Hi guys, I had this university with webauth for all studends. The problem was like yours. But we noticed that some clients were not experiencing the problem and some not !
In this cae no timeouts where enabled and so on. We fixed this issue with many PCs by disabling the power-savings feature of the NIC. You see the client dissasociates and client loses its ip address. The WLC (understandably) cant hold on to the association reccords forever so for security purposes it ask for authentication again when the user returns. I know for a fact that for layer3 mobility if a user closes its computer on subnetA and opens it up again on subnetB (same ssid with layer3 roaming) it will still get dhcp ip from SubnetA. I learned somehere that the WLC keeps the mobility info for about 2 minutes. But I don't know if this has anything to do with webauth or not. hope this helps. regards. Kristjan -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of [email protected] Sent: 21. október 2010 16:11 To: [email protected] Subject: CCIE_Wireless Digest, Vol 19, Issue 48 Send CCIE_Wireless mailing list submissions to [email protected] To subscribe or unsubscribe via the World Wide Web, visit http://onlinestudylist.com/cgi-bin/mailman/listinfo/ccie_wireless or, via email, send a message with subject or body 'help' to [email protected] You can reach the person managing the list at [email protected] When replying, please edit your Subject line so it is more specific than "Re: Contents of CCIE_Wireless digest..." Today's Topics: 1. Re: Iphones and Webauth (George Stefanick) 2. Re: Iphones and Webauth (George Stefanick) 3. Re: Iphones and Webauth (Jennifer Huber) ---------------------------------------------------------------------- Message: 1 Date: Thu, 21 Oct 2010 11:06:57 -0500 From: George Stefanick <[email protected]> To: Phil Priest <[email protected]> Cc: [email protected] Subject: Re: [CCIE Wireless] Iphones and Webauth Message-ID: <[email protected]> Content-Type: text/plain; charset="iso-8859-1" I would also mention arguably that some would say to have both the client session timeout and the arp timeout the same value. The WLC blocks broadcast by default, so your WLC acts as a ARP proxy to the wireless client. Anyone care to comment on that statement ? On Thu, Oct 21, 2010 at 10:58 AM, Phil Priest <[email protected]>wrote: > Yep, > > > > I missed the user idle timeout value.. I had set the session timeout . My > thoughts are that because iphones switch off their wireless radio to save > power, that this timer kicks in, whereas on other clients it does not... > > > > Thanks for your help > > > > Phil > > > > *From:* George Stefanick [mailto:[email protected]] > *Sent:* 21 October 2010 16:51 > *To:* Phil Priest; [email protected] > > *Subject:* Re: [CCIE Wireless] Iphones and Webauth > > > > I hate my mobile sometimes... lets try this again > > > > > > Two items you want to be aware of that will cause a session > reauthenication. > > > > 1) Session timeout which is WLAN specific is found under > (CONTROLLER)->SELECT WLAN->(ADVANCED TAB) > > > > 2) User Idle Timeout (seconds) which is found uneder (Controller) general > > > > > > If a device sits idle it will be deauth based on the (seconds) alloted ... > > > > > > Make sense? > > > > > > On Thu, Oct 21, 2010 at 10:48 AM, George Stefanick < > [email protected]> wrote: > > Two items you want to be aware of that will cause a session > reauthenication. > > > > 1) Session timeout which is WLAN specific is found under > (CONTROLLER)->SELECT WLAN->(ADVANCED TAB) > > > > On Thu, Oct 21, 2010 at 10:43 AM, Jennifer Huber < > [email protected]> wrote: > > Phil, > > > > Does this NetPro forum posting help at all? You didn't mention what model > of phone, so I don't know if this applies.. > Wireless guests using web authentication time out after 20 > minutes<https://supportforums.cisco.com/message/1298418#1298418> > > https://supportforums.cisco.com/message/1298419 > > On Thu, Oct 21, 2010 at 10:39 AM, Phil Priest <[email protected]> > wrote: > > Hi, > > > > This is off topic as far as this lab is concerned but has anybody had an > issue with iphones and Web Auth. > > > > One of my clients has notices that they have to re-authenticate frequently > using Web Auth. I have the timers set so that session times out every 24 > hours and this works fine for normal windows clients. > > > > I guess it must be a browser issue and have not had time to fully > investigate yet, just wondering if anybody has seen this issue? > > > > Thanks in advance > > > > *Phil Priest* > > > > > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > > > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > > > -- > George M. Stefanick Jr., CCNA, CWNA, CQS-CWLANSS Sr. Wireless Engineer > (717) > 471 - 6186 Mobile (717) 798 - 8255 Skype > > > > > -- > George M. Stefanick Jr., CCNA, CWNA, CQS-CWLANSS Sr. Wireless Engineer > (717) > 471 - 6186 Mobile (717) 798 - 8255 Skype > -- George M. Stefanick Jr., CCNA, CWNA, CQS-CWLANSS Sr. Wireless Engineer (717) 471 - 6186 Mobile (717) 798 - 8255 Skype -------------- next part -------------- An HTML attachment was scrubbed... URL: </archives/ccie_wireless/attachments/20101021/6ba7951c/attachment-0001.html> ------------------------------ Message: 2 Date: Thu, 21 Oct 2010 11:08:16 -0500 From: George Stefanick <[email protected]> To: Jennifer Huber <[email protected]> Cc: [email protected] Subject: Re: [CCIE Wireless] Iphones and Webauth Message-ID: <[email protected]> Content-Type: text/plain; charset="iso-8859-1" Jenn, BTW, Nice job with the clean air videos... ! http://jenniferhuber.blogspot.com/ On Thu, Oct 21, 2010 at 10:43 AM, Jennifer Huber <[email protected] > wrote: > Phil, > > Does this NetPro forum posting help at all? You didn't mention what model > of phone, so I don't know if this applies.. > Wireless guests using web authentication time out after 20 > minutes<https://supportforums.cisco.com/message/1298418#1298418> > https://supportforums.cisco.com/message/1298419 > > On Thu, Oct 21, 2010 at 10:39 AM, Phil Priest <[email protected]>wrote: > >> Hi, >> >> >> >> This is off topic as far as this lab is concerned but has anybody had an >> issue with iphones and Web Auth. >> >> >> >> One of my clients has notices that they have to re-authenticate frequently >> using Web Auth. I have the timers set so that session times out every 24 >> hours and this works fine for normal windows clients. >> >> >> >> I guess it must be a browser issue and have not had time to fully >> investigate yet, just wondering if anybody has seen this issue? >> >> >> >> Thanks in advance >> >> >> >> *Phil Priest* >> >> >> >> _______________________________________________ >> For more information regarding industry leading CCIE Lab training, please >> visit www.ipexpert.com >> >> > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > -- George M. Stefanick Jr., CCNA, CWNA, CQS-CWLANSS Sr. Wireless Engineer (717) 471 - 6186 Mobile (717) 798 - 8255 Skype -------------- next part -------------- An HTML attachment was scrubbed... URL: </archives/ccie_wireless/attachments/20101021/78fc5cde/attachment-0001.html> ------------------------------ Message: 3 Date: Thu, 21 Oct 2010 11:10:21 -0500 From: Jennifer Huber <[email protected]> To: George Stefanick <[email protected]> Cc: [email protected] Subject: Re: [CCIE Wireless] Iphones and Webauth Message-ID: <[email protected]> Content-Type: text/plain; charset="iso-8859-1" Thanks - I don't know about you guys, but I get tired of reading 'how to' guides.. I thought a video might be worthwhile :) On Thu, Oct 21, 2010 at 11:08 AM, George Stefanick < [email protected]> wrote: > Jenn, > > BTW, Nice job with the clean air videos... ! > > http://jenniferhuber.blogspot.com/ > > > > > > On Thu, Oct 21, 2010 at 10:43 AM, Jennifer Huber < > [email protected]> wrote: > >> Phil, >> >> Does this NetPro forum posting help at all? You didn't mention what model >> of phone, so I don't know if this applies.. >> Wireless guests using web authentication time out after 20 >> minutes<https://supportforums.cisco.com/message/1298418#1298418> >> https://supportforums.cisco.com/message/1298419 >> >> On Thu, Oct 21, 2010 at 10:39 AM, Phil Priest <[email protected]>wrote: >> >>> Hi, >>> >>> >>> >>> This is off topic as far as this lab is concerned but has anybody had an >>> issue with iphones and Web Auth. >>> >>> >>> >>> One of my clients has notices that they have to re-authenticate >>> frequently using Web Auth. I have the timers set so that session times out >>> every 24 hours and this works fine for normal windows clients. >>> >>> >>> >>> I guess it must be a browser issue and have not had time to fully >>> investigate yet, just wondering if anybody has seen this issue? >>> >>> >>> >>> Thanks in advance >>> >>> >>> >>> *Phil Priest* >>> >>> >>> >>> _______________________________________________ >>> For more information regarding industry leading CCIE Lab training, please >>> visit www.ipexpert.com >>> >>> >> >> _______________________________________________ >> For more information regarding industry leading CCIE Lab training, please >> visit www.ipexpert.com >> >> > > > -- > George M. Stefanick Jr., CCNA, CWNA, CQS-CWLANSS Sr. Wireless Engineer > (717) > 471 - 6186 Mobile (717) 798 - 8255 Skype > -------------- next part -------------- An HTML attachment was scrubbed... URL: </archives/ccie_wireless/attachments/20101021/8fda7b58/attachment.html> ------------------------------ _______________________________________________ CCIE_Wireless mailing list [email protected] http://onlinestudylist.com/cgi-bin/mailman/listinfo/ccie_wireless End of CCIE_Wireless Digest, Vol 19, Issue 48 ********************************************* _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
