Wireless - Location Issues

  • 0
  • 4
  • Problem
  • Updated 2 years ago
  • Solved
Hello.  Our current setup is we have two CS-4110 wireless controllers that manage all of our AP's.  They are a mix of AP3610's and AP3715i's in 20 different building locations across the city.  Each location has it's own DHCP scope. We have 3 wireless SSID networks that are configured via tagged vlan traffic that all route back to a central DHCP server.  One is a guest network that gives only webpage access and then two enterprise networks that give access to our network (one giving N level wireless and the other still on G). The two Enterprise SSID's pull addresses from the same scope and the Guest is on it's own. All SSID's are names the same at each location with the same psk's.  This means we can travel to any site and have access to the wireless network.

We are starting to run into an issue in our school district where we take a device to one location, like a school, it connects no problem to the network but when if we travel to a different site, the device (like my windows 7 pro laptop and my iphone 5s) see the networks but will not join automatically.  They just sit trying to connect.  However, here's the weird thing, if we join the device to our Guest network and then back to the Enterprise, then it works.  We've tried doing a ipconfig release, tried rebooting the device, powering completely off and even deleting the wireless sites from the computer and then rejoining for the first time.  It will not join the Enterprise network until we manually tell it to join Guest, allow it to connect and then tell it to join Enterprise, then it works. 

This issue started mostly with Apple devices like iPads and iPhones but now it's starting to affect Windows 7 laptops.  We've checked our DHCP scopes and DNS records but can't find any issues.

We'd really appreciate suggestions.  Please let me know if you have any questions.

Thank you.

Photo of Ryan Reb

Ryan Reb

  • 140 Points 100 badge 2x thumb

Posted 5 years ago

  • 0
  • 4
Photo of Ronald Dvorak

Ronald Dvorak, Embassador

  • 48,924 Points 20k badge 2x thumb
Hi Ryan,

I'm not 100% sure as the information you've provided don't include all the required data but I might know what the "problem" is.

It's a feature called "Permit Inter-WLAN Service Roaming".

It's enabled per default (VNS configuration -> WLAN service -> advanced...).
The basic function is that if you move between different WLAN services with the same SSID & security settings that the client keeps his IP and role = topology.

So if you use bridge@AP tag#100 in building#1 and move to building#2 which uses bridge@AP tag#200 within 30minutes (= the default idle timer) your client still will send the traffic on VLAN#100 as the client session is still in the EWC table and there was no new authentication.
If that VLAN isn't configured on the port in building#2 the traffic is dropped and you'll never get to the DHCP server.

In your case the function isn't that helpful so if you disabled it on all your WLAN services your clients should be able to move between sites without further problems.


Kind regards,
Ron
Photo of Ronald Dvorak

Ronald Dvorak, Embassador

  • 48,924 Points 20k badge 2x thumb
here a slide from the 7.41 knowledge transfer - sometimes pictures make more sense then words....

(Edited)
Photo of Ryan Reb

Ryan Reb

  • 140 Points 100 badge 2x thumb

Thank you for your reply.  I will check the settings you suggested asap.

I'm just curious what required information I am missing in my initial description?  I will try to include it in the future.

Thank you.

Photo of Ryan Reb

Ryan Reb

  • 140 Points 100 badge 2x thumb

I have now disabled the Inter-WLAN Service Roaming.  I'll post again when I can confirm that it works.  Thank you.
Photo of Ronald Dvorak

Ronald Dvorak, Embassador

  • 48,924 Points 20k badge 2x thumb
Don't get me wrong the problem description was great but sometimes it's hard to be 100% sure about the root cause of an issue without some reports from the EWC or an techsupport.
In that special case I'd check whether the client is still in the controllers client list as you move from one to the next location.
That would tell the authentication status and also which topology/role/... is used as the problem happen.
Also one of the first questions the GTAC will ask is the software version of your EWC to check for known bugs.

I look forward to hearing from you about the test result.

Photo of Ryan Reb

Ryan Reb

  • 140 Points 100 badge 2x thumb

It does appear that disabling the Inter-WLAN Service Roaming has resolved this issue.  I've been to three different locations this morning and my iphone hasn't had any issues connecting to the network now.  I will continue to test with various devices.  Thank you for your help.
Photo of Brian Townsend

Brian Townsend, Employee

  • 486 Points 250 badge 2x thumb
Ryan,

Good day.  I hope you are well.  Can you confirm that your issue has been resolved?  We would like to help if you are still seeing issues.

You can respond within theHUB or contact me directly 

Brian Townsend
btownsen@extremenetworks.com
Photo of Ryan Reb

Ryan Reb

  • 140 Points 100 badge 2x thumb

Hello.  Yes it is resolved now.  Disabling the Inter-WLAN roaming fixed it.  Thank you for your help.
Photo of Javier Solis

Javier Solis

  • 422 Points 250 badge 2x thumb
The inter-WLAN roaming feature works well for us since we are bridging at the controller. This allows users that may be able to roam across short distance buildings to seamlessly roam. Again, this works for us because we bridge all our VNS's back to the controller. We do however don't want to exhaust our IP pools for users in one VNS as they may stay on one VNS topology while roaming, so we lowered the idle pre/post WLAN service timeout.
Photo of Luis Mendes

Luis Mendes

  • 1,690 Points 1k badge 2x thumb
HI
   
    I have a customer with 700 aps on a campus, and when the customer move from one building to other and lose the conection with ap and when move to another build reconnect, and stop the traffic... Its necessary manually reconect.
 The time between move from one site to another is 2,3 minutes and connection is lost. ANy idea?? 

 The Inter-wlan is enabled.. 
Photo of Ronald Dvorak

Ronald Dvorak, Embassador

  • 48,924 Points 20k badge 2x thumb
is it the same topology/VLAN/IP subnet for both buildings ?