某局点部分手机关联AP频繁重复上下线

发布时间:  2016-04-08 浏览次数:  387 下载次数:  0
问题描述
某局点WLAN网络建成后,运行过程中发现部分安卓手机关联AP频繁重复上下线,网络时通时断的
处理过程

第一步:通过AC上查看用户下线原因

[S12708-CSS-diagnose]dis aaa offline-record mac-address a8a6-68d2-5cc5
  ------------------------------------------------------------------------------
  User name             : a8a668d25cc5
  Domain name           :
  User MAC              : a8a6-68d2-5cc5
  User access type      : None
  User access interface : Wlan-Dbss1:177
  Qinq vlan/User vlan   : 0/772
  User IP address       : 192.168.33.184
  User ID               : 35144
  User login time       : 2016/04/08 16:41:44
  User offline time     : 2016/04/08 16:43:50
  User offline reason   : STA disassociation
  ------------------------------------------------------------------------------
  Are you sure to display some information?(y/n)[y]:y

通过以上信息显示用户下线原因为STA 去关联,但是手机没有手动点击相关去关联,需要进一步查看STA与AP之间的交互过程信息。

第二步:通过有问题的终端mac查询关联的AP信息

<S12708-CSS>dis station assoc-info sta a8a6-68d2-5cc5
  ------------------------------------------------------------------------------
  Station mac-address                       : a8a6-68d2-5cc5
  Station ip-address                        : 192.168.33.184
  Station gateway                           : 192.168.33.1
  Associated SSID                           : GRMC-External
  Station online time(ddd:hh:mm:ss)         : 000:00:01:41
  The upstream SNR(dB)                      : 60.0
  Station connect rate(Mbps)                : 42
  Station connect channel                   : 1
  Station inactivity time(ddd:hh:mm:ss)     : 000:00:00:00
  Station current state
    Authorized for data transfer            : YES
    Qos enabled                             : YES
    ERP enabled                             : YES
    HT rates enabled                        : YES
    Power save mode enabled                 : YES
    Auth reference held                     : No
    UAPSD enabled                           : No
    UAPSD triggerable                       : No
    UAPSD SP in progress                    : No
    This is an ATH node                     : No
    WDS workaround req                      : No
    WDS link                                : No
  Station's HT capability                   : P
  Station ERP element                       : 0
  Station capabilities                      : ES
  Station's RSSI(dBm)                       : -43
  Station's Noise(dBm)                      : -103
  Station's radio mode                      : 11n
  Station's AP ID                           : 32
  Station's Radio ID                        : 0
  Station's Authentication Method           : OPEN
  Station's Cipher Type                     : NO CIPHER
  Station's User Name                       : a8a668d25cc5
  Station's Vlan ID                         : 772
  Station's Channel Band-width              : 20MHz
  Station's asso BSSID                      : a4dc-bef2-5541
  Station's state                           : Asso with auth
  Station's Qos Mode                        : WMM
  Station's HT Mode                         : HT20
  Station's MCS value                       : 7
  Station's Short GI                        : nonsupport
  Station's roam state                      : Yes
  ------------------------------------------------------------------------------

第三步:获取AP ID 后查询该AP的IP地址信息

<S12708-CSS>dis ap-run-info id 32
  AP 32 run information:
  ------------------------------------------------------------------------------
  Software version: V200R005C10SPCa00
  Hardware version: Ver.C
  BIOS version: 223
  Country code: CN
  CPU type: AR9344
  CPU frequency: 480 MHZ
  Memory type: H5PS5162GFR-S6C&1
  AP system software description: AP6010DN-AGN:V200R005C10SPCa00
  AP system hardware description: AP6010DN-AGN:Ver.C
  AP manufacture: Huawei Technologies Co., Ltd.
  AP software name: Huawei Access Point Software
  AP software vendor: Huawei Technologies Co., Ltd.
  AP online time: 773239 S
  AP bom code: 000
  Ip address: 192.168.252.233
  Ip mask: 255.255.255.0
  Gateway ip: 192.168.252.1
  DNS server: 0.0.0.0
  Memory size: 128 MB
  Flash size: 32 MB
  Run time: 773378 S
  GigabitEthernet port number : 0
    Port speed: 100 Mbps
    Port speed mode: auto
    Port duplex: full
    Port duplex mode: auto
    Port state: up

第四步:通过stelnet登陆AP

[S12708-CSS]stelnet 192.168.252.233
Please input the username:admin
Trying 192.168.252.233 ...
Press CTRL+K to abort
Connected to 192.168.252.233 ...
Warning: The negotiated encryption or digest algorithm is insecure. Using a security algorithm (AES256-CTR,SHA2-256) is
recommended.
The server is not authenticated. Continue to access it? [Y/N] :y
Warning: The server information will not be saved, because the number of SSH servers reached the upper limit (20).
Enter password:

Info: You are advised to change the password to ensure security.

第五步:在AP上trace 终端详细上线过程

[SW-S-2F-AP2]diagnose
Now you enter a diagnostic command view for developer's testing, some commands
may affect operation by wrong use, please carefully use it with HUAWEI
engineer's direction.
[SW-S-2F-AP2-diagnose]station-trace probe station A8A6-68D2-5CC5
Apr  8 2016 16:43:31.120.3+00:00 SW-S-2F-AP2 WSRV/7/BTRACE:[BTRACE][WLAN_AP][A8A6-68D2-5CC5]:disassociation request:
    radio id   :0
    wlan id    :1
    result     :0
    reason     :10

通过以上显示 原因号:10,为低速率用户下线

第六步:查看低速率保护配置

ap 32 radio 0
  radio-profile id 1
  service-set id 62 wlan 1               
  service-set id 72 wlan 2

radio-profile name radio id 1
  sta-access-limit signal-strength enable
  sta-forced-offline signal-strength switch enable
  sta-forced-offline rate switch enable

检查配置发现,配置了低速率用户强制下线的功能,即检测到我们低速率报文占总报文超过20%时,强制用户下线,现网中删除该配置后解决。

根因

 raido 策略模板中配置了sta-forced-offline rate switch enable配置了低速率用户强制下线的功能,即检测到我们低速率报文占总报文超过20%时,强制用户下线,现网中删除该配置后解决。

解决方案

去使能强制低速率用户下线功能命令如下:

radio-profile name radio id 1

 undo sta-forced-offline rate switch enable

建议与总结



END