Guest Vlan is allowed on all AP ports and outbound as well. These messages get logged as the failure on authentication when looked from a wireless health POV.    What I am also noticing is a lot of roaming even when the client is stationary. Example logs below -   Successful connection to SSID Guest for a minute on access point F01-AP02-Lobby, and then the client roamed to access point F01-AP05.   Roamed from access point F01-AP02-Lobby then had a successful connection to SSID  Guest for a few seconds on access point F01-AP05, and then the client roamed.   Successful connection to SSID Guest for a few seconds on access point F01-AP02-Lobby. Roamed from access point F01-AP02-Lobby then had a successful connection to SSID  Guest for a minute on access point F02-AP01, and then the client roamed to access point F02-AP18.   Roamed from access point F02-AP01 then had a successful connection to SSID Guest for a few seconds on access point F02-AP18, and then the client roamed to access point F02-AP13. ... View more