Re: [PacketFence-users] Cisco Wireless LAN Controller WLC Session Timeout Setting
Sorry for an old thread bump, but we see this also on Cisco WLCs. Some client devices will visibly disconnect the user from the network and then reauthenticate. We actually see it every few minutes. We also have users saying that xbox live disconnects every few minutes when run through our mac-filtered packetfence SSID. Our session-timeout settings on the SSIDs are at 1800, but this seems to occur much more frequently than that. I’m yet to rule out the Cisco WLCs, however users have only mentioned it since they’ve been using the packetfence controlled SSID. Did you manage to resolve your issue? Cheers, Andi From: Tim DeNike [mailto:tim.den...@mcc.edu] Sent: 14 September 2015 16:43 To: packetfence-users@lists.sourceforge.net Subject: Re: [PacketFence-users] Cisco Wireless LAN Controller WLC Session Timeout Setting Not Cisco specific, but I have seen some vendors supplicants actually pause or de-auth the client on a timeout re-authentication. So the user essentially sees a disconnect just for the duration of the re-auth. On Mon, Sep 14, 2015 at 11:03 AM, Tedder, Eric mailto:e...@westlake.k12.oh.us>> wrote: Do you use the AVC features on the WLC? I attempted to use AVC on the WLC and it caused me to much headache with issues like you are describing. From: Pete Hoffswell [mailto:pete.hoffsw...@davenport.edu<mailto:pete.hoffsw...@davenport.edu>] Sent: Monday, September 14, 2015 10:57 AM To: packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net> Subject: Re: [PacketFence-users] Cisco Wireless LAN Controller WLC Session Timeout Setting Thanks for the info, Eric - It is quite possible I'm barking up the wrong tree on this issue. Not a PF issue, in my thinking. - Pete Hoffswell - Network Manager pete.hoffsw...@davenport.edu<mailto:pete.hoffsw...@davenport.edu> http://www.davenport.edu On Mon, Sep 14, 2015 at 10:53 AM, Tedder, Eric mailto:e...@westlake.k12.oh.us>> wrote: Pete, I run multiple SSIDs with Packet Fence and 1800 is not a problem at my site. I also have an SSID with 420 set as my timeout without a problem. I would suspect a bigger problem like maybe a web proxy or firewall/ACL restrictions. We us a 5508 running WLC 8.0.120.0 with a 4GB LAG and PF 4.7 All of this is with VLAN management. Eric From: Pete Hoffswell [mailto:pete.hoffsw...@davenport.edu<mailto:pete.hoffsw...@davenport.edu>] Sent: Monday, September 14, 2015 9:57 AM To: packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net> Subject: [PacketFence-users] Cisco Wireless LAN Controller WLC Session Timeout Setting Hi everyone - We currently run a WLAN session timeout setting of 1800 seconds (30 minutes). This is what is called for in the PacketFence Documentation. We are having users complain of some disruption to real-time streams. (Video conference, etc). I think that if I turn off the session timeout, things might clear up a bit for them? Would it be ok to turn off session timeout on my WLC's SSID? - Pete Hoffswell - Network Manager pete.hoffsw...@davenport.edu<mailto:pete.hoffsw...@davenport.edu> http://www.davenport.edu -- ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net<mailto:PacketFence-users@lists.sourceforge.net> https://lists.sourceforge.net/lists/listinfo/packetfence-users -- ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net<mailto:PacketFence-users@lists.sourceforge.net> https://lists.sourceforge.net/lists/listinfo/packetfence-users [Cardiff Metropolitan University - 150 years of nurturing talent]<http://www.cardiffmet.ac.uk/cardiffmet150> -- ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
Re: [PacketFence-users] Cisco Wireless LAN Controller WLC Session Timeout Setting
Not Cisco specific, but I have seen some vendors supplicants actually pause or de-auth the client on a timeout re-authentication. So the user essentially sees a disconnect just for the duration of the re-auth. On Mon, Sep 14, 2015 at 11:03 AM, Tedder, Eric wrote: > Do you use the AVC features on the WLC? I attempted to use AVC on the WLC > and it caused me to much headache with issues like you are describing. > > > > > > *From:* Pete Hoffswell [mailto:pete.hoffsw...@davenport.edu] > *Sent:* Monday, September 14, 2015 10:57 AM > *To:* packetfence-users@lists.sourceforge.net > *Subject:* Re: [PacketFence-users] Cisco Wireless LAN Controller WLC > Session Timeout Setting > > > > Thanks for the info, Eric - > > > > It is quite possible I'm barking up the wrong tree on this issue. Not a > PF issue, in my thinking. > > > - > Pete Hoffswell - Network Manager > pete.hoffsw...@davenport.edu > http://www.davenport.edu > > > > On Mon, Sep 14, 2015 at 10:53 AM, Tedder, Eric > wrote: > > Pete, > > > > I run multiple SSIDs with Packet Fence and 1800 is not a problem at my > site. I also have an SSID with 420 set as my timeout without a problem. > > I would suspect a bigger problem like maybe a web proxy or firewall/ACL > restrictions. We us a 5508 running WLC 8.0.120.0 with a 4GB LAG and PF 4.7 > > All of this is with VLAN management. > > > > Eric > > > > *From:* Pete Hoffswell [mailto:pete.hoffsw...@davenport.edu] > *Sent:* Monday, September 14, 2015 9:57 AM > *To:* packetfence-users@lists.sourceforge.net > *Subject:* [PacketFence-users] Cisco Wireless LAN Controller WLC Session > Timeout Setting > > > > Hi everyone - > > > > We currently run a WLAN session timeout setting of 1800 seconds (30 > minutes). This is what is called for in the PacketFence Documentation. > > > > We are having users complain of some disruption to real-time streams. > (Video conference, etc). I think that if I turn off the session timeout, > things might clear up a bit for them? > > > > Would it be ok to turn off session timeout on my WLC's SSID? > > > > > - > Pete Hoffswell - Network Manager > pete.hoffsw...@davenport.edu > http://www.davenport.edu > > > > -- > > ___ > PacketFence-users mailing list > PacketFence-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/packetfence-users > > > > > -- > > ___ > PacketFence-users mailing list > PacketFence-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/packetfence-users > > -- ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
Re: [PacketFence-users] Cisco Wireless LAN Controller WLC Session Timeout Setting
Do you use the AVC features on the WLC? I attempted to use AVC on the WLC and it caused me to much headache with issues like you are describing. From: Pete Hoffswell [mailto:pete.hoffsw...@davenport.edu] Sent: Monday, September 14, 2015 10:57 AM To: packetfence-users@lists.sourceforge.net Subject: Re: [PacketFence-users] Cisco Wireless LAN Controller WLC Session Timeout Setting Thanks for the info, Eric - It is quite possible I'm barking up the wrong tree on this issue. Not a PF issue, in my thinking. - Pete Hoffswell - Network Manager pete.hoffsw...@davenport.edu<mailto:pete.hoffsw...@davenport.edu> http://www.davenport.edu On Mon, Sep 14, 2015 at 10:53 AM, Tedder, Eric mailto:e...@westlake.k12.oh.us>> wrote: Pete, I run multiple SSIDs with Packet Fence and 1800 is not a problem at my site. I also have an SSID with 420 set as my timeout without a problem. I would suspect a bigger problem like maybe a web proxy or firewall/ACL restrictions. We us a 5508 running WLC 8.0.120.0 with a 4GB LAG and PF 4.7 All of this is with VLAN management. Eric From: Pete Hoffswell [mailto:pete.hoffsw...@davenport.edu<mailto:pete.hoffsw...@davenport.edu>] Sent: Monday, September 14, 2015 9:57 AM To: packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net> Subject: [PacketFence-users] Cisco Wireless LAN Controller WLC Session Timeout Setting Hi everyone - We currently run a WLAN session timeout setting of 1800 seconds (30 minutes). This is what is called for in the PacketFence Documentation. We are having users complain of some disruption to real-time streams. (Video conference, etc). I think that if I turn off the session timeout, things might clear up a bit for them? Would it be ok to turn off session timeout on my WLC's SSID? - Pete Hoffswell - Network Manager pete.hoffsw...@davenport.edu<mailto:pete.hoffsw...@davenport.edu> http://www.davenport.edu -- ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net<mailto:PacketFence-users@lists.sourceforge.net> https://lists.sourceforge.net/lists/listinfo/packetfence-users -- ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
Re: [PacketFence-users] Cisco Wireless LAN Controller WLC Session Timeout Setting
Thanks for the info, Eric - It is quite possible I'm barking up the wrong tree on this issue. Not a PF issue, in my thinking. - Pete Hoffswell - Network Manager pete.hoffsw...@davenport.edu http://www.davenport.edu On Mon, Sep 14, 2015 at 10:53 AM, Tedder, Eric wrote: > Pete, > > > > I run multiple SSIDs with Packet Fence and 1800 is not a problem at my > site. I also have an SSID with 420 set as my timeout without a problem. > > I would suspect a bigger problem like maybe a web proxy or firewall/ACL > restrictions. We us a 5508 running WLC 8.0.120.0 with a 4GB LAG and PF 4.7 > > All of this is with VLAN management. > > > > Eric > > > > *From:* Pete Hoffswell [mailto:pete.hoffsw...@davenport.edu] > *Sent:* Monday, September 14, 2015 9:57 AM > *To:* packetfence-users@lists.sourceforge.net > *Subject:* [PacketFence-users] Cisco Wireless LAN Controller WLC Session > Timeout Setting > > > > Hi everyone - > > > > We currently run a WLAN session timeout setting of 1800 seconds (30 > minutes). This is what is called for in the PacketFence Documentation. > > > > We are having users complain of some disruption to real-time streams. > (Video conference, etc). I think that if I turn off the session timeout, > things might clear up a bit for them? > > > > Would it be ok to turn off session timeout on my WLC's SSID? > > > > > - > Pete Hoffswell - Network Manager > pete.hoffsw...@davenport.edu > http://www.davenport.edu > > > -- > > ___ > PacketFence-users mailing list > PacketFence-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/packetfence-users > > -- ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
Re: [PacketFence-users] Cisco Wireless LAN Controller WLC Session Timeout Setting
Pete, I run multiple SSIDs with Packet Fence and 1800 is not a problem at my site. I also have an SSID with 420 set as my timeout without a problem. I would suspect a bigger problem like maybe a web proxy or firewall/ACL restrictions. We us a 5508 running WLC 8.0.120.0 with a 4GB LAG and PF 4.7 All of this is with VLAN management. Eric From: Pete Hoffswell [mailto:pete.hoffsw...@davenport.edu] Sent: Monday, September 14, 2015 9:57 AM To: packetfence-users@lists.sourceforge.net Subject: [PacketFence-users] Cisco Wireless LAN Controller WLC Session Timeout Setting Hi everyone - We currently run a WLAN session timeout setting of 1800 seconds (30 minutes). This is what is called for in the PacketFence Documentation. We are having users complain of some disruption to real-time streams. (Video conference, etc). I think that if I turn off the session timeout, things might clear up a bit for them? Would it be ok to turn off session timeout on my WLC's SSID? - Pete Hoffswell - Network Manager pete.hoffsw...@davenport.edu<mailto:pete.hoffsw...@davenport.edu> http://www.davenport.edu -- ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
[PacketFence-users] Cisco Wireless LAN Controller WLC Session Timeout Setting
Hi everyone - We currently run a WLAN session timeout setting of 1800 seconds (30 minutes). This is what is called for in the PacketFence Documentation. We are having users complain of some disruption to real-time streams. (Video conference, etc). I think that if I turn off the session timeout, things might clear up a bit for them? Would it be ok to turn off session timeout on my WLC's SSID? - Pete Hoffswell - Network Manager pete.hoffsw...@davenport.edu http://www.davenport.edu -- ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
