Cisco Aironet最后一次活动计数器似乎无法工作，导致客户频繁下降

Question

我目前的设置：

• 两个SSID广播
• SSID 1 (airlan)配置为dot1X和动态vlan关联
• 带有PSK和静态vlan的SSID 2 (prv)

我已经认识到，每隔60年代，第二个SSID上的设备就会与AP断开连接。经过一些调查，我发现，60年代是非在线设备的默认活动超时。增加这个超时会增加它们按预期断开连接的间隔。这似乎解决了一些设备在几个小时或几天后停止重新连接的问题。但我不认为这是一个理想的解决方案。

连接到第一个SSID (airlan)的设备从来没有这个问题，通过比较"show dot11 association xxxx.xxxx.xxx“提供的信息可以发现，在第二个SSID上，”最后的活动“计数器会不断增加，而在第一个计数器上，当活动发生时会重置。AP似乎不识别活动(无论Cisco将活动定义为什么)。

这是一个固件错误，还是我可以做一些不同的事情来解决这种情况？

硬件信息

(我知道，有两张更新的图像，但我目前无法访问)

air4#show hardware
Cisco IOS Software, C1600 Software (AP1G2-K9W7-M), Version 15.2(2)JB, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2012 by Cisco Systems, Inc.
Compiled Tue 11-Dec-12 04:30 by prod_rel_team

ROM: Bootstrap program is C1600 boot loader
BOOTLDR: C1600 Boot Loader (AP1G2-BOOT-M) LoaderVersion 15.2(2)JAX, RELEASE SOFTWARE (fc1)

air4 uptime is 1 day, 7 hours, 16 minutes
System returned to ROM by power-on
System restarted at 14:11:45 MET-DST Fri Sep 20 2013
System image file is "flash:/ap1g2-k9w7-mx.152-2.JB/ap1g2-k9w7-mx.152-2.JB"
Last reload reason: 

cisco AIR-SAP1602E-E-K9    (PowerPC) processor (revision A0) with 98294K/32768K bytes of memory.
Processor board ID FGL1710ZCBU
PowerPC CPU at 533Mhz, revision number 0x2151
Last reset from power-on
1 Gigabit Ethernet interface
2 802.11 Radios

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 00:06:F6:21:XX:XX
Part Number                          : 73-14508-04
PCA Assembly Number                  : 000-00000-00
PCA Revision Number                  : 
PCB Serial Number                    : 
Top Assembly Part Number             : -01
Top Assembly Serial Number           : 
Top Revision Number                  : 
Product/Model Number                 : AIR-SAP1602E-E-K9   

运行Config的

Current configuration : 5150 bytes aaa session-id common clock timezone met 1 0 clock summer-time MET-DST recurring last Sun Mar 2:00 last Sun Oct 3:00 no ip igmp snooping ip cef ip name-server 10.0.1.254 ! ! dot11 syslog dot11 activity-timeout unknown default 3000 ! dot11 ssid airlan vlan 5 authentication open eap eap_methods authentication key-management wpa version 2 accounting eap_acct_methods mbssid guest-mode ! dot11 ssid prv vlan 60 authentication open authentication key-management wpa version 2 mbssid guest-mode wpa-psk ascii 7 070E274A4B07125503080E1C163C ! ! dot11 network-map dot11 arp-cache optional crypto pki token default removal timeout 0 ! ! username Cisco password 7 05280F1C2243 ! ! ip ssh version 2 bridge irb ! ! ! interface Dot11Radio0 no ip address ! encryption vlan 6 mode ciphers aes-ccm ! encryption vlan 5 mode ciphers aes-ccm ! encryption vlan 4 mode ciphers aes-ccm ! encryption vlan 60 mode ciphers aes-ccm ! encryption mode ciphers aes-ccm ! ssid airlan ! ssid prv ! countermeasure tkip hold-time 0 antenna gain 0 stbc beamform ofdm mbssid no preamble-short station-role root no dot11 extension aironet world-mode dot11d country-code DE both ! interface Dot11Radio0.1 encapsulation dot1Q 1 native bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 spanning-disabled bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding ! interface Dot11Radio0.4 encapsulation dot1Q 4 bridge-group 4 bridge-group 4 subscriber-loop-control bridge-group 4 spanning-disabled bridge-group 4 block-unknown-source no bridge-group 4 source-learning no bridge-group 4 unicast-flooding ! interface Dot11Radio0.5 encapsulation dot1Q 5 bridge-group 5

Answer 1

尝试：

broadcast-key vlan 1 change 60

对于每个vlans。

(见图：http://www.blueboxmoon.com/wordpress/?p=832)。

我也有类似的问题，思科接入点在独立模式。

更新：

通过以下方式：

Cisco IOS Software, C3500 Software (AP3G1-K9W7-M), Version 15.3(3)JAB, RELEASE SOFTWARE (fc1)

情况似乎好多了。

我也有：

dot11 activity-timeout unknown default 3600 dot11 activity-timeout client default 3600 maximum 3600 dot11 wpa handshake timeout 1000

在一般章节中