Дополнение.
Ситуация была повторена путем откручивания антенн. Nov 20 12:25:54: %DOT11-6-ASSOC: Interface Dot11Radio0, Station island 0013.0270.7475 Associated KEY_MGMT[WPA PSK]
Nov 20 12:27:17: %SEC-6-IPACCESSLOGP: list 101 permitted tcp 192.168.33.41(63873) -> 192.168.37.39(28005), 1 packet
Nov 20 12:29:20: %SEC-6-IPACCESSLOGP: list 101 permitted tcp 192.168.33.34(49266) -> 192.168.37.38(35278), 1 packet
Nov 20 12:30:11: %SEC-6-IPACCESSLOGP: list 101 permitted tcp 192.168.33.49(52077) -> 192.168.37.38(35278), 2 packets
Nov 20 12:30:23: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 0013.ce1d.999a Associated KEY_MGMT[WPA PSK]
Nov 20 12:33:11: %SEC-6-IPACCESSLOGP: list 101 permitted tcp 192.168.33.41(63873) -> 192.168.37.39(28005), 2 packets
Nov 20 12:35:11: %SEC-6-IPACCESSLOGP: list 101 permitted tcp 192.168.33.34(49266) -> 192.168.37.38(35278), 2 packets
Nov 20 13:04:06: %DOT11-4-MAXRETRIES: Packet to client 0019.5b7b.f2ae reached max retries, removing the client
Nov 20 13:04:06: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0019.5b7b.f2ae Reason: Previous authentication no longer valid
Nov 20 13:04:35: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 0019.5b7b.f2ae Associated KEY_MGMT[WPA PSK]
Nov 20 13:04:43: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0013.0270.7475
Nov 20 13:04:49: %DOT11-4-MAXRETRIES: Packet to client 0013.0270.7475 reached max retries, removing the client
Nov 20 13:04:50: %DOT11-4-MAXRETRIES: Packet to client 0013.0270.7475 reached max retries, removing the client
Nov 20 13:05:09: %DOT11-4-MAXRETRIES: Packet to client 0013.0270.7475 reached max retries, removing the client
Nov 20 13:05:13: %DOT11-4-MAXRETRIES: Packet to client 0013.0270.7475 reached max retries, removing the client
Nov 20 13:05:16: %DOT11-4-MAXRETRIES: Packet to client 0013.0270.7475 reached max retries, removing the client
Nov 20 13:08:12: %DOT11-4-MAXRETRIES: Packet to client 0013.0270.7475 reached max retries, removing the client
Nov 20 13:09:03: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0017.9a81.3322 Reason: Previous authentication no longer valid
Nov 20 13:09:25: %DOT11-6-ASSOC: Interface Dot11Radio0, Station island 0013.0270.7475 Associated KEY_MGMT[WPA PSK]
Nov 20 13:09:33: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 0017.9a81.3322 Associated KEY_MGMT[WPA PSK]
Nov 20 13:09:56: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0017.9a81.3322 Reason: Disassociated because sending station is leaving (or has left) BSS
Nov 20 13:10:29: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 0017.9a81.3322 Associated KEY_MGMT[WPA PSK]
Nov 20 13:10:33: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0017.9a81.3322 Reason: Disassociated because sending station is leaving (or has left) BSS
Nov 20 13:11:55: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 0017.9a81.3322 Associated KEY_MGMT[WPA PSK]
Nov 20 13:14:19: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 0017.9a77.28b6 Associated KEY_MGMT[WPA PSK]
Nov 20 13:15:58: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0013.ce1d.999a Reason: Disassociated because sending station is leaving (or has left) BSS
Nov 20 13:16:06: %SYS-5-RELOAD: Reload requested by rlevitsky on vty0 (192.168.33.65). Reload Reason: Reload Command.
*Nov 20 13:17:06: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 0017.9a77.28b6 Associated KEY_MGMT[WPA PSK]
*Nov 20 13:17:19: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0016.e3a3.5518 Reason: Disassociated because sending station is leaving (or has left) BSS
*Nov 20 13:17:20: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 0016.e3a3.5518 Associated KEY_MGMT[WPA PSK]
Что интересно, отсутствует запись о 0016.e3a3.5518, хотя клиент утверждает, что производил пересоединение как минимум один раз. В то время , пока были сняты антенны, производился "dot11 do0 linktest target 0016.e3a3.5518", который всегда выдавал успешный результат, пусть и со сниженной скоростью.
Однако, в результате все равно машины от сети отключились.
WiFi сокнфигурирован как bridge, вот конфиг:
!
interface Dot11Radio0
no ip address
!
encryption vlan 1 mode ciphers tkip
!
ssid SperaSoft :: www.sperasoft.com
vlan 1
authentication open
authentication key-management wpa
guest-mode
wpa-psk ascii 7 10...1C
!
speed basic-1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
channel 2442
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no snmp trap link-status
no cdp enable
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
no ip address
ip tcp adjust-mss 1452
bridge-group 1
!
interface BVI1
ip address 192.168.33.254 255.255.255.0
ip access-group 101 out
no ip redirects
ip nat inside
no ip virtual-reassembly
ip tcp adjust-mss 1452
!