Session Timeout and User Idle Timeout
Session Timeout:
Force the client to re-authenticate when the timer expires. This is not related to the client’s traffic.
apfMsExpireCallback (apf_ms.c:645) Expiring Mobile! apfMsExpireMobileStation (apf_ms.c:7846) Changing state for mobile yy:yy:yy:yy:yy:yy on AP xx:xx:xx:xx:xx:xx from Associated to Disassociated Scheduling deletion of Mobile Station: (callerId: 45) in 10 seconds apfMsExpireCallback (apf_ms.c:645) Expiring Mobile! Succesfully freed AID 1, slot 0 on AP xx:xx:xx:xx:xx:xx, #client on this slot 0 apfSendDisAssocMsgDebug (apf_80211.c:3735) Changing state for mobile yy:yy:yy:yy:yy:yy on AP xx:xx:xx:xx:xx:xx from Disassociated to Disassociated Sent Disassociate to mobile on AP xx:xx:xx:xx:xx:xx-0 on BSSID zz:zz:zz:zz:zz:zz(reason 1, caller apf_ms.c:7930) Setting active key cache index 8 ---> 8 Deleting the PMK cache when de-authenticating the client. Global PMK Cache deletion failed. Sent Deauthenticate to mobile on BSSID zz:zz:zz:zz:zz:zz slot 0(caller apf_ms.c:7938) apfMsExpireMobileStation (apf_ms.c:7996) Changing state for mobile yy:yy:yy:yy:yy:yy on AP xx:xx:xx:xx:xx:xx from Disassociated to Idle
User Idle Timeout:
Remove the client after it has been inactive for more than the threshold time. We can also set the traffic threshold. If the traffic threshold is not reached within the specified time, the client will be deleted.
Received DELETE mobile, reasonCode MN_IDLE_TIMEOUT, deleteReason 4 from AP xx:xx:xx:xx:xx:xx, slot 0 …cleaning up mscb Succesfully freed AID 1, slot 0 on AP xx:xx:xx:xx:xx:xx, #client on this slot 0 apfMsDeleteByMscb Scheduling mobile for deletion with deleteReason 4, reasonCode 4 Scheduling deletion of Mobile Station: (callerId: 30) in 1 seconds apfMsExpireCallback (apf_ms.c:645) Expiring Mobile! apfSendDisAssocMsgDebug (apf_80211.c:3735) Changing state for mobile yy:yy:yy:yy:yy:yy on AP xx:xx:xx:xx:xx:xx from Associated to Disassociated Sent Disassociate to mobile on AP xx:xx:xx:xx:xx:xx-0 on BSSID zz:zz:zz:zz:zz:zz(reason 4, caller apf_ms.c:7819) Client already in disassociated state, not sending disassociation Setting active key cache index 8 ---> 8 Deleting the PMK cache when de-authenticating the client. Global PMK Cache deletion failed. Sent Deauthenticate to mobile on BSSID zz:zz:zz:zz:zz:zz slot 0(caller apf_ms.c:7938) apfMsExpireMobileStation (apf_ms.c:7996) Changing state for mobile yy:yy:yy:yy:yy:yy on AP xx:xx:xx:xx:xx:xx from Disassociated to Idle
Interestingly, User Idle Timeout is timed by the AP and resets the timer every time RX/TX is received. When the timer expires, the WLC will be notified.
To view the User Idle Timeout timer, we can use the “show controllers dot11Radio 0/1 client” command. In the following example, we can see that Age is 79. We can see the changes of Age by executing the command multiple times.
AP1700#show controllers dot11Radio 0 client ---Clients 0 AID VLAN Status:S/I/B/A Age TxQ-R(A) Mode Enc Key Rate Mask Tx Rx BVI Split-ACL Client-ACL WebAuth-ACL L2-ACL aaaa.aaaa.aaaa 1 2 30 40144 000 0FE 79 0-0 (0) 32B0 000 0-0 1EFFFFFF00000000000 010D 10C - - - - - RxPkts KBytes Dup Dec Mic Txc TxPkts KBytes Retry RSSI SNR Fail BAfail aaaa.aaaa.aaaa 182 16 9 0 0 0 36 3 93 50 40 0 0
Updated March 29, 2022
On the COS AP, we can confirm the idle_counter with show controllers dot11Radio <0/1> client <client MAC address>
.
HF-AP9120AXE# HF-AP9120AXE#show controllers dot11Radio 1 client D0:37:45:87:8F:3A mac radio vap aid state encr Maxrate Assoc Cap is_wgb_wired wgb_mac_addr D0:37:45:87:8F:3A 1 4 1 FWD OPEN MCS91SS VHT VHT false 00:00:00:00:00:00 Configured rates for client D0:37:45:87:8F:3A Legacy Rates(Mbps): 6 9 12 18 24 36 48 54 HT Rates(MCS):M0 M1 M2 M3 M4 M5 M6 M7 VHT Rates: 1SS:M0-9 HT:yes VHT:yes HE:no 40MHz:yes 80MHz:no 80+80MHz:no 160MHz:no 11w:no MFP:no 11h:yes session_timeout: 1760 encrypt_policy: 1 _wmm_enabled:yes qos_capable:yes WME(11e):no WMM_MIXED_MODE:no short_preamble:no short_slot_time:no short_hdr:no SM_dyn:yes short_GI_20M:yes short_GI_40M:yes short_GI_80M:yes LDPC:no AMSDU:yes AMSDU_long:yes su_mimo_capable:yes mu_mimo_capable:no is_wgb_wired:no is_wgb:no Additional info for client D0:37:45:87:8F:3A RSSI: -58 SNR: 33 PS : Legacy (Awake) Tx Rate: 81000 Kbps Rx Rate: 200000 Kbps VHT_TXMAP: 65450 CCX Ver: 0 Rx Key-Index Errs: 0 Statistics for client D0:37:45:87:8F:3A mac intf TxData TxMgmt TxUC TxBytes TxFail TxDcrd TxCumRetries RxData RxMgmt RxBytes RxErr TxRt(Mbps) RxRt(Mbps) idle_counter stats_ago expiration D0:37:45:87:8F:3A apr1v4 53 2 53 14578 0 0 1 141 1 16523 0 VHT-40,1SS,MCS8,SGI,STBC(180) VHT-40,1SS,MCS0,SGIRU_26(15) 295 6.998000 1760 Per TID packet statistics for client D0:37:45:87:8F:3A Priority Rx Pkts Tx Pkts Rx(last 5 s) Tx (last 5 s) 0 141 42 7 2 1 0 0 0 0 2 0 0 0 0 3 0 0 0 0 4 0 0 0 0 5 0 0 0 0 6 0 11 0 0 7 0 0 0 0 Rate Statistics: Rate-Index Rx-Pkts Tx-Pkts Tx-Retries 0 37 0 0 2 29 2 1 3 15 0 0 4 12 46 0 5 2 1 0 6 2 1 0 7 16 1 0 8 21 2 0 9 15 1 0 webauth done: true Pre-WebAuth ACLs: IPv4 Pre-WebAuth ACL: WA-sec-10.106.40.224 Post-Auth ACLs: Acl name Quota Bytes left In bytes Out bytes In pkts Out pkts Drops-in Drops-out iPSK TAG: \<0000000000000000> MAC Allow HIT iPSK tag D0:37:45:87:8F:3A true 0 \<> HF-AP9120AXE#
I think it’ll be better if you could post related logs in txt format
AP2802#show controllers dot11Radio 0 client <<<didn't confirm the "Age" info
AP3600#show dot11 statistics client-traffic <<< sometimes this command may help you out