We have about 7000 APs running on ten WiSM2s (don't judge) in a single mobility group with a peak of about 35,000 concurrent devices across all SSIDs. We are running 8.3.121.15. This year we made a big push to move from an open SSID to our dot1x SSID. We crossed over the 15,000 PMK cache limit and since then we are having ongoing issues where the device re-prompts for the users credentials. If you just hit escape it will reconnect fine but most users re-enter their credentials which gets old real fast. Cisco claims even after exceeding the PMK cache limit the controller would just send the radius request up to our radius servers and do a re-auth, there would be a small impact on the time required to do that but should not be user impacting. Maybe folks using EAP-TLS are not noticing this problem as there is no username/password? Or could this be an 8.3 thing? Cisco wants us to predict the next client that is going to have the problem ans start a client debug before it happens. If I had that ability I would be in Vegas!
@Eriks Of the 25k concurrent devices associated how many are dot1x and what EAP method are you using? Patrick On 11/15/17 10:55 AM, Eriks Rugelis wrote: > FWIW, our Keele campus has twelve WLC5508's which together support approx. > 4900 APs. We have a single Mobility Group configured for all APs located at > this campus. The campus has daily peaks of approx. 25K concurrent devices > associated. We are not aware of any operationally 'bad' system behaviour > related to mobility group configuration which is impacting the ability of our > end-users to successfully use the service. Perhaps we aren't paying enough > attention to the relevant metrics? > > We are presently running v8.0.152.0 and are pre-production testing v8.5 due > to imminent deployment of AP1815w's in residence buildings. > > Eriks Rugelis, > Manager, Network Development > York University, Toronto > > ********** > Participation and subscription information for this EDUCAUSE Constituent > Group discussion list can be found at http://www.educause.edu/discuss. > ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
