EWC ignore clients Deauth frames
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎01-26-2018 06:14 AM
At several customers EWC installations i am wondering that some clients are reported as active (Reports - All Active clients) although i know they are definitive offline.
To debug this i have connect a recent Windows 7 client to a WPA2 802.1x SSID. After that i disconnect the SSID via Windows normally.
Remote wireshark trace on that AP shows me a vaild Deauth frame:
But EWC report this MAC as active till idle timer after 30 minutes cut the session ...
Why does EWC ignore this above Deauth Frame ?
EWC = 10.31.07
Anybody who observe this behaviour too ?
To debug this i have connect a recent Windows 7 client to a WPA2 802.1x SSID. After that i disconnect the SSID via Windows normally.
Remote wireshark trace on that AP shows me a vaild Deauth frame:
But EWC report this MAC as active till idle timer after 30 minutes cut the session ...
Why does EWC ignore this above Deauth Frame ?
EWC = 10.31.07
Anybody who observe this behaviour too ?
11 REPLIES 11
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎01-26-2018 11:46 AM
Why is idle timer relevant if the clients sending a valid De-Auth Frame ?
Normally the controller should terminate the session immediatelly after receiving this typ of frame.
But EWC ignore it ...
Normally the controller should terminate the session immediatelly after receiving this typ of frame.
But EWC ignore it ...
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎01-26-2018 06:27 AM
The same behaviour can be observed witht WPA2-PSK authentication. EWC: 9.21.19
Best regards
Michael
Best regards
Michael