EWC ignore clients Deauth frames

[M_Nees]

At several customers EWC installations i am wondering that some clients are reported as active (Reports - All Active clients) although i know they are definitive offline.

To debug this i have connect a recent Windows 7 client to a WPA2 802.1x SSID. After that i disconnect the SSID via Windows normally.

Remote wireshark trace on that AP shows me a vaild Deauth frame:

But EWC report this MAC as active till idle timer after 30 minutes cut the session ...

Why does EWC ignore this above Deauth Frame ?
EWC = 10.31.07

Anybody who observe this behaviour too ?

[Umut_Aydin]

Hi all,

I will speak with Engineering about this and will raise a Feature Request if needed.

Regards

Umut Aydin

[M_Nees]

From my point of view this special, headstrong behaviour should changed to improve the product.
Especially the XMC and Control will benefit with better / more reliable visualizations of disconnected clients - currently we need 30 min (in default) to see if a client is disconnected.

[Umut_Aydin]

Hi all,

FYI

The de-auth packets removes the MU for the AP itself.
#cget muInfo wifi0/1

But it will remain in the client reports for the default idle timers.
After this time the MU get cleared in the Reports.

For more Info see please
https://gtacknowledge.extremenetworks.com/articles/Q_A/How-to-adjust-the-client-timers-on-the-Identi...

Regards

Umut

[M_Nees]

Adding some Flag into Client Report that MU is disassociated will be really helpful.