Session Timeout and User Idle Timeout

Session Timeout:

Force the client to re-authenticate when the timer expires. This is not related to the client’s traffic.

 apfMsExpireCallback (apf_ms.c:645) Expiring Mobile!
 apfMsExpireMobileStation (apf_ms.c:7846) Changing state for mobile yy:yy:yy:yy:yy:yy on AP xx:xx:xx:xx:xx:xx from Associated to Disassociated
 Scheduling deletion of Mobile Station:  (callerId: 45) in 10 seconds
 apfMsExpireCallback (apf_ms.c:645) Expiring Mobile!
 Succesfully freed AID 1, slot 0 on AP xx:xx:xx:xx:xx:xx, #client on this slot 0
 apfSendDisAssocMsgDebug (apf_80211.c:3735) Changing state for mobile yy:yy:yy:yy:yy:yy on AP xx:xx:xx:xx:xx:xx from Disassociated to Disassociated
 Sent Disassociate to mobile on AP xx:xx:xx:xx:xx:xx-0 on BSSID zz:zz:zz:zz:zz:zz(reason 1, caller apf_ms.c:7930)
 Setting active key cache index 8 ---> 8
 Deleting the PMK cache when de-authenticating the client.
 Global PMK Cache deletion failed.
 Sent Deauthenticate to mobile on BSSID zz:zz:zz:zz:zz:zz slot 0(caller apf_ms.c:7938)
 apfMsExpireMobileStation (apf_ms.c:7996) Changing state for mobile yy:yy:yy:yy:yy:yy on AP xx:xx:xx:xx:xx:xx from Disassociated to Idle  

User Idle Timeout:

Remove the client after it has been inactive for more than the threshold time. We can also set the traffic threshold. If the traffic threshold is not reached within the specified time, the client will be deleted.

Received DELETE mobile, reasonCode MN_IDLE_TIMEOUT, deleteReason 4 from AP xx:xx:xx:xx:xx:xx, slot 0 …cleaning up mscb 
 Succesfully freed AID 1, slot 0 on AP xx:xx:xx:xx:xx:xx, #client on this slot 0
 apfMsDeleteByMscb Scheduling mobile for deletion with deleteReason 4, reasonCode 4
 Scheduling deletion of Mobile Station:  (callerId: 30) in 1 seconds
 apfMsExpireCallback (apf_ms.c:645) Expiring Mobile!
 apfSendDisAssocMsgDebug (apf_80211.c:3735) Changing state for mobile yy:yy:yy:yy:yy:yy on AP xx:xx:xx:xx:xx:xx from Associated to Disassociated
 Sent Disassociate to mobile on AP xx:xx:xx:xx:xx:xx-0 on BSSID zz:zz:zz:zz:zz:zz(reason 4, caller apf_ms.c:7819)
 Client already in disassociated state, not sending disassociation
 Setting active key cache index 8 ---> 8
 Deleting the PMK cache when de-authenticating the client.
 Global PMK Cache deletion failed.
 Sent Deauthenticate to mobile on BSSID zz:zz:zz:zz:zz:zz slot 0(caller apf_ms.c:7938)
 apfMsExpireMobileStation (apf_ms.c:7996) Changing state for mobile yy:yy:yy:yy:yy:yy on AP xx:xx:xx:xx:xx:xx from Disassociated to Idle

Interestingly, User Idle Timeout is timed by the AP and resets the timer every time RX/TX is received. When the timer expires, the WLC will be notified.

To view the User Idle Timeout timer, we can use the “show controllers dot11Radio 0/1 client” command. In the following example, we can see that Age is 79. We can see the changes of Age by executing the command multiple times.

AP1700#show controllers dot11Radio 0 client 
 ---Clients 0  AID VLAN Status:S/I/B/A Age TxQ-R(A) Mode Enc Key  Rate  Mask Tx   Rx             BVI   Split-ACL Client-ACL WebAuth-ACL L2-ACL
 aaaa.aaaa.aaaa    1    2 30 40144 000 0FE 79   0-0 (0) 32B0 000 0-0  1EFFFFFF00000000000  010D 10C - - - -    - 
                  RxPkts KBytes  Dup Dec Mic Txc  TxPkts  KBytes  Retry RSSI SNR Fail BAfail
  aaaa.aaaa.aaaa       182     16    9   0   0   0       36       3     93   50  40    0    0

Updated March 29, 2022
On the COS AP, we can confirm the idle_counter with show controllers dot11Radio <0/1> client <client MAC address>.

HF-AP9120AXE#
HF-AP9120AXE#show controllers dot11Radio 1 client D0:37:45:87:8F:3A
              mac radio vap aid state encr Maxrate Assoc Cap is_wgb_wired      wgb_mac_addr
D0:37:45:87:8F:3A     1   4   1   FWD OPEN MCS91SS   VHT VHT        false 00:00:00:00:00:00
Configured rates for client D0:37:45:87:8F:3A
Legacy Rates(Mbps): 6 9 12 18 24 36 48 54 
HT Rates(MCS):M0 M1 M2 M3 M4 M5 M6 M7 
VHT Rates: 1SS:M0-9 

HT:yes     VHT:yes     HE:no     40MHz:yes     80MHz:no     80+80MHz:no     160MHz:no     
11w:no     MFP:no     11h:yes     session_timeout: 1760     encrypt_policy: 1
_wmm_enabled:yes     qos_capable:yes     WME(11e):no     WMM_MIXED_MODE:no     
short_preamble:no     short_slot_time:no     short_hdr:no     SM_dyn:yes     
short_GI_20M:yes     short_GI_40M:yes     short_GI_80M:yes     LDPC:no     AMSDU:yes     AMSDU_long:yes     
su_mimo_capable:yes     mu_mimo_capable:no     is_wgb_wired:no     is_wgb:no     

Additional info for client D0:37:45:87:8F:3A
RSSI: -58
SNR: 33
PS  : Legacy (Awake)
Tx Rate: 81000 Kbps
Rx Rate: 200000 Kbps
VHT_TXMAP: 65450
CCX Ver: 0
Rx Key-Index Errs: 0

Statistics for client D0:37:45:87:8F:3A
              mac   intf TxData TxMgmt TxUC TxBytes TxFail TxDcrd TxCumRetries RxData RxMgmt RxBytes RxErr                    TxRt(Mbps)                   RxRt(Mbps) idle_counter stats_ago expiration
D0:37:45:87:8F:3A apr1v4     53      2   53   14578      0      0            1    141      1   16523     0 VHT-40,1SS,MCS8,SGI,STBC(180) VHT-40,1SS,MCS0,SGIRU_26(15)          295  6.998000       1760

Per TID packet statistics for client D0:37:45:87:8F:3A
Priority Rx Pkts Tx Pkts Rx(last 5 s) Tx (last 5 s)
       0     141      42            7             2
       1       0       0            0             0
       2       0       0            0             0
       3       0       0            0             0
       4       0       0            0             0
       5       0       0            0             0
       6       0      11            0             0
       7       0       0            0             0

 Rate Statistics:
Rate-Index    Rx-Pkts    Tx-Pkts Tx-Retries
         0         37          0          0
         2         29          2          1
         3         15          0          0
         4         12         46          0
         5          2          1          0
         6          2          1          0
         7         16          1          0
         8         21          2          0
         9         15          1          0
webauth done: true
Pre-WebAuth ACLs:
  IPv4 Pre-WebAuth ACL: WA-sec-10.106.40.224    
Post-Auth ACLs:
Acl name Quota Bytes left In bytes Out bytes In pkts Out pkts Drops-in Drops-out
iPSK TAG: \<0000000000000000>
              MAC Allow HIT iPSK tag
D0:37:45:87:8F:3A  true   0      \<>
HF-AP9120AXE# 

References

Cisco Wireless Controller Configuration Guide, Release 8.3

2 Responses

  1. Cassy says:

    I think it’ll be better if you could post related logs in txt format

  2. Cassy says:

    AP2802#show controllers dot11Radio 0 client <<<didn't confirm the "Age" info

    AP3600#show dot11 statistics client-traffic <<< sometimes this command may help you out

Leave a Reply to Cassy Cancel reply

Your email address will not be published.