Discussion:
AP 3610 logs
Aaron Russell
2013-10-31 18:46:06 UTC
Permalink
Hello everyone,
I was hoping someone could give me a quick insight on these specific
messages i see inside /tmp/ap.log on my wireless APS. I can open a support
case but didnt want to bother unless there is something wrong.
It would seem this is a client issue but I wanted to make sure.

I had a user get disconnected from the wifi and could get back on for about
a minute. Here are the only logs I see relevant to the disconnect.

Oct 31 16:19:44 kernel:
ieee80211_node.c:2588-ieee80211_timeout_stations()-Send DEAUTH to
7C:D1:C3:E5:01:8D reason=2 aid=49154 refcnt=19
Oct 31 16:19:44 kernel:
ieee80211_node.c:3152-ieee80211_node_leave()-7C:D1:C3:E5:01:8D station with
aid 2 leaves (refcnt 20)
Oct 31 17:01:02 kernel:
ieee80211_node.c:3152-ieee80211_node_leave()-7C:D1:C3:E5:01:8D station with
aid 3 leaves (refcnt 3)
Oct 31 17:04:51 kernel:
ieee80211_node.c:2588-ieee80211_timeout_stations()-Send DEAUTH to
7C:D1:C3:E5:01:8D reason=2 aid=49155 refcnt=3
Oct 31 17:04:51 kernel:
ieee80211_node.c:3152-ieee80211_node_leave()-7C:D1:C3:E5:01:8D station with
aid 3 leaves (refcnt 4)
Oct 31 17:58:43 kernel:
ieee80211_node.c:3152-ieee80211_node_leave()-7C:D1:C3:E5:01:8D station with
aid 4 leaves (refcnt 843)

running 8.21 firmware.

Thanks
Aaron
*Aaron Russell*

*Unix System Administrator
Simmons College, Technology
300 The Fenway, Boston, MA 02115-5898
phone: 617-521-2461*

---
To unsubscribe from enterasys, send email to ***@unc.edu with the body: unsubscribe enterasys gneu-***@gmane.org
Yury Ostrovsky
2013-10-31 19:35:25 UTC
Permalink
Hi Aaron,
Those messages look ok, just standard deassosiations.
Do you have any particular issues with client(s)?
Post by Aaron Russell
Hello everyone,
I was hoping someone could give me a quick insight on these specific messages i see inside /tmp/ap.log on my wireless APS. I can open a support case but didnt want to bother unless there is something wrong.
It would seem this is a client issue but I wanted to make sure.
I had a user get disconnected from the wifi and could get back on for about a minute. Here are the only logs I see relevant to the disconnect.
Oct 31 16:19:44 kernel: ieee80211_node.c:2588-ieee80211_timeout_stations()-Send DEAUTH to 7C:D1:C3:E5:01:8D reason=2 aid=49154 refcnt=19
Oct 31 16:19:44 kernel: ieee80211_node.c:3152-ieee80211_node_leave()-7C:D1:C3:E5:01:8D station with aid 2 leaves (refcnt 20)
Oct 31 17:01:02 kernel: ieee80211_node.c:3152-ieee80211_node_leave()-7C:D1:C3:E5:01:8D station with aid 3 leaves (refcnt 3)
Oct 31 17:04:51 kernel: ieee80211_node.c:2588-ieee80211_timeout_stations()-Send DEAUTH to 7C:D1:C3:E5:01:8D reason=2 aid=49155 refcnt=3
Oct 31 17:04:51 kernel: ieee80211_node.c:3152-ieee80211_node_leave()-7C:D1:C3:E5:01:8D station with aid 3 leaves (refcnt 4)
Oct 31 17:58:43 kernel: ieee80211_node.c:3152-ieee80211_node_leave()-7C:D1:C3:E5:01:8D station with aid 4 leaves (refcnt 843)
running 8.21 firmware.
Thanks
Aaron
Aaron Russell
Unix System Administrator
Simmons College, Technology
300 The Fenway, Boston, MA 02115-5898
phone: 617-521-2461
---
To unsubscribe from enterasys, send email to ***@unc.edu with the body: unsubscribe enterasys gneu-***@gmane.org
Aaron Russell
2013-10-31 19:39:15 UTC
Permalink
So only this one person so far. No one else has reported it. It seems to
happen to him once a week but I can never replicate it.

If those looks normal I think its a local client issue on his Mac air.

*Aaron Russell*

*Unix System Administrator
Simmons College, Technology
300 The Fenway, Boston, MA 02115-5898
phone: 617-521-2461*
Post by Yury Ostrovsky
Hi Aaron,
Those messages look ok, just standard deassosiations.
Do you have any particular issues with client(s)?
Hello everyone,
I was hoping someone could give me a quick insight on these specific
messages i see inside /tmp/ap.log on my wireless APS. I can open a support
case but didnt want to bother unless there is something wrong.
It would seem this is a client issue but I wanted to make sure.
I had a user get disconnected from the wifi and could get back on for
about a minute. Here are the only logs I see relevant to the disconnect.
ieee80211_node.c:2588-ieee80211_timeout_stations()-Send DEAUTH to
7C:D1:C3:E5:01:8D reason=2 aid=49154 refcnt=19
ieee80211_node.c:3152-ieee80211_node_leave()-7C:D1:C3:E5:01:8D station with
aid 2 leaves (refcnt 20)
ieee80211_node.c:3152-ieee80211_node_leave()-7C:D1:C3:E5:01:8D station with
aid 3 leaves (refcnt 3)
ieee80211_node.c:2588-ieee80211_timeout_stations()-Send DEAUTH to
7C:D1:C3:E5:01:8D reason=2 aid=49155 refcnt=3
ieee80211_node.c:3152-ieee80211_node_leave()-7C:D1:C3:E5:01:8D station with
aid 3 leaves (refcnt 4)
ieee80211_node.c:3152-ieee80211_node_leave()-7C:D1:C3:E5:01:8D station with
aid 4 leaves (refcnt 843)
running 8.21 firmware.
Thanks
Aaron
*Aaron Russell*
*Unix System Administrator
Simmons College, Technology
300 The Fenway, Boston, MA 02115-5898
phone: 617-521-2461*
---
To unsubscribe from enterasys, send email to ***@unc.edu with the body: unsubscribe enterasys gneu-***@gmane.org
Jeff Crawford
2013-10-31 19:50:29 UTC
Permalink
I see similar entries in my logs. I do not know what they mean other than the user is being deauthenticated possibly because it has hit some timeout.

802.1x or WPA auth? There are a lot of different options in play depending on the security. What is your 802.1x reauth set at? What is your re-key interval?

Did the client fall asleep or did some other energy saving mechanism kick in between 17:01:02 and 17:04:51?

What model of MBA? What OS? Patched? There are many known issues with various versions of Mac OS.

Jeff
So only this one person so far. No one else has reported it. It seems to happen to him once a week but I can never replicate it.

If those looks normal I think its a local client issue on his Mac air.

Aaron Russell

Unix System Administrator
Simmons College, Technology
300 The Fenway, Boston, MA 02115-5898
phone: 617-521-2461


On Thu, Oct 31, 2013 at 3:35 PM, Yury Ostrovsky <***@enterasys.com> wrote:


Hi Aaron,
Those messages look ok, just standard deassosiations.
Do you have any particular issues with client(s)?

On Oct 31, 2013, at 13:46, Aaron Russell <***@simmons.edu> wrote:



Hello everyone,
I was hoping someone could give me a quick insight on these specific messages i see inside /tmp/ap.log on my wireless APS. I can open a support case but didnt want to bother unless there is something wrong.
It would seem this is a client issue but I wanted to make sure.

I had a user get disconnected from the wifi and could get back on for about a minute. Here are the only logs I see relevant to the disconnect.

Oct 31 16:19:44 kernel: ieee80211_node.c:2588-ieee80211_timeout_stations()-Send DEAUTH to 7C:D1:C3:E5:01:8D reason=2 aid=49154 refcnt=19
Oct 31 16:19:44 kernel: ieee80211_node.c:3152-ieee80211_node_leave()-7C:D1:C3:E5:01:8D station with aid 2 leaves (refcnt 20)
Oct 31 17:01:02 kernel: ieee80211_node.c:3152-ieee80211_node_leave()-7C:D1:C3:E5:01:8D station with aid 3 leaves (refcnt 3)
Oct 31 17:04:51 kernel: ieee80211_node.c:2588-ieee80211_timeout_stations()-Send DEAUTH to 7C:D1:C3:E5:01:8D reason=2 aid=49155 refcnt=3
Oct 31 17:04:51 kernel: ieee80211_node.c:3152-ieee80211_node_leave()-7C:D1:C3:E5:01:8D station with aid 3 leaves (refcnt 4)
Oct 31 17:58:43 kernel: ieee80211_node.c:3152-ieee80211_node_leave()-7C:D1:C3:E5:01:8D station with aid 4 leaves (refcnt 843)

running 8.21 firmware.

Thanks
Aaron
Aaron Russell

Unix System Administrator
Simmons College, Technology
300 The Fenway, Boston, MA 02115-5898
phone: 617-521-2461

--To unsubscribe from enterasys, send email to ***@unc.edu with the body: unsubscribe enterasys ***@enterasys.com

--To unsubscribe from enterasys, send email to ***@unc.edu with the body: unsubscribe enterasys ***@simmons.edu




--To unsubscribe from enterasys, send email to ***@unc.edu with the body: unsubscribe enterasys ***@egrps.org


---
To unsubscribe from enterasys, send email to ***@unc.edu with the body: unsubscribe enterasys gneu-***@gmane.org
Loading...