topic I took it upon myself to in Wireless

Statically addressed devices cannot achive RUN state

rm760 — Mon, 05 Jul 2021 10:26:28 GMT

I have just converted my home from (3) 3600 series autonomous APs to LWAPs with 802.11AC radios to take advantage of the 802.11AC radio spectrum.

I am using a WLC 2504 running version 8.1.102.0 software. All is working great except for my security cameras. They require a static IP address to communicate with the DVR. They are older and use WEP encryption (hex 128 bit). They cannot achieve the RUN state as the controller wants the IP address before allowing connection to the network. DHCP is not set to required for the WLAN or Interface. Here is the error I receive.

*apfMsConnTask_3: Jun 20 11:57:33.067: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:14:b7 0.0.0.0 DHCP_REQD (7) Rejecting association attempt by ad-hoc client

I have even attempted to break down the communication to its most basic form (wide open), and still the same result.

Thoughts and suggestions would be greatly appreciated.

Attached is a copy of my configuration

On the monitor page I can see

rm760 — Sat, 20 Jun 2015 19:19:41 GMT

On the monitor page I can see the MAC address and the static IP but still no RUN state

Are those clients trying to

Freerk Terpstra — Sat, 20 Jun 2015 21:06:05 GMT

Are those clients trying to connect to WLAN ID 1? If that is the case the problem is that "DHCP Addr. Assignment" is actually enabled. Please go to the advanced tab of the WLAN and untick the "Required" checkbox. If the problem still occurs, please share the output of an "debug client MACADR".

Please rate useful posts 🙂

They are connecting to WLAN

rm760 — Sat, 20 Jun 2015 22:41:00 GMT

They are connecting to WLAN ID 5 which is set to not require DHCP. These cameras connected to the same access points just fine when the access points were in autonomous mode..

It can be because the device

Scott Fella — Sat, 20 Jun 2015 23:25:29 GMT

It can be because the device that has a static address isn't responding to ip information request. This means that you need to enable passive clients. Here is instructions that will walk you through what is needed to support these devices.

http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_01100011.html

-Scott

ScottI did try enabling the

rm760 — Sun, 21 Jun 2015 00:29:53 GMT

Scott

I did try enabling the passive client option. No joy. Two of the cameras did respond briefly. I had to send consistent pings to each to keep the session alive.

The best workaround is to use

Scott Fella — Sun, 21 Jun 2015 00:42:17 GMT

The best workaround is to use DHCP reservations so the cameras always get the same IP address. There really isn't another workaround especially if you followed the doc step by step. Maybe configure a static arp entry on the L3 device for he cameras.

-Scott

can you please share :show

ali aqrabawi — Sun, 21 Jun 2015 01:30:24 GMT

can you please share :

show wlan 5

show client details <client MAC>

debug client <cleint MAC> while the camera is trying to connect to the WLAN .

Here is the output of Show

rm760 — Mon, 22 Jun 2015 21:15:47 GMT

Here is the output of Show WLAN 5

(Cisco Controller) >show wlan 5

WLAN Identifier.................................. 5
Profile Name..................................... Cameras
Network Name (SSID).............................. HOUNDS
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Disabled
AAA Policy Override.............................. Disabled
Network Admission Control
Client Profiling Status
    Radius Profiling ............................ Disabled
     DHCP ....................................... Disabled
     HTTP ....................................... Disabled
    Local Profiling ............................. Disabled
     DHCP ....................................... Disabled
     HTTP ....................................... Disabled
Radius-NAC State............................... Disabled
SNMP-NAC State................................. Disabled
Quarantine VLAN................................ 0
Maximum number of Associated Clients............. 0
Maximum number of Clients per AP Radio........... 200

--More-- or (q)uit
Number of Active Clients......................... 15
Exclusionlist.................................... Disabled
Session Timeout.................................. 86400 seconds
User Idle Timeout................................ Disabled
Sleep Client..................................... disable
Sleep Client Timeout............................. 720 minutes
User Idle Threshold.............................. 0 Bytes
NAS-identifier................................... wlc.consulteron.local
CHD per WLAN..................................... Disabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ wlan 192
Multicast Interface.............................. Not Configured
WLAN IPv4 ACL.................................... unconfigured
WLAN IPv6 ACL.................................... unconfigured
WLAN Layer2 ACL.................................. unconfigured
mDNS Status...................................... Disabled
mDNS Profile Name................................ unconfigured
DHCP Server...................................... Default
DHCP Address Assignment Required................. Disabled
Static IP client tunneling....................... Disabled
Tunnel Profile................................... Unconfigured
Quality of Service............................... Silver
Per-SSID Rate Limits............................. Upstream Downstream

--More-- or (q)uit
Average Data Rate................................   0             0
Average Realtime Data Rate.......................   0             0
Burst Data Rate..................................   0             0
Burst Realtime Data Rate.........................   0             0
Per-Client Rate Limits........................... Upstream      Downstream
Average Data Rate................................   0             0
Average Realtime Data Rate.......................   0             0
Burst Data Rate..................................   0             0
Burst Realtime Data Rate.........................   0             0
Scan Defer Priority..............................
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Disabled
WMM UAPSD Compliant Client Support............... Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Disabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
Passive Client Feature........................... Enabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... 802.11g only
DTIM period for 802.11a radio.................... 1

--More-- or (q)uit
DTIM period for 802.11b radio.................... 1
Radius Servers
   Authentication................................ Disabled
   Accounting.................................... Disabled
   Dynamic Interface............................. Disabled
   Dynamic Interface Priority.................... wlan
Local EAP Authentication......................... Disabled
Radius NAI-Realm................................. Disabled
Security

   802.11 Authentication:........................ Open System
   FT Support.................................... Disabled
   Static WEP Keys............................... Enabled
        Key Index:...................................... 1
        Encryption:..................................... 104-bit WEP
   802.1X........................................ Disabled
   Wi-Fi Protected Access (WPA/WPA2)............. Disabled
   WAPI.......................................... Disabled
   Wi-Fi Direct policy configured................ Disabled
   EAP-Passthrough............................... Disabled
   CKIP ......................................... Disabled
   Web Based Authentication...................... Disabled
   Web Authentication Timeout.................... 300

--More-- or (q)uit
   Web-Passthrough............................... Disabled
   Mac-auth-server............................... 0.0.0.0
   Web-portal-server............................. 0.0.0.0
   Conditional Web Redirect...................... Disabled
   Splash-Page Web Redirect...................... Disabled
   Auto Anchor................................... Disabled
   FlexConnect Local Switching................... Enabled
   FlexConnect Central Association............... Disabled
   flexconnect Central Dhcp Flag................. Disabled
   flexconnect nat-pat Flag...................... Disabled
   flexconnect Dns Override Flag................. Disabled
   flexconnect PPPoE pass-through................ Disabled
   flexconnect local-switching IP-source-guar.... Disabled
   FlexConnect Vlan based Central Switching ..... Disabled
   FlexConnect Local Authentication.............. Disabled
   FlexConnect Learn IP Address.................. Enabled
   Client MFP.................................... Disabled
   PMF........................................... Disabled
   PMF Association Comeback Time................. 1
   PMF SA Query RetryTimeout..................... 200
   Tkip MIC Countermeasure Hold-down Timer....... 60
   Eap-params.................................... Not Applicable
AVC Visibilty.................................... Disabled

--More-- or (q)uit
AVC Profile Name................................. None
Flow Monitor Name................................ None
Split Tunnel Configuration
Split Tunnel................................. Disabled
Call Snooping.................................... Disabled
Roamed Call Re-Anchor Policy..................... Disabled
SIP CAC Fail Send-486-Busy Policy................ Enabled
SIP CAC Fail Send Dis-Association Policy......... Disabled
KTS based CAC Policy............................. Disabled
Assisted Roaming Prediction Optimization......... Disabled
802.11k Neighbor List............................ Disabled
802.11k Neighbor List Dual Band.................. Disabled
802.11v Directed Multicast Service............... Disabled
802.11v BSS Max Idle Service..................... Enabled
802.11v BSS Transition Service................... Disabled
802.11v BSS Transition Disassoc Imminent......... Disabled
802.11v BSS Transition Disassoc Timer............ 200
802.11v BSS Transition OpRoam Disassoc Timer..... 40
DMS DB is empty
Band Select...................................... Disabled
Load Balancing................................... Disabled
Multicast Buffer................................. Disabled
Universal Ap Admin............................... Disabled

--More-- or (q)uit

Mobility Anchor List
WLAN ID IP Address Status Priority
------- --------------- ------ --------

802.11u........................................ Disabled

MSAP Services.................................. Disabled

Local Policy
----------------
Priority Policy Name
-------- ---------------

(Cisco Controller) >

Here is the output for show

rm760 — Mon, 22 Jun 2015 21:21:16 GMT

Here is the output for show client details for AMC add 00:80:f0:58:14:b6

(Cisco Controller) >show client detail 00:80:f0:58:14:b6
Client MAC Address............................... 00:80:f0:58:14:b6
Client Username ................................. N/A
AP MAC Address................................... 34:a8:4e:81:2a:50
AP Name.......................................... Attic_AP
AP radio slot Id................................. 0
Client State..................................... Associated
Client User Group................................
Client NAC OOB State............................. Access
Wireless LAN Id.................................. 5
Wireless LAN Network Name (SSID)................. HOUNDS
Wireless LAN Profile Name........................ Cameras
Hotspot (802.11u)................................ Not Supported
BSSID............................................ 34:a8:4e:81:2a:54
Connected For ................................... 11 secs
Channel.......................................... 11
IP Address....................................... 192.168.128.10
Gateway Address.................................. Unknown
Netmask.......................................... Unknown
Association Id................................... 23
Authentication Algorithm......................... Open System
Reason Code...................................... 1
Status Code...................................... 0

--More-- or (q)uit
Session Timeout.................................. 0
Client CCX version............................... No CCX support
QoS Level........................................ Silver
Avg data Rate.................................... 0
Burst data Rate.................................. 0
Avg Real time data Rate.......................... 0
Burst Real Time data Rate........................ 0
802.1P Priority Tag.............................. disabled
CTS Security Group Tag........................... Not Applicable
KTS CAC Capability............................... No
WMM Support...................................... Disabled
Supported Rates.................................. 12.0,18.0,24.0,36.0,48.0,
............................................. 54.0
Mobility State................................... Local
Mobility Move Count.............................. 0
Security Policy Completed........................ Yes
Policy Manager State............................. RUN
Audit Session ID................................. ac100402000017ef55887be7
AAA Role Type.................................... none
Local Policy Applied............................. none
IPv4 ACL Name.................................... none
FlexConnect ACL Applied Status................... Unavailable
IPv4 ACL Applied Status.......................... Unavailable

--More-- or (q)uit
IPv6 ACL Name.................................... none
IPv6 ACL Applied Status.......................... Unavailable
Layer2 ACL Name.................................. none
Layer2 ACL Applied Status........................ Unavailable
Client Type...................................... Simple IP
mDNS Status...................................... Disabled
mDNS Profile Name................................ none
No. of mDNS Services Advertised.................. 0
Policy Type...................................... Static WEP
Encryption Cipher................................ WEP (104 bits)
Protected Management Frame ...................... No
Management Frame Protection...................... No
EAP Type......................................... Unknown
Interface........................................ wlan 192
VLAN............................................. 192
Quarantine VLAN.................................. 0
Access VLAN...................................... 192
Local Bridging VLAN.............................. 192
Client Capabilities:
      CF Pollable................................ Not implemented
      CF Poll Request............................ Not implemented
      Short Preamble............................. Implemented
      PBCC....................................... Not implemented

--More-- or (q)uit
      Channel Agility............................ Not implemented
      Listen Interval............................ 0
      Fast BSS Transition........................ Not implemented
      11v BSS Transition......................... Not implemented
Client Wifi Direct Capabilities:
      WFD capable................................ No
      Manged WFD capable......................... No
      Cross Connection Capable................... No
      Support Concurrent Operation............... No
Fast BSS Transition Details:
Client Statistics:
      Number of Bytes Received................... 0
      Number of Bytes Sent....................... 0
      Total Number of Bytes Sent................. 0
      Total Number of Bytes Recv................. 0
      Number of Bytes Sent (last 90s)............ 40176
      Number of Bytes Recv (last 90s)............ 1350181
      Number of Packets Received................. 0
      Number of Packets Sent..................... 0
      Number of Interim-Update Sent.............. 0
      Number of EAP Id Request Msg Timeouts...... 0
      Number of EAP Id Request Msg Failures...... 0
      Number of EAP Request Msg Timeouts......... 0

--More-- or (q)uit
      Number of EAP Request Msg Failures......... 0
      Number of EAP Key Msg Timeouts............. 0
      Number of EAP Key Msg Failures............. 0
      Number of Data Retries..................... 0
      Number of RTS Retries...................... 0
      Number of Duplicate Received Packets....... 0
      Number of Decrypt Failed Packets........... 0
      Number of Mic Failured Packets............. 0
      Number of Mic Missing Packets.............. 0
      Number of RA Packets Dropped............... 0
      Number of Policy Errors.................... 0
      Radio Signal Strength Indicator............ Unavailable
      Signal to Noise Ratio...................... Unavailable
Client Rate Limiting Statistics:
      Number of Data Packets Received............ 0
      Number of Data Rx Packets Dropped.......... 0
      Number of Data Bytes Received.............. 0
      Number of Data Rx Bytes Dropped............ 0
      Number of Realtime Packets Received........ 0
      Number of Realtime Rx Packets Dropped...... 0
      Number of Realtime Bytes Received.......... 0
      Number of Realtime Rx Bytes Dropped........ 0
      Number of Data Packets Sent................ 0

--More-- or (q)uit
      Number of Data Tx Packets Dropped.......... 0
      Number of Data Bytes Sent.................. 0
      Number of Data Tx Bytes Dropped............ 0
      Number of Realtime Packets Sent............ 0
      Number of Realtime Tx Packets Dropped...... 0
      Number of Realtime Bytes Sent.............. 0
      Number of Realtime Tx Bytes Dropped........ 0
Nearby AP Statistics:
      Attic_AP(slot 0)
        antenna0: 5 secs ago..................... -63 dBm
        antenna1: 5 secs ago..................... -56 dBm
      Closet_AP(slot 0)
        antenna0: 48 secs ago.................... -58 dBm
        antenna1: 48 secs ago.................... -58 dBm
DNS Server details:
      DNS server IP ............................. 0.0.0.0
      DNS server IP ............................. 0.0.0.0
Assisted Roaming Prediction List details:

Client Dhcp Required: False
Allowed (URL)IP Addresses
-------------------------

--More-- or (q)uit

AVC Profile Name: ............................... none

(Cisco Controller) >

Here is the output from debug

rm760 — Mon, 22 Jun 2015 21:29:05 GMT

Here is the output from debug client

(Cisco Controller) debug> client 00:80:f0:58:14:b6

(Cisco Controller) debug>*pemReceiveTask: Jun 20 17:22:23.675: 00:80:f0:58:20:6d 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
*apfMsConnTask_3: Jun 22 14:26:36.197: 00:80:f0:58:14:b6 Processing assoc-req station:00:80:f0:58:14:b6 AP:c4:14:3c:28:2f:60-00 thread:158c8930
*apfMsConnTask_3: Jun 22 14:26:36.197: 00:80:f0:58:14:b6 Association received from mobile on BSSID c4:14:3c:28:2f:64 AP Closet_AP
*apfMsConnTask_3: Jun 22 14:26:36.197: 00:80:f0:58:14:b6 Global 200 Clients are allowed to AP radio

*apfMsConnTask_3: Jun 22 14:26:36.197: 00:80:f0:58:14:b6 Max Client Trap Threshold: 0 cur: 8

*apfMsConnTask_3: Jun 22 14:26:36.197: 00:80:f0:58:14:b6 Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_3: Jun 22 14:26:36.197: 00:80:f0:58:14:b6 override for default ap group, marking intgrp NULL
*apfMsConnTask_3: Jun 22 14:26:36.197: 00:80:f0:58:14:b6 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 192

*apfMsConnTask_3: Jun 22 14:26:36.197: 00:80:f0:58:14:b6 Re-applying interface policy for client

*apfMsConnTask_3: Jun 22 14:26:36.197: 00:80:f0:58:14:b6 192.168.128.10 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) -                                    -- (caller apf_policy.c:2639)
*apfMsConnTask_3: Jun 22 14:26:36.197: 00:80:f0:58:14:b6 192.168.128.10 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) -                                    -- (caller apf_policy.c:2660)
*apfMsConnTask_3: Jun 22 14:26:36.197: 00:80:f0:58:14:b6 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User - 0
*apfMsConnTask_3: Jun 22 14:26:36.197: 00:80:f0:58:14:b6 Setting the NAS Id to WLAN specific Id 'wlc.consulteron.local'
*apfMsConnTask_3: Jun 22 14:26:36.197: 00:80:f0:58:14:b6 Applying site-specific Local Bridging override for station 00:80:f0:58:14:b6 - vapId 5,                                     site 'default-group', interface 'wlan 192'
*apfMsConnTask_3: Jun 22 14:26:36.197: 00:80:f0:58:14:b6 Applying Local Bridging Interface Policy for station 00:80:f0:58:14:b6 - vlan 192, inter                                    face id 16, interface 'wlan 192'
*apfMsConnTask_3: Jun 22 14:26:36.197: 00:80:f0:58:14:b6 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_3: Jun 22 14:26:36.197: 00:80:f0:58:14:b6 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_3: Jun 22 14:26:36.197: 00:80:f0:58:14:b6 STA - rates (6): 24 36 48 72 96 108 0 0 0 0 0 0 0 0 0 0
*apfMsConnTask_3: Jun 22 14:26:36.197: 00:80:f0:58:14:b6 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_3: Jun 22 14:26:36.198: 00:80:f0:58:14:b6 192.168.128.10 RUN (20) Applied RADIUS override policy
*apfMsConnTask_3: Jun 22 14:26:36.198: 00:80:f0:58:14:b6 192.168.128.10 RUN (20) Replacing Fast Path rule
type = Airespace AP Client
on AP c4:14:3c:28:2f:60, slot 0, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL
*apfMsConnTask_3: Jun 22 14:26:36.198: 00:80:f0:58:14:b6 192.168.128.10 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206,                                     IntfId = 16 Local Bridging Vlan = 192, Local Bridging intf id = 16
*apfMsConnTask_3: Jun 22 14:26:36.198: 00:80:f0:58:14:b6 192.168.128.10 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction =                                     0, AppToken = 15206 AverageRate = 0, BurstRate = 0

*apfMsConnTask_3: Jun 22 14:26:36.198: 00:80:f0:58:14:b6 192.168.128.10 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0

*apfMsConnTask_3: Jun 22 14:26:36.198: 00:80:f0:58:14:b6 192.168.128.10 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 2 55, L2 ACL ID 255)
*apfMsConnTask_3: Jun 22 14:26:36.198: 00:80:f0:58:14:b6 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_3: Jun 22 14:26:36.198: 00:80:f0:58:14:b6 Sending 11w Flag 0 for Client 00:80:F0:58:14:B6
*apfMsConnTask_3: Jun 22 14:26:36.198: 00:80:f0:58:14:b6 192.168.128.10 RUN (20) Plumbed mobile LWAPP rule on AP c4:14:3c:28:2f:60 vapId 5 apVapI d 5 flex-acl-name:
*apfMsConnTask_3: Jun 22 14:26:36.198: 00:80:f0:58:14:b6 192.168.128.10 RUN (20) Change state to RUN (20) last state RUN (20)

*apfMsConnTask_3: Jun 22 14:26:36.198: 00:80:f0:58:14:b6 apfPemAddUser2 (apf_policy.c:357) Changing state for mobile 00:80:f0:58:14:b6 on AP c4:1 4:3c:28:2f:60 from Associated to Associated

*apfMsConnTask_3: Jun 22 14:26:36.198: 00:80:f0:58:14:b6 apfPemAddUser2:session timeout forstation 00:80:f0:58:14:b6 - Session Tout 0, apfMsTimeO ut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_3: Jun 22 14:26:36.198: 00:80:f0:58:14:b6 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_3: Jun 22 14:26:36.198: 00:80:f0:58:14:b6 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_3: Jun 22 14:26:36.198: 00:80:f0:58:14:b6 Sending assoc-resp with status 0 station:00:80:f0:58:14:b6 AP:c4:14:3c:28:2f:60-00 on ap VapId 5
*apfMsConnTask_3: Jun 22 14:26:36.198: 00:80:f0:58:14:b6 Sending Assoc Response to station on BSSID c4:14:3c:28:2f:64 (status 0) ApVapId 5 Slot 0
*apfMsConnTask_3: Jun 22 14:26:36.198: 00:80:f0:58:14:b6 apfProcessAssocReq (apf_80211.c:9840) Changing state for mobile 00:80:f0:58:14:b6 on AP c4:14:3c:28:2f:60 from Associated to Associated

*pemReceiveTask: Jun 22 14:26:36.200: 00:80:f0:58:14:b6 192.168.128.10 Added NPU entry of type 1, dtlFlags 0x0

(Cisco Controller) debug>*Apf Guest: Jun 22 14:26:52.880: Wired client head is NULL, no clients in the list. Number of clients = 0

*apfMsConnTask_3: Jun 22 14:27:36.242: 00:80:f0:58:14:b6 Processing assoc-req station:00:80:f0:58:14:b6 AP:c4:14:3c:28:2f:60-00 thread:158c8930
*apfMsConnTask_3: Jun 22 14:27:36.242: 00:80:f0:58:14:b6 Association received from mobile on BSSID c4:14:3c:28:2f:64 AP Closet_AP
*apfMsConnTask_3: Jun 22 14:27:36.242: 00:80:f0:58:14:b6 Global 200 Clients are allowed to AP radio

*apfMsConnTask_3: Jun 22 14:27:36.242: 00:80:f0:58:14:b6 Max Client Trap Threshold: 0 cur: 8

*apfMsConnTask_3: Jun 22 14:27:36.242: 00:80:f0:58:14:b6 Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_3: Jun 22 14:27:36.242: 00:80:f0:58:14:b6 override for default ap group, marking intgrp NULL
*apfMsConnTask_3: Jun 22 14:27:36.242: 00:80:f0:58:14:b6 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 192

*apfMsConnTask_3: Jun 22 14:27:36.242: 00:80:f0:58:14:b6 Re-applying interface policy for client

*apfMsConnTask_3: Jun 22 14:27:36.242: 00:80:f0:58:14:b6 192.168.128.10 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:263         9)
*apfMsConnTask_3: Jun 22 14:27:36.242: 00:80:f0:58:14:b6 192.168.128.10 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:266         0)
*apfMsConnTask_3: Jun 22 14:27:36.242: 00:80:f0:58:14:b6 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User - 0
*apfMsConnTask_3: Jun 22 14:27:36.242: 00:80:f0:58:14:b6 Setting the NAS Id to WLAN specific Id 'wlc.consulteron.local'
*apfMsConnTask_3: Jun 22 14:27:36.242: 00:80:f0:58:14:b6 Applying site-specific Local Bridging override for station 00:80:f0:58:14:b6 - vapId 5, site 'default-group', inter         face 'wlan 192'
*apfMsConnTask_3: Jun 22 14:27:36.242: 00:80:f0:58:14:b6 Applying Local Bridging Interface Policy for station 00:80:f0:58:14:b6 - vlan 192, interface id 16, interface 'wlan          192'
*apfMsConnTask_3: Jun 22 14:27:36.242: 00:80:f0:58:14:b6 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_3: Jun 22 14:27:36.243: 00:80:f0:58:14:b6 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_3: Jun 22 14:27:36.243: 00:80:f0:58:14:b6 STA - rates (6): 24 36 48 72 96 108 0 0 0 0 0 0 0 0 0 0
*apfMsConnTask_3: Jun 22 14:27:36.243: 00:80:f0:58:14:b6 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_3: Jun 22 14:27:36.243: 00:80:f0:58:14:b6 192.168.128.10 RUN (20) Applied RADIUS override policy
*apfMsConnTask_3: Jun 22 14:27:36.243: 00:80:f0:58:14:b6 192.168.128.10 RUN (20) Replacing Fast Path rule
type = Airespace AP Client
on AP c4:14:3c:28:2f:60, slot 0, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL
*apfMsConnTask_3: Jun 22 14:27:36.243: 00:80:f0:58:14:b6 192.168.128.10 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 16 Local Bridgin         g Vlan = 192, Local Bridging intf id = 16
*apfMsConnTask_3: Jun 22 14:27:36.243: 00:80:f0:58:14:b6 192.168.128.10 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 Avera         geRate = 0, BurstRate = 0

*apfMsConnTask_3: Jun 22 14:27:36.243: 00:80:f0:58:14:b6 192.168.128.10 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 Avera geRate = 0, BurstRate = 0

*apfMsConnTask_3: Jun 22 14:27:36.243: 00:80:f0:58:14:b6 192.168.128.10 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255)
*apfMsConnTask_3: Jun 22 14:27:36.243: 00:80:f0:58:14:b6 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_3: Jun 22 14:27:36.243: 00:80:f0:58:14:b6 Sending 11w Flag 0 for Client 00:80:F0:58:14:B6
*apfMsConnTask_3: Jun 22 14:27:36.243: 00:80:f0:58:14:b6 192.168.128.10 RUN (20) Plumbed mobile LWAPP rule on AP c4:14:3c:28:2f:60 vapId 5 apVapId 5 flex-acl-name:
*apfMsConnTask_3: Jun 22 14:27:36.243: 00:80:f0:58:14:b6 192.168.128.10 RUN (20) Change state to RUN (20) last state RUN (20)

*apfMsConnTask_3: Jun 22 14:27:36.243: 00:80:f0:58:14:b6 apfPemAddUser2 (apf_policy.c:357) Changing state for mobile 00:80:f0:58:14:b6 on AP c4:14:3c:28:2f:60 from Associat ed to Associated

*apfMsConnTask_3: Jun 22 14:27:36.243: 00:80:f0:58:14:b6 apfPemAddUser2:session timeout forstation 00:80:f0:58:14:b6 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunn ing flag is 0
*apfMsConnTask_3: Jun 22 14:27:36.243: 00:80:f0:58:14:b6 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_3: Jun 22 14:27:36.243: 00:80:f0:58:14:b6 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_3: Jun 22 14:27:36.243: 00:80:f0:58:14:b6 Sending assoc-resp with status 0 station:00:80:f0:58:14:b6 AP:c4:14:3c:28:2f:60-00 on apVapId 5
*apfMsConnTask_3: Jun 22 14:27:36.244: 00:80:f0:58:14:b6 Sending Assoc Response to station on BSSID c4:14:3c:28:2f:64 (status 0) ApVapId 5 Slot 0
*apfMsConnTask_3: Jun 22 14:27:36.244: 00:80:f0:58:14:b6 apfProcessAssocReq (apf_80211.c:9840) Changing state for mobile 00:80:f0:58:14:b6 on AP c4:14:3c:28:2f:60 from Asso ciated to Associated

*pemReceiveTask: Jun 22 14:27:36.246: 00:80:f0:58:14:b6 192.168.128.10 Added NPU entry of type 1, dtlFlags 0x0

(Cisco Controller) debug>

After having added all of the

rm760 — Mon, 22 Jun 2015 21:39:14 GMT

After having added all of the input each of you have provided, I am making progress. Now the issue is the client ability to recover. For example: resetting an AP or making a change to the 802.11b/g/n configuration of the WLC requires that I power cycle each camera to reconnect. In the autonomous AP configuration the devices would reconnect automatically

from show cleint details , i

ali aqrabawi — Mon, 22 Jun 2015 21:46:03 GMT

from show cleint details , i can see that the client is in run state :

Policy Manager State............................. RUN

since the cleint is in run state and has ip address so it should be fine ,

only do the cisco recommendation of disabling flexconnect learn ip address on the WLAN that has passive client enabled .

ok this is local switching

ali aqrabawi — Mon, 22 Jun 2015 21:46:25 GMT

ok this is local switching WLAN , (interesting) ,

+even if the cleint is not in Run state on the WLC , are you able to ping it from it's local gateway ?

+as per configuration guide "For the FlexConnect local switching, central authentication deployments, if there is a passive client with a static IP address, it is recommended to disable the Learn Client IP Address feature under the WLAN > Advanced tab."

so can you disable the flexconnect learn ip address ,

for your reference :

http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-0/configuration-guide/b_cg80/flexconnect.html

should I be doing something

rm760 — Mon, 22 Jun 2015 21:48:00 GMT

should I be doing something other than local switching? I have removed the check box from the learn client ip address flex connect setting

no its fine , but as you know

ali aqrabawi — Mon, 22 Jun 2015 21:50:26 GMT

no its fine , but as you know the troubleshooting point of view is different when dealing with local switching or central switching ,

any changes after disabling it ? 😐

AliI am resetting the DVR to

rm760 — Mon, 22 Jun 2015 22:21:22 GMT

Ali

I am resetting the DVR to capture video, will know in about 1 hour. Will reply then

AliNow I am seeing rejection

rm760 — Mon, 22 Jun 2015 22:45:57 GMT

Ali

Now I am seeing rejection messages in my message log on the WLC

*apfMsConnTask_3: Jun 22 15:44:03.066: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:20:6d 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:43:49.785: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:3c:12 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:43:03.483: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:20:6d 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_1: Jun 22 15:42:29.721: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:3c:13 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:42:03.233: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:20:6d 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:41:03.228: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:20:6d 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:40:49.868: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:3c:13 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_1: Jun 22 15:38:29.782: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:3c:13 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_1: Jun 22 15:37:29.848: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:3c:13 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:37:03.166: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:20:6d 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_1: Jun 22 15:36:29.970: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:3c:13 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:36:03.177: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:3c:12 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:36:03.174: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:20:6d 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:35:03.162: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:20:6d 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:34:49.836: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:3c:12 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:33:49.855: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:3c:12 192.168.128.20 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:33:03.301: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:20:6d 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_1: Jun 22 15:32:29.858: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:3c:13 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:32:03.302: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:20:6d 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:31:03.317: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:20:6d 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_1: Jun 22 15:30:29.958: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:3c:13 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:30:03.284: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:20:6d 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_1: Jun 22 15:29:30.001: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:3c:13 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:29:03.176: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:20:6d 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_1: Jun 22 15:28:30.028: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:3c:13 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:28:03.187: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:20:6d 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:27:49.921: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:55:07:4d 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_1: Jun 22 15:27:43.161: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:3c:13 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:27:03.449: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:20:6d 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_1: Jun 22 15:26:30.008: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:3c:13 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:26:03.163: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:20:6d 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_1: Jun 22 15:25:30.240: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:3c:13 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:25:03.633: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:20:6d 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_1: Jun 22 15:24:30.030: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:3c:13 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:24:03.222: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:20:6d 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:24:03.216: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:5f:b1:e2 192.168.128.23 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_1: Jun 22 15:23:29.965: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:3c:13 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_3: Jun 22 15:23:03.177: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:20:6d 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_1: Jun 22 15:22:30.340: %APF-3-ASSOCREQ: apf_utils.c:1514 00:80:f0:58:3c:13 0.0.0.0 RUN (20) Rejecting association attempt by ad-hoc client
*apfMsConnTask_1: Jun 22 15:21:34.006: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:437 Could not check supported rates. Missing Supported Rate. Length :0. Mobile MAC: 00:80:f0:58:a0:10.

Also in my trap logMon Jun 22

rm760 — Mon, 22 Jun 2015 22:46:41 GMT

Also in my trap log

Mon Jun 22 15:44:37 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:75 using source address of 64:d8:14:d1:3c:75 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
1	Mon Jun 22 15:44:36 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:74 using source address of 00:80:f0:8c:43:06 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11b/g radio whose slot ID is 0
2	Mon Jun 22 15:43:48 2015	Impersonation of AP with Base Radio MAC 34:a8:4e:81:2a:54 using source address of 00:80:f0:8c:43:06 has been detected by the AP with MAC Address: 34:a8:4e:81:2a:50 on its 802.11b/g radio whose slot ID is 0
3	Mon Jun 22 15:43:35 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:77 using source address of 64:d8:14:d1:3c:77 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
4	Mon Jun 22 15:41:33 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:75 using source address of 64:d8:14:d1:3c:75 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
5	Mon Jun 22 15:40:48 2015	Rogue AP: 9c:d3:6d:a6:88:79 detected on Base Radio MAC: 34:a8:4e:81:2a:50 Interface no: 0(802.11n(2.4 GHz)) Channel: 8 RSSI: -71 SNR: 21 Classification: unclassified, State: Alert, RuleClassified : N, Severity Score: 0, RuleName: N.A. ,Classified AP MAC: 00:00:00:00:00:00 ,Classified RSSI: 0
6	Mon Jun 22 15:40:45 2015	Impersonation of AP with Base Radio MAC 34:a8:4e:81:2a:54 using source address of 00:80:f0:8c:43:06 has been detected by the AP with MAC Address: 34:a8:4e:81:2a:50 on its 802.11b/g radio whose slot ID is 0
7	Mon Jun 22 15:40:32 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:77 using source address of 64:d8:14:d1:3c:77 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
8	Mon Jun 22 15:39:33 2015	Impersonation of AP with Base Radio MAC c4:14:3c:28:2f:64 using source address of 00:80:f0:8c:43:06 has been detected by the AP with MAC Address: c4:14:3c:28:2f:60 on its 802.11b/g radio whose slot ID is 0
9	Mon Jun 22 15:38:31 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:75 using source address of 64:d8:14:d1:3c:75 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
10	Mon Jun 22 15:37:41 2015	Impersonation of AP with Base Radio MAC 34:a8:4e:81:2a:54 using source address of 00:80:f0:8c:43:06 has been detected by the AP with MAC Address: 34:a8:4e:81:2a:50 on its 802.11b/g radio whose slot ID is 0
11	Mon Jun 22 15:37:31 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:77 using source address of 64:d8:14:d1:3c:77 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
12	Mon Jun 22 15:36:55 2015	Rogue AP: 00:25:3c:08:50:d1 detected on Base Radio MAC: 64:d8:14:d1:3c:70 Interface no: 0(802.11b/g) Channel: 3 RSSI: -73 SNR: 6 Classification: unclassified, State: Alert, RuleClassified : N, Severity Score: 0, RuleName: N.A. ,Classified AP MAC: 00:00:00:00:00:00 ,Classified RSSI: 0
13	Mon Jun 22 15:35:29 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:75 using source address of 64:d8:14:d1:3c:75 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
14	Mon Jun 22 15:34:36 2015	Impersonation of AP with Base Radio MAC 34:a8:4e:81:2a:54 using source address of 00:80:f0:8c:43:06 has been detected by the AP with MAC Address: 34:a8:4e:81:2a:50 on its 802.11b/g radio whose slot ID is 0
15	Mon Jun 22 15:34:28 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:77 using source address of 64:d8:14:d1:3c:77 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
16	Mon Jun 22 15:33:19 2015	Rogue AP : 9c:d3:6d:a6:88:79 removed from Base Radio MAC : 34:a8:4e:81:2a:50 Interface no:0(802.11n(2.4 GHz))
17	Mon Jun 22 15:33:19 2015	Rogue AP : 9c:d3:6d:a6:88:79 removed from Base Radio MAC : c4:14:3c:28:2f:60 Interface no:0(802.11n(2.4 GHz))
18	Mon Jun 22 15:32:25 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:75 using source address of 64:d8:14:d1:3c:75 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
19	Mon Jun 22 15:31:49 2015	Rogue AP : 00:25:3c:08:50:d1 removed from Base Radio MAC : 64:d8:14:d1:3c:70 Interface no:0(802.11b/g)
20	Mon Jun 22 15:31:33 2015	Impersonation of AP with Base Radio MAC 34:a8:4e:81:2a:54 using source address of 00:80:f0:8c:43:06 has been detected by the AP with MAC Address: 34:a8:4e:81:2a:50 on its 802.11b/g radio whose slot ID is 0
21	Mon Jun 22 15:31:25 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:77 using source address of 64:d8:14:d1:3c:77 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
22	Mon Jun 22 15:29:22 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:75 using source address of 64:d8:14:d1:3c:75 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
23	Mon Jun 22 15:28:30 2015	Impersonation of AP with Base Radio MAC 34:a8:4e:81:2a:54 using source address of 00:80:f0:8c:43:06 has been detected by the AP with MAC Address: 34:a8:4e:81:2a:50 on its 802.11b/g radio whose slot ID is 0
24	Mon Jun 22 15:28:21 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:77 using source address of 64:d8:14:d1:3c:77 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
25	Mon Jun 22 15:28:20 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:74 using source address of 00:80:f0:8c:43:06 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11b/g radio whose slot ID is 0
26	Mon Jun 22 15:27:49 2015	Rogue AP: 00:25:3c:08:50:d1 detected on Base Radio MAC: 64:d8:14:d1:3c:70 Interface no: 0(802.11b/g) Channel: 3 RSSI: -77 SNR: 1 Classification: unclassified, State: Alert, RuleClassified : N, Severity Score: 0, RuleName: N.A. ,Classified AP MAC: 00:00:00:00:00:00 ,Classified RSSI: 0
27	Mon Jun 22 15:27:38 2015	Rogue AP : 9c:d3:6d:b3:e2:89 removed from Base Radio MAC : 34:a8:4e:81:2a:50 Interface no:0(802.11n(2.4 GHz))
28	Mon Jun 22 15:26:19 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:75 using source address of 64:d8:14:d1:3c:75 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
29	Mon Jun 22 15:26:15 2015	Rogue AP: 9c:d3:6d:a6:88:79 detected on Base Radio MAC: c4:14:3c:28:2f:60 Interface no: 0(802.11n(2.4 GHz)) Channel: 8 RSSI: -78 SNR: 1 Classification: unclassified, State: Alert, RuleClassified : N, Severity Score: 0, RuleName: N.A. ,Classified AP MAC: 00:00:00:00:00:00 ,Classified RSSI: 0
30	Mon Jun 22 15:25:27 2015	Impersonation of AP with Base Radio MAC 34:a8:4e:81:2a:54 using source address of 00:80:f0:8c:43:06 has been detected by the AP with MAC Address: 34:a8:4e:81:2a:50 on its 802.11b/g radio whose slot ID is 0
31	Mon Jun 22 15:25:19 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:77 using source address of 64:d8:14:d1:3c:77 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
32	Mon Jun 22 15:23:38 2015	Rogue AP: 9c:d3:6d:b3:e2:89 detected on Base Radio MAC: 34:a8:4e:81:2a:50 Interface no: 0(802.11n(2.4 GHz)) Channel: 8 RSSI: -62 SNR: 4 Classification: unclassified, State: Alert, RuleClassified : N, Severity Score: 0, RuleName: N.A. ,Classified AP MAC: 00:00:00:00:00:00 ,Classified RSSI: 0
33	Mon Jun 22 15:23:23 2015	Interference Profile Updated to Pass for Base Radio MAC: 64:d8:14:d1:3c:70 and slotNo: 0
34	Mon Jun 22 15:23:18 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:75 using source address of 64:d8:14:d1:3c:75 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
35	Mon Jun 22 15:22:23 2015	Impersonation of AP with Base Radio MAC 34:a8:4e:81:2a:54 using source address of 00:80:f0:8c:43:06 has been detected by the AP with MAC Address: 34:a8:4e:81:2a:50 on its 802.11b/g radio whose slot ID is 0
36	Mon Jun 22 15:22:18 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:77 using source address of 64:d8:14:d1:3c:77 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
37	Mon Jun 22 15:20:16 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:75 using source address of 64:d8:14:d1:3c:75 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
38	Mon Jun 22 15:20:08 2015	Impersonation of AP with Base Radio MAC c4:14:3c:28:2f:64 using source address of 00:80:f0:58:a0:10 has been detected by the AP with MAC Address: c4:14:3c:28:2f:60 on its 802.11b/g radio whose slot ID is 0
39	Mon Jun 22 15:19:19 2015	Impersonation of AP with Base Radio MAC 34:a8:4e:81:2a:54 using source address of 00:80:f0:8c:43:06 has been detected by the AP with MAC Address: 34:a8:4e:81:2a:50 on its 802.11b/g radio whose slot ID is 0
40	Mon Jun 22 15:19:15 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:77 using source address of 64:d8:14:d1:3c:77 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
41	Mon Jun 22 15:17:13 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:75 using source address of 64:d8:14:d1:3c:75 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
42	Mon Jun 22 15:17:06 2015	Impersonation of AP with Base Radio MAC c4:14:3c:28:2f:64 using source address of 00:80:f0:58:a0:10 has been detected by the AP with MAC Address: c4:14:3c:28:2f:60 on its 802.11b/g radio whose slot ID is 0
43	Mon Jun 22 15:16:13 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:77 using source address of 64:d8:14:d1:3c:77 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
44	Mon Jun 22 15:16:11 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:74 using source address of 00:80:f0:8c:43:06 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11b/g radio whose slot ID is 0
45	Mon Jun 22 15:15:19 2015	Rogue AP : 9c:d3:6d:a6:88:79 removed from Base Radio MAC : 34:a8:4e:81:2a:50 Interface no:0(802.11n(2.4 GHz))
46	Mon Jun 22 15:15:17 2015	Impersonation of AP with Base Radio MAC 34:a8:4e:81:2a:54 using source address of 00:80:f0:8c:43:07 has been detected by the AP with MAC Address: 34:a8:4e:81:2a:50 on its 802.11b/g radio whose slot ID is 0
47	Mon Jun 22 15:14:10 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:75 using source address of 64:d8:14:d1:3c:75 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
48	Mon Jun 22 15:14:02 2015	Impersonation of AP with Base Radio MAC c4:14:3c:28:2f:64 using source address of 00:80:f0:58:a0:10 has been detected by the AP with MAC Address: c4:14:3c:28:2f:60 on its 802.11b/g radio whose slot ID is 0
49	Mon Jun 22 15:13:10 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:77 using source address of 64:d8:14:d1:3c:77 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
50	Mon Jun 22 15:13:09 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:74 using source address of 00:80:f0:58:a0:10 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11b/g radio whose slot ID is 0
51	Mon Jun 22 15:11:25 2015	Noise Profile Updated to Pass for Base Radio MAC: 34:a8:4e:81:2a:50 and slotNo: 0
52	Mon Jun 22 15:11:19 2015	Rogue AP: 9c:d3:6d:a6:88:79 detected on Base Radio MAC: 34:a8:4e:81:2a:50 Interface no: 0(802.11n(2.4 GHz)) Channel: 8 RSSI: -71 SNR: 21 Classification: unclassified, State: Alert, RuleClassified : N, Severity Score: 0, RuleName: N.A. ,Classified AP MAC: 00:00:00:00:00:00 ,Classified RSSI: 0
53	Mon Jun 22 15:11:07 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:75 using source address of 64:d8:14:d1:3c:75 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
54	Mon Jun 22 15:10:06 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:77 using source address of 64:d8:14:d1:3c:77 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
55	Mon Jun 22 15:10:05 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:74 using source address of 00:80:f0:58:a0:10 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11b/g radio whose slot ID is 0
56	Mon Jun 22 15:10:00 2015	Impersonation of AP with Base Radio MAC c4:14:3c:28:2f:64 using source address of 00:80:f0:58:a0:10 has been detected by the AP with MAC Address: c4:14:3c:28:2f:60 on its 802.11b/g radio whose slot ID is 0
57	Mon Jun 22 15:08:26 2015	Interference Profile Failed for Base Radio MAC: 64:d8:14:d1:3c:70 and slotNo: 0
58	Mon Jun 22 15:08:25 2015	Noise Profile Failed for Base Radio MAC: 34:a8:4e:81:2a:50 and slotNo: 0
59	Mon Jun 22 15:08:03 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:75 using source address of 64:d8:14:d1:3c:75 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
60	Mon Jun 22 15:07:03 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:77 using source address of 64:d8:14:d1:3c:77 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11a radio whose slot ID is 1
61	Mon Jun 22 15:06:56 2015	Impersonation of AP with Base Radio MAC c4:14:3c:28:2f:64 using source address of 00:80:f0:58:a0:10 has been detected by the AP with MAC Address: c4:14:3c:28:2f:60 on its 802.11b/g radio whose slot ID is 0
62	Mon Jun 22 15:06:02 2015	Impersonation of AP with Base Radio MAC 64:d8:14:d1:3c:74 using source address of 00:80:f0:58:a0:10 has been detected by the AP with MAC Address: 64:d8:14:d1:3c:70 on its 802.11b/g radio whose slot ID is 0
63	Mon Jun 22 15:05:26 2015	Noise Profile Updated to Pass for Base Radio MAC: 34:a8:4e:81:2a:50 and slotNo: 0

all of my camera MAC

rm760 — Mon, 22 Jun 2015 22:52:39 GMT

all of my camera MAC addresses start 00:80:f0. I am noticing these cameras are now showing up in the client monitor table with both their wireless MAC address and their wired MAC address.

Am I fighting cleanair now?