LDAP relogin requests on the splash page when switching AP

[VRB]

We are encountering random LDAP password relogin requests on the splash page when switching to a different access point. We have a 90-day password expiry setup. We started to notice this last year. Anyone experiencing this?

[RWelch]

Does your network infrastructure support roaming, so that users can seamlessly switch between access points without being forced to re-authenticate?  Perhaps your APs are too far apart?  Without more information, hard to speculate.  Does this impact only some or all devices?

I would think the dashboard event logs and Meraki Health Overview would give some better indications.  Does the LDAP log give any errors/indications?  Have you reviwed the splash page authentication settings?

There could be several different factors in the equation above.  What is the AP hardware model, firmware version?

[VRB]

Yes, roaming is supported. It doesn't behave like this before. We have around 1200+ APs.  Scenario is random. Not all deivices are affected so its hard to troubleshoot. Im not sure if during power down or AP restart has an effect, we have also tested this but not all devices were affected so we can not pin point the cause.  We have the latest firmware MR 31.1.6 with random MR33, MR52, MR36, MR44, MR56, MR86 installations. This is a University setup with every classroom installation in multiple buildings.

[RWelch]

Troubleshooting Active Directory Authentication issues with Splash Page using Windows Event Viewer 

[RWelch]

LDAP connection issues. AP wont connect to the server. 

some useful tips perhaps to narrow down the issues you might be experiencing.

[cmr]

You are actually running two different firmware versions, the MR33s and MR52s are running r30, while the others are on r31.  When a client moves from one type to the other it should still work, but might be the cause.  Could that be the case, or are the similar APs physically located together?

[VRB]

Too many APs to troubleshoot.. and its random. We haven't done a detailed test yet. 

[PhilipDAth]

APs communicate roaming information by using broadcasts.  Are all the APs in the same VLAN?  Do you have any switch security features enabled like port isolation?

https://documentation.meraki.com/MR/Wi-Fi_Basics_and_Best_Practices/Roaming_Technologies#Client_Trac...

Can you narrow it down to some specific APs on which it is happening?

[VRB]

Yes, APs are in the same VLAN management. Just take note that our setup had no problems before, just started to notice last year. No other config changes were done in the network.