iDevice doesn't connect SSID

SamedOrdek1709 — Mon, 05 Jul 2021 17:56:16 GMT

Every device are connect to SSID but one device not connect. 802.1X in use this SSID. Debug logs are here:

*IPv6_Msg_Task: Sep 02 06:09:27.837: b4:9c:df:4b:f0:f7 Link Local address fe80::467:6bd4:8946:e838 updated to mscb. Not Advancing pem state.Current state: mscb in apfMsMmInitial mobility state and client state APF_MS_STATE_AS
*apfOpenDtlSocket: Sep 02 06:10:39.339: b4:9c:df:4b:f0:f7 Recevied management frame ASSOCIATION REQUEST on BSSID d0:ec:35:21:44:a0 destination addr d0:ec:35:21:44:a0
*apfOpenDtlSocket: Sep 02 06:10:39.691: b4:9c:df:4b:f0:f7 Recevied management frame ASSOCIATION REQUEST on BSSID d0:ec:35:21:44:a0 destination addr d0:ec:35:21:44:a0
*apfMsConnTask_4: Sep 02 06:10:39.691: b4:9c:df:4b:f0:f7 Updating 11r vendor IE

*apfMsConnTask_4: Sep 02 06:10:39.691: b4:9c:df:4b:f0:f7 Processing assoc-req station:b4:9c:df:4b:f0:f7 AP:d0:ec:35:21:44:a0-00 ssid : ESKI thread:1e046cd8
*apfMsConnTask_4: Sep 02 06:10:39.691: b4:9c:df:4b:f0:f7 Ignoring 802.11 assoc request from mobile pending deletion
*apfMsConnTask_4: Sep 02 06:10:39.691: b4:9c:df:4b:f0:f7 Sending assoc-resp with status 12 station:b4:9c:df:4b:f0:f7 AP:d0:ec:35:21:44:a0-00 on apVapId 1
*apfMsConnTask_4: Sep 02 06:10:39.691: b4:9c:df:4b:f0:f7 Sending Assoc Response (status: 'Assoc denied unspecified') to station on AP AP-KAT4-KUZEY on BSSID d0:ec:35:21:44:a0 ApVapId 1 Slot 0, mobility role 1
*apfOpenDtlSocket: Sep 02 06:10:39.800: b4:9c:df:4b:f0:f7 Recevied management frame ASSOCIATION REQUEST on BSSID d0:ec:35:21:44:af destination addr d0:ec:35:21:44:af
*apfMsConnTask_4: Sep 02 06:10:39.800: b4:9c:df:4b:f0:f7 Updating 11r vendor IE

*apfMsConnTask_4: Sep 02 06:10:39.800: b4:9c:df:4b:f0:f7 Processing assoc-req station:b4:9c:df:4b:f0:f7 AP:d0:ec:35:21:44:a0-01 ssid : ESKI thread:1e046cd8
*apfMsConnTask_4: Sep 02 06:10:39.800: b4:9c:df:4b:f0:f7 Ignoring 802.11 assoc request from mobile pending deletion
*apfMsConnTask_4: Sep 02 06:10:39.800: b4:9c:df:4b:f0:f7 Sending assoc-resp with status 12 station:b4:9c:df:4b:f0:f7 AP:d0:ec:35:21:44:a0-00 on apVapId 1
*apfMsConnTask_4: Sep 02 06:10:39.800: b4:9c:df:4b:f0:f7 Sending Assoc Response (status: 'Assoc denied unspecified') to station on AP AP-KAT4-KUZEY on BSSID d0:ec:35:21:44:af ApVapId 1 Slot 1, mobility role 1
*apfOpenDtlSocket: Sep 02 06:10:39.857: b4:9c:df:4b:f0:f7 Recevied management frame ASSOCIATION REQUEST on BSSID d0:ec:35:21:42:e0 destination addr d0:ec:35:21:42:e0
*apfMsConnTask_2: Sep 02 06:10:39.857: b4:9c:df:4b:f0:f7 Updating 11r vendor IE

*apfMsConnTask_2: Sep 02 06:10:39.857: b4:9c:df:4b:f0:f7 Processing assoc-req station:b4:9c:df:4b:f0:f7 AP:d0:ec:35:21:42:e0-00 ssid : ESKI thread:1e046018
*apfMsConnTask_2: Sep 02 06:10:39.857: b4:9c:df:4b:f0:f7 Ignoring 802.11 assoc request from mobile pending deletion
*apfMsConnTask_2: Sep 02 06:10:39.857: b4:9c:df:4b:f0:f7 Sending assoc-resp with status 12 station:b4:9c:df:4b:f0:f7 AP:d0:ec:35:21:44:a0-00 on apVapId 1
*apfMsConnTask_2: Sep 02 06:10:39.857: b4:9c:df:4b:f0:f7 Sending Assoc Response (status: 'Assoc denied unspecified') to station on AP AP-KAT5-KUZEY on BSSID d0:ec:35:21:42:e0 ApVapId 1 Slot 0, mobility role 1
*osapiBsnTimer: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 apfMsExpireCallback (apf_ms.c:645) Expiring Mobile!
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 apfMsExpireMobileStation (apf_ms.c:7869) Changing state for mobile b4:9c:df:4b:f0:f7 on AP d0:ec:35:21:44:a0 from Associated to Disassociated

*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Succesfully freed AID 5, slot 0 on AP d0:ec:35:21:44:a0, #client on this slot 3
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 apfSendDisAssocMsgDebug (apf_80211.c:3785) Changing state for mobile b4:9c:df:4b:f0:f7 on AP d0:ec:35:21:44:a0 from Disassociated to Disassociated

*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Sent Disassociate to mobile on AP d0:ec:35:21:44:a0-0 on BSSID d0:ec:35:21:44:a2(reason 1, caller apf_ms.c:7953)
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Resetting MSCB PMK Cache Entry @index 0 for station b4:9c:df:4b:f0:f7
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Removing BSSID d0:ec:35:21:44:a2 from PMKID cache of station b4:9c:df:4b:f0:f7
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Setting active key cache index 0 ---> 8
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Deleting the PMK cache when de-authenticating the client.
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 DOT11R: Sending cache delete
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Removing PMK cache entry for station b4:9c:df:4b:f0:f7
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Sent Deauthenticate to mobile on BSSID d0:ec:35:21:44:a2 slot 0(caller apf_ms.c:7961)
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 apfMsAssoStateDec
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 apfMsWepPskStateDec
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 apfMsExpireMobileStation (apf_ms.c:8019) Changing state for mobile b4:9c:df:4b:f0:f7 on AP d0:ec:35:21:44:a0 from Disassociated to Idle

*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 the value of url acl preserve flag is 0 for mobile b4:9c:df:4b:f0:f7 (caller pem_api.c:4921)
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 10.34.0.239 START (0) Deleted mobile LWAPP rule on AP [d0:ec:35:21:44:a0]
*pemReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 10.34.0.239 Removed NPU entry.
*spamApTask0: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Setting DEL_MOBILE (seqno 0, action 6) ack state for STA on AP d0:ec:35:21:44:a0
*spamApTask0: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Delete Mobile request on slot 0 sent to the AP d0:ec:35:21:44:a0 IP: 10.34.0.156:5256

*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Deleting mobile on AP d0:ec:35:21:44:a0(0)
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 apf_ms.c:5522 Clearing the SGT 0 of mobile
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Decrement the SGT 0 policy count reference by the clients 44
*spamApTask0: Sep 02 06:10:40.311: b4:9c:df:4b:f0:f7 apfUpdateDeleteAckInMscb (apf_api.c:54068) Expiring Mobile!
*spamApTask0: Sep 02 06:10:45.114: b4:9c:df:4b:f0:f7 Received DELETE mobile, reasonCode UNKNOWN, deleteReason 15 from AP d0:ec:35:21:44:a0, slot 1 ...cleaning up mscb

Do you have any idea for this problem?

Re: iDevice doesn't connect SSID

Mark Elsen — Mon, 02 Sep 2019 16:21:30 GMT

- You may 'confront' the Wireless Debug Analyzer with these logs which you can find here :
https://developer.cisco.com/docs/wireless-troubleshooting-tools/#!wireless-troubleshooting-tools/wireless-troubleshooting-tools

Re: iDevice doesn't connect SSID

pieterh — Fri, 06 Sep 2019 14:36:59 GMT

look at this bug:CSCvk36887

Symptom:
Some clients cannot associate to a specific SSID. If a debug client is enabled, the client will be in this loop:

Workaround:
Manually de-authenticate the client from the WLC using the command:
config client deauthenticate

Re: iDevice doesn't connect SSID

Flavio Miranda — Fri, 06 Sep 2019 17:28:37 GMT

The first thing to be verified is the certificate provisioning. Have this device properly provisioned with the right certificate?

But the problem seems to be on the association phase and not authentication. Which WLC your are using and which code version?

-If I helped you somehow, please, rate it as useful.-

Re: iDevice doesn't connect SSID

Daniel Ordóñez Flores — Fri, 06 Sep 2019 17:40:36 GMT

Hola @SamedOrdek1709

what version are u running?

topic Re: iDevice doesn't connect SSID in Wireless

iDevice doesn't connect SSID

Re: iDevice doesn't connect SSID

Re: iDevice doesn't connect SSID

Re: iDevice doesn't connect SSID

Re: iDevice doesn't connect SSID