @me.com email addresses) to iCloud. We share the Cal and Contacts on our iMac. How do we sync to multiple devices - we each have an iPad and an iPhone, but with different accounts set up for mail. Mine syncs OK to Cal and Contacts, but hers doesn't. There must be a way! Please help.
According the this: http://www.apple.com/mobileme/transition.html, "After moving to iCloud, family member accounts are no longer linked to the master account." You can share an iCloud calendar (see http://support.apple.com/kb/PH2690), but I don't think you will be able to share iCloud contacts unless you are signed into the same iCloud account on both phones.
-
We have a large family, 5 kids and two adults all with iPads, iPhones, Mac Books, Servers.... How can we combine our purchases to use on all our devices. We have two Apple ID's and sometimes buy multiple copies because of how we are limited...
Hello Halfback71,
Thanks for using Apple Support Communities.
For more information on this, take a look at:
Frequently asked questions about Apple ID
http://support.apple.com/kb/ht5622
I have multiple Apple IDs. Is there a way for me to merge them into a single Apple ID?
Apple IDs cannot be merged. You should use your preferred Apple ID from now on, but you can still access your purchased items such as music, movies, or software using your other Apple IDs.
If you are wondering how using multiple Apple IDs relate to iCloud, see Apple IDs and iCloud.
Best of luck,
Mario -
We have 3 Apple Id's, each ID using an iPad and an iPhone (3 id's, 3 iPads, 3 iPhones). We want to use one calendar on all 6 devices and have that one calendar update or sync to all devices. We would like all 6 devices to provide notifcations from the one unique calendar as well. We do not want to share contacts, photos, ect. Please suggest how to achieve this, with the name of the calendar, if I am to get one from the App store, and how to set this up. Please talk in easy terms as I am technically Challenged. Thank you. 3 iPad air 2, 2 iPhone 6 plus, 1 iPhone 4s.
Hello there MizzouTrojan,
If I understand correctly you want all 6 devices to have access to a single calendar that each device gets notifications for and can edit. You can do that with an private iCloud shared calendar. First sign into www.icloud.com and use these steps from the following article to share a calendar:
iCloud: Share a calendar with others
Share a calendar privately
Click the Share button to the right of the calendar name in the sidebar, then select Private Calendar.
Note: You can also share the same calendar publicly. For instructions, see the next task, “Share a calendar publicly.”
Type the invitee’s email address in the Add Person field and press Return.
Click the pop-up menu with the invitee’s name and choose access privileges (View & Edit or View Only).
For each person you want to share the calendar with, repeat steps 2 and 3.
When you’ve invited everyone and set their privileges, click OK.
Invitation emails are sent from your iCloud email address to the participants you specified.
Thank you for using Apple Support Communities.
Cheers,
Sterling -
Me and my partner are currently using the same apple id and have no space left on our devices. We are currently waiting on the iphone 6 plus to arrive and don't know how to transfer all data to the new phones.?
I don't know if I'm asking this all in a way that can be understood? Thanks ED3K, however that part I do understand (in the link you provided!)
What I need to know is "how" I can separate or rather create another Apple ID for my son-who is currently using "my Apple ID?" If there is a way to let him keep "all" his info on his phone (eg-contacts, music, app's, etc.) without doing a "reset?') Somehow I need to go into his phone's setting-create a new Apple ID and possibly a new password so he can still use our combined iCloud & Itunes account?
Also then letting me take back my Apple ID & password, but again allowing us (my son and I) to use the same iCloud & Itunes account? Does that make more sense??? I'm sincerely trying to get this cleared up once and for all----just need guidance from someone who has a true understanding of the whole Apple iCloud/Itunes system!
Thanks again for "anyone" that can help me!!! -
I have two devices (Iphone and Ipad) on the same Apple ID. When I go to Icloud and click at the "find Iphone" I see only one of my devices. How can I do to see both of them?
Obvious question, but have you got 'Find My iPhone' set on both devices? Settings>iCloud>Find My iPhone.
Maybe you are looking for
-
Is anyone having trouble with the Ios5 update? All videos are slow!
When I try to watch YouTube, or any movies it takes forever. I didn't have this issue untill this update (beginning to hate I did it). Someone please help me I can't even see my soaps!!!!
-
[Macbook] Wireless networks don't appear, or appear then disappear
Two windows vista laptops can scan and find several wireless networks and connect to one (unsecured). However my Macbook, sitting inches away, does not list any networks to connect to. Sometimes, upon restarting, the networks will show up, but when t
-
Why is shipping @ Lenovo so slow and disorganized???
I just wanted to relate a story about a purchase I tried to make thru the Lenovo Site. We needed a new portable workstation for off site programming for one of our service techs. I had heard good things about the new Lenovo computers and I wanted to
-
My mother's iCloud account is blocked and she doesn't know the answer to the security question.
My mother's iCloud is totally blocked. She can't access her e-mal (me.com), and that makes impossible to reset the password. She also doesn't remember the awnser to the security question. So, what do I do?
-
Rv120w block IP utilizing CIDR?
hello, i run a web server out of my home hosting a website that can get several hundred people visiting simultaneously. im currently attempting to upgrade my DD-WRT flashed WRT54G V2 router with a cisco rv120w in order to sustain more simultaneous c