apfMsConnTask_2: Jan 15 14:24:38.650: [PA] c8:3d:d4:a9:4a:a1 Processing assoc-req station:c8:3d:d4:a9:4a:a1 AP:38:ed:18:c6:e9:40-00 thread:18f35228 *apfMsConnTask_2: Jan 15 14:24:38.650: [PA] c8:3d:d4:a9:4a:a1 Created Acct-Session-ID (5c3ded26/c8:3d:d4:a9:4a:a1/3510905) for the mobile *apfMsConnTask_2: Jan 15 14:24:38.650: [PA] c8:3d:d4:a9:4a:a1 Adding mobile on LWAPP AP 38:ed:18:c6:e9:40(0) *apfMsConnTask_2: Jan 15 14:24:38.650: [PA] c8:3d:d4:a9:4a:a1 Association received from mobile on BSSID 38:ed:18:c6:e9:50 AP SVILWAP1330 *apfMsConnTask_2: Jan 15 14:24:38.650: [PA] c8:3d:d4:a9:4a:a1 Station: C8:3D:D4:A9:4A:A1 11v BSS Transition not enabled on the AP 38:ED:18:C6:E9:40 *apfMsConnTask_2: Jan 15 14:24:38.650: [PA] c8:3d:d4:a9:4a:a1 Global 200 Clients are allowed to AP radio *apfMsConnTask_2: Jan 15 14:24:38.650: [PA] c8:3d:d4:a9:4a:a1 Max Client Trap Threshold: 0 cur: 1 *apfMsConnTask_2: Jan 15 14:24:38.650: [PA] c8:3d:d4:a9:4a:a1 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_2: Jan 15 14:24:38.650: [PA] c8:3d:d4:a9:4a:a1 override for default ap group, marking intgrp NULL *apfMsConnTask_2: Jan 15 14:24:38.650: [PA] c8:3d:d4:a9:4a:a1 Applying Interface(resident-pans) policy on Mobile, role Unassociated. Ms NAC State 0 Quarantine Vlan 0 Access Vlan 0 *apfMsConnTask_2: Jan 15 14:24:38.650: [PA] c8:3d:d4:a9:4a:a1 Re-applying interface policy for client *apfMsConnTask_2: Jan 15 14:24:38.650: [PA] c8:3d:d4:a9:4a:a1 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2710) *apfMsConnTask_2: Jan 15 14:24:38.650: [PA] c8:3d:d4:a9:4a:a1 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2731) *apfMsConnTask_2: Jan 15 14:24:38.650: [PA] c8:3d:d4:a9:4a:a1 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User - 0 *apfMsConnTask_2: Jan 15 14:24:38.650: [PA] c8:3d:d4:a9:4a:a1 In processSsidIE:6329 setting Central switched to TRUE *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] c8:3d:d4:a9:4a:a1 In processSsidIE:6332 apVapId = 5 and Split Acl Id = 65535 *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] c8:3d:d4:a9:4a:a1 Applying site-specific Local Bridging override for station c8:3d:d4:a9:4a:a1 - vapId 17, site 'Test-Group', interface 'resident-pans' *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] c8:3d:d4:a9:4a:a1 Applying Local Bridging Interface Policy for station c8:3d:d4:a9:4a:a1 - vlan 899, interface id 15, interface 'resident-pans' *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] c8:3d:d4:a9:4a:a1 override from ap group, removing intf group from mscb *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] c8:3d:d4:a9:4a:a1 Applying site-specific override for station c8:3d:d4:a9:4a:a1 - vapId 17, site 'Test-Group', interface 'resident-pans' *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] c8:3d:d4:a9:4a:a1 Applying Interface(resident-pans) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 899 *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] c8:3d:d4:a9:4a:a1 Re-applying interface policy for client *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] c8:3d:d4:a9:4a:a1 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2710) *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] c8:3d:d4:a9:4a:a1 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2731) *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] c8:3d:d4:a9:4a:a1 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] c8:3d:d4:a9:4a:a1 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] c8:3d:d4:a9:4a:a1 STA - rates (8): 130 132 139 150 12 18 24 36 0 0 0 0 0 0 0 0 *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] c8:3d:d4:a9:4a:a1 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] c8:3d:d4:a9:4a:a1 STA - rates (12): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] c8:3d:d4:a9:4a:a1 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1 *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] RSNIE in Assoc. Req.: (20) *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] [0016] ac 01 00 00 *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] c8:3d:d4:a9:4a:a1 Processing RSN IE type 48, length 20 for mobile c8:3d:d4:a9:4a:a1 *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] c8:3d:d4:a9:4a:a1 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] c8:3d:d4:a9:4a:a1 RSN Capabilities: 0 *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] c8:3d:d4:a9:4a:a1 Marking Mobile as non-11w Capable *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] c8:3d:d4:a9:4a:a1 Received RSN IE with 0 PMKIDs from mobile c8:3d:d4:a9:4a:a1 *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] c8:3d:d4:a9:4a:a1 Setting active key cache index 8 ---> 8 *apfMsConnTask_2: Jan 15 14:24:38.651: [PA] c8:3d:d4:a9:4a:a1 unsetting PmkIdValidatedByAp *apfMsConnTask_2: Jan 15 14:24:38.652: [PA] c8:3d:d4:a9:4a:a1 0.0.0.0 START (0) Initializing policy *apfMsConnTask_2: Jan 15 14:24:38.652: [PA] c8:3d:d4:a9:4a:a1 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0) *apfMsConnTask_2: Jan 15 14:24:38.652: [PA] c8:3d:d4:a9:4a:a1 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_2: Jan 15 14:24:38.652: [PA] c8:3d:d4:a9:4a:a1 Encryption policy is set to 0x80000001 *apfMsConnTask_2: Jan 15 14:24:38.652: [PA] c8:3d:d4:a9:4a:a1 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_2: Jan 15 14:24:38.652: [PA] c8:3d:d4:a9:4a:a1 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 38:ed:18:c6:e9:40 vapId 17 apVapId 5 flex-acl-name: *apfMsConnTask_2: Jan 15 14:24:38.652: [PA] c8:3d:d4:a9:4a:a1 apfMsAssoStateInc *apfMsConnTask_2: Jan 15 14:24:38.652: [PA] c8:3d:d4:a9:4a:a1 apfPemAddUser2 (apf_policy.c:362) Changing state for mobile c8:3d:d4:a9:4a:a1 on AP 38:ed:18:c6:e9:40 from Idle to Associated *apfMsConnTask_2: Jan 15 14:24:38.652: [PA] c8:3d:d4:a9:4a:a1 apfPemAddUser2:session timeout forstation c8:3d:d4:a9:4a:a1 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_2: Jan 15 14:24:38.652: [PA] c8:3d:d4:a9:4a:a1 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_2: Jan 15 14:24:38.652: [PA] c8:3d:d4:a9:4a:a1 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_2: Jan 15 14:24:38.652: [PA] c8:3d:d4:a9:4a:a1 Sending assoc-resp with status 0 station:c8:3d:d4:a9:4a:a1 AP:38:ed:18:c6:e9:40-00 on apVapId 5 *apfMsConnTask_2: Jan 15 14:24:38.652: [PA] c8:3d:d4:a9:4a:a1 Sending Assoc Response to station on BSSID 38:ed:18:c6:e9:44 (status 0) ApVapId 5 Slot 0 *apfMsConnTask_2: Jan 15 14:24:38.652: [PA] c8:3d:d4:a9:4a:a1 apfProcessAssocReq (apf_80211.c:10521) Changing state for mobile c8:3d:d4:a9:4a:a1 on AP 38:ed:18:c6:e9:40 from Associated to Associated *Dot1x_NW_MsgTask_1: Jan 15 14:24:38.660: [PA] c8:3d:d4:a9:4a:a1 reauth_sm state transition 0 ---> 1 for mobile c8:3d:d4:a9:4a:a1 at 1x_reauth_sm.c:47 *Dot1x_NW_MsgTask_1: Jan 15 14:24:38.660: [PA] c8:3d:d4:a9:4a:a1 EAP-PARAM Debug - eap-params for Wlan-Id :17 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_1: Jan 15 14:24:38.660: [PA] c8:3d:d4:a9:4a:a1 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_1: Jan 15 14:24:38.660: [PA] c8:3d:d4:a9:4a:a1 Station c8:3d:d4:a9:4a:a1 setting dot1x reauth timeout = 1800 *Dot1x_NW_MsgTask_1: Jan 15 14:24:38.660: [PA] c8:3d:d4:a9:4a:a1 Received EAPOL START, dot1x state = 2 *Dot1x_NW_MsgTask_1: Jan 15 14:24:38.660: [PA] c8:3d:d4:a9:4a:a1 Ignore EAPOL START as infra EAP is pending, mobile is in 2 state *spamApTask4: Jan 15 14:24:39.309: [PA] c8:3d:d4:a9:4a:a1 Sent dot1x auth initiate message for mobile c8:3d:d4:a9:4a:a1 *Dot1x_NW_MsgTask_1: Jan 15 14:24:39.310: [PA] c8:3d:d4:a9:4a:a1 reauth_sm state transition 1 ---> 0 for mobile c8:3d:d4:a9:4a:a1 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_1: Jan 15 14:24:39.310: [PA] c8:3d:d4:a9:4a:a1 EAP-PARAM Debug - eap-params for Wlan-Id :17 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_1: Jan 15 14:24:39.310: [PA] c8:3d:d4:a9:4a:a1 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_1: Jan 15 14:24:39.310: [PA] c8:3d:d4:a9:4a:a1 dot1x - moving mobile c8:3d:d4:a9:4a:a1 into Connecting state *Dot1x_NW_MsgTask_1: Jan 15 14:24:39.310: [PA] c8:3d:d4:a9:4a:a1 Sending EAP-Request/Identity to mobile c8:3d:d4:a9:4a:a1 (EAP Id 1) *Dot1x_NW_MsgTask_1: Jan 15 14:24:44.971: [PA] c8:3d:d4:a9:4a:a1 Received EAPOL EAPPKT from mobile c8:3d:d4:a9:4a:a1 *Dot1x_NW_MsgTask_1: Jan 15 14:24:44.971: [PA] c8:3d:d4:a9:4a:a1 Received Identity Response (count=1) from mobile c8:3d:d4:a9:4a:a1 *Dot1x_NW_MsgTask_1: Jan 15 14:24:44.971: [PA] c8:3d:d4:a9:4a:a1 Resetting reauth count 1 to 0 for mobile c8:3d:d4:a9:4a:a1 *Dot1x_NW_MsgTask_1: Jan 15 14:24:44.971: [PA] c8:3d:d4:a9:4a:a1 EAP State update from Connecting to Authenticating for mobile c8:3d:d4:a9:4a:a1 *Dot1x_NW_MsgTask_1: Jan 15 14:24:44.971: [PA] c8:3d:d4:a9:4a:a1 dot1x - moving mobile c8:3d:d4:a9:4a:a1 into Authenticating state *Dot1x_NW_MsgTask_1: Jan 15 14:24:44.971: [PA] c8:3d:d4:a9:4a:a1 Entering Backend Auth Response state for mobile c8:3d:d4:a9:4a:a1 *Dot1x_NW_MsgTask_1: Jan 15 14:24:44.973: [PA] c8:3d:d4:a9:4a:a1 Processing Access-Reject for mobile c8:3d:d4:a9:4a:a1 *Dot1x_NW_MsgTask_1: Jan 15 14:24:44.973: [PA] c8:3d:d4:a9:4a:a1 0 PMK-remove groupcast messages sent *Dot1x_NW_MsgTask_1: Jan 15 14:24:44.973: [PA] c8:3d:d4:a9:4a:a1 Removing PMK cache due to EAP-Failure for mobile c8:3d:d4:a9:4a:a1 (EAP Id -1) *Dot1x_NW_MsgTask_1: Jan 15 14:24:44.973: [PA] c8:3d:d4:a9:4a:a1 Sending EAP-Failure to mobile c8:3d:d4:a9:4a:a1 (EAP Id -1) *Dot1x_NW_MsgTask_1: Jan 15 14:24:44.973: [PA] c8:3d:d4:a9:4a:a1 Entering Backend Auth Failure state (id=-1) for mobile c8:3d:d4:a9:4a:a1 *Dot1x_NW_MsgTask_1: Jan 15 14:24:44.973: [PA] c8:3d:d4:a9:4a:a1 Setting quiet timer for 5 seconds for mobile c8:3d:d4:a9:4a:a1 *Dot1x_NW_MsgTask_1: Jan 15 14:24:44.974: [PA] c8:3d:d4:a9:4a:a1 dot1x - moving mobile c8:3d:d4:a9:4a:a1 into Unknown state *osapiBsnTimer: Jan 15 14:24:49.865: [PA] c8:3d:d4:a9:4a:a1 802.1x 'quiteWhile' Timer expired for station c8:3d:d4:a9:4a:a1 and for message = M0 *Dot1x_NW_MsgTask_1: Jan 15 14:24:49.865: [PA] c8:3d:d4:a9:4a:a1 quiet timer completed for mobile c8:3d:d4:a9:4a:a1 *Dot1x_NW_MsgTask_1: Jan 15 14:24:49.865: [PA] c8:3d:d4:a9:4a:a1 dot1x - moving mobile c8:3d:d4:a9:4a:a1 into Connecting state