客户测试 V5 AC与深信服全网行为管理AC对接802.1x认证,认证对接是没问题的,一段时间后,如果客户进行漫游测试时,用户终端会感知到刷小视频会卡,但过几秒中后恢复;在深信服登录日志中显示有用户那段时间注销后又快速重连,问下这个现象是正常的吗?若不是,如何优化呢?
AC配置:
dot1x authentication-method eap
port-security enable
radius scheme sxf
server-type standard
primary authentication 172.16.1.252
primary accounting 172.16.1.252
key authentication cipher $c$3$6uyhf5QvrX33+b8MTuNj66yy7cKS1FWYkw==
key accounting cipher $c$3$UkkeeGNPmP+t160tii3QFUBUJkJmlHL6ZQ==
user-name-format without-domain
nas-ip 172.16.203.253
domain sxf
authentication lan-access radius-scheme sxf none
authorization lan-access radius-scheme sxf none
accounting portal radius-scheme sxf none
access-limit disable state
active idle-cut disable
self-service-url disable
wlan service-template 7 crypto
ssid visitors_PC
bind WLAN-ESS 7
cipher-suite ccmp
security-ie rsn
service-template enable
interface WLAN-ESS7
port access vlan 160
port-security port-mode userlogin-secure-ext
port-security tx-key-type 11key
undo dot1x handshake
dot1x mandatory-domain sxf
undo dot1x multicast-trigger
在AC上的debug信息:
%Jun 11 15:25:55:027 2021 YPTX-WX5540E-wuxian WMAC/6/WMAC_CLIENT_GOES_OFFLINE: Client e089-7e39-e928 disconnected from WLAN YPTX_visitors_PC. Reason code is 65534.
%Jun 11 15:25:55:028 2021 YPTX-WX5540E-wuxian WMAC/6/WMAC_CLIENT_JOIN_WLAN: Client e089-7e39-e928 successfully joins WLAN YPTX_visitors_PC, on APID 367 with BSSID 600b-0356-b036.
*Jun 11 15:25:55:028 2021 YPTX-WX5540E-wuxian WMAC/7/EVENT : AC select policy for station.
*Jun 11 15:25:55:028 2021 YPTX-WX5540E-wuxian WMAC/7/EVENT : Client requests PTKSA replay counter, ignore it
*Jun 11 15:25:55:029 2021 YPTX-WX5540E-wuxian WMAC/7/EVENT : Wsec from roam info to get userprofile id 4294967295 by NULL name.
*Jun 11 15:25:55:029 2021 YPTX-WX5540E-wuxian WMAC/7/EVENT : Allocate AID (751) for STA e089-7e39-e928 successfully
*Jun 11 15:25:55:029 2021 YPTX-WX5540E-wuxian WMAC/7/EVENT : Delete mobile (e089-7e39-e928) sent, AP: zhl-6f-14, BSSID: 3891-d58d-c3b6
*Jun 11 15:25:55:029 2021 YPTX-WX5540E-wuxian WMAC/7/EVENT : Do not need to send deauth,ReasonCode 65534.
*Jun 11 15:25:55:030 2021 YPTX-WX5540E-wuxian WMAC/7/EVENT : De-allocate AID (751) for STA e089-7e39-e928 successfully.
*Jun 11 15:25:55:030 2021 YPTX-WX5540E-wuxian WMAC/7/EVENT : RT backup sta when sta down!
*Jun 11 15:25:55:030 2021 YPTX-WX5540E-wuxian WMAC/7/EVENT : Add mobile (e089-7e39-e928) sent, AP: zhl-6f-13, BSSID: 600b-0356-b036
*Jun 11 15:25:55:030 2021 YPTX-WX5540E-wuxian WMAC/7/EVENT : Re-association response sent with status code 0
*Jun 11 15:25:55:031 2021 YPTX-WX5540E-wuxian WMAC/7/EVENT : Do not wait ACK for association response
*Jun 11 15:25:55:031 2021 YPTX-WX5540E-wuxian WMAC/7/EVENT : Notifying Driver regarding station
从以上debug信息第一行 查到Reason code is 65534,65534代码为:因为存在冗余的sta而删除,如漫游。
因为客户在现场测试也是到处走动才导致这种现象出现,若是在一个地方一段时间,不会出现该问题。
(0)
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
802.1X认证的无感知是在深信服AC开还是在V5 无线控制器这端开?