cancel
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 

Wireless clients sporadically getting Limited Connectivity, APs dropping packets

Wireless clients sporadically getting Limited Connectivity, APs dropping packets

John_Rowler
New Contributor
We have a pair of V2110 wireless controllers and around 400 3825i access points. Controller firmware is 09.21.06.0002. AP firmware is 9.21.27.1387X.

About 4 months ago we noticed a problem where the APs would just drop traffic. A packet capture will show a ping coming into the radio from the client, going out the Eth interface on the AP, the reply coming back into the Eth interface, and never going out of the radio.

A particularly strange detail is that this only happens with certain source/destination traffic. For instance a client cant ping the gateway of 10.1.20.1/24. but cannot pint the server at 10.1.20.2. Since we can see the ping making it to the server and the ping reply making it back to the AP, we know it's not a firewall/ACL/routing issue on any other part of the network. The traffic disappears at the AP. Clients cannot communicate with anything on the Internet or any of our servers (DNS, DHCP, etc.) during this time. They can ping gateways in any subnet but that's it; everything else is failed.

More details:

-We've gone through several firmware updates with GTAC. Nothing has helped.
-The issue can affect any client on any AP in any location at any time.
-The issue is intermittent; it may happen every few minutes or once per month to a particular client in a particular area. Once failed it may last for seconds or days.
-While it's affecting one client, other clients on the AP may be working fine or may also fail.
-It can happen on either 2.4 or 5.7GHz.
-It can affect any type of client (phone, laptop, tablet) and any OS.
-Restarting the client or AP will sometimes fix the issue, sometimes not.
-It happens with our without using NAC, or any other type of authentication. It happens on completely open networks as well.
-It happens on both bridged at AP and bridged at controller topologies.
-It's not limited to a particular subnet or VLAN.
-It happens with or without Flexible Client Access enabled.
-It happens on either controller.
-GTAC hasn't made much progress on the issue in 4 months.
157 REPLIES 157

Doug
Extreme Employee
9.21.07 is on our GA download site now. The beta build you have was our first attempt at the fix. The GA build has the most current update fixes in it.
Doug Hyde
Director, Technical Support / Extreme Networks

Ronald_Dvorak
Honored Contributor
9.21.07.0007 is released and available for download on the server

JP4
New Contributor II
Are you on 9.21.07 also ?

James_A
Valued Contributor
I have 09.21.07.0005, which does at least fix 802.11r-related crashes on AP3825 (although I have 11r turned off now for the time being anyway).

James_A
Valued Contributor
The traces I have show hostapd thinking it sends out a response to EAPOL start, but you never see it in the air, and so auth times out. For us it's reliable, once an AP is broken all 802.1x clients will be broken on it. Also it takes a day or so after a reboot to start happening, so for a while I was rebooting all APs overnight.

I'm trying downgrading to 09.21.03 while I wait for this to be fixed - there was a similar problem with no EAPOL response that was supposedly fixed in 09.21.04, but it was at least less frequent.

GTM-P2G8KFN