topic Re: Mobility express - Roaming in Wireless

Mobility express - Roaming

3xIT — Mon, 05 Jul 2021 16:39:01 GMT

Hi all,

We have problems with roaming on Mobility Express (version 8.4.x). Currently, we have 10 AP - 3802i and two of them are WLC (another one as backup).

After connecting to one AP, we are connected to that one until we lose signal and then our device (iPhone or Microsoft Surface Book) connects to the first AP. It's really frustrating when you walk around and example have a video chat that brakes because of this roaming problem.

We made only simple setup, there is no special configuration beside we have different VLANs for different networks (currently we have four networks - tree WIFI SSID and one for local computers). Our router RV325 is doing all VLAN and DHCP things.

Thank you for your help in advance!

Re: Mobility express - Roaming

sudhir.gupta1 — Mon, 31 Dec 2018 08:43:18 GMT

Hi ,

First of all, the IOS which you are using is not recommended.

as you are facing roaming issue while connecting two different vlan.

if the user is still connected when the user is near to 2nd AP, then you need to setting on Coverage dbm select -65 and check.

so when the user is near to the 2nd ap, then it will connect to that AP.

Rgds/Sudhir

Re: Mobility express - Roaming

sudhir.gupta1 — Mon, 31 Dec 2018 08:44:46 GMT

Hi ,

First of all, the IOS which you are using is not recommended.

as you are facing roaming issue while connecting two different vlan.

if the user is still connected when the user is near to 2nd AP, then you need to setting on Coverage dbm select -65 and check.

so when the user is near to the 2nd ap, then it will connect to that AP.

Rgds/Sudhir

Re: Mobility express - Roaming

3xIT — Thu, 03 Jan 2019 12:35:05 GMT

Thank you Sudhir! I will try this next week and let you know.

Re: Mobility express - Roaming

3xIT — Fri, 11 Jan 2019 15:01:13 GMT

Hi Sudhir,
I have upgraded our firmware to the latest one 8-8-100 but still have problems. If you, for example, watch YouTube and walk around, you will lose it. So it's really frustrating for the colleagues.
Can you explain it to me, how can I change Coverage to -65 dBm?

Thanks

Re: Mobility express - Roaming

3xIT — Wed, 30 Jan 2019 10:19:41 GMT

I have made a small change on my ME... 5.0 GHz Data rates moved from 6 to 12 and it looks a little bit better but still not that good. I was walking around and testing if my iPhone will be transferred to the other AP and it was working better then before but I have lost WiFi signal two times during this test. Also, when I try to connect to the network after that two disconnects I was getting "Wrong password" error. After turning off and on, the password was working.

The biggest problem was that my supervisor was also doing the same test with his iPhone, turned some YouTube video and walking around and it happens that he lost connection and video stopped. He was very unhappy since it can also happen during some video or phone call.

Here is how RF parameters look in my case:

Please advise!

Thanks!

Re: Mobility express - Roaming

patoberli — Wed, 30 Jan 2019 16:28:34 GMT

What encryption are you using? You should not use TKIP, only WPA2 with AES (or Enterprise).

Re: Mobility express - Roaming

3xIT — Thu, 31 Jan 2019 10:53:00 GMT

It is WPA2 with AES

Re: Mobility express - Roaming

patoberli — Thu, 31 Jan 2019 12:04:57 GMT

Ok good. Then it could be insufficient signal coverage, once the device decides to switch the AP.

At a physical spot where this often happens, how strong is the signal there of the old and new AP?

Re: Mobility express - Roaming

3xIT — Thu, 31 Jan 2019 12:16:27 GMT

The signal is great, for example, I was in one room with two AP, so basically I was 15-20 ft from both APs. There is no one place, it's happening through the whole place.

Re: Mobility express - Roaming

patoberli — Thu, 31 Jan 2019 12:32:52 GMT

Can you run a debug client [mac-address-here] on your Master AP and then roam a few times and post the output here?
Manual: https://www.cisco.com/c/en/us/td/docs/wireless/access_point/mob_exp/88/cmd_ref/me_cr_book-88/me_wlan_cli.html#wp3696883890

Re: Mobility express - Roaming

3xIT — Thu, 14 Mar 2019 15:10:50 GMT

Sorry for the late response, I will try this in next time I go to this location. Until that time, here are some screenshots from Mobility Express. If you see something wrong please let me know.

Also, today I got information from this location that people often get kicked out from Wi-Fi and they are very frustrated. My belief is that they are moving around there and it takes too long to change to another AP.

Is there a way to make the signal stronger?

Re: Mobility express - Roaming

3xIT — Fri, 15 Mar 2019 12:17:59 GMT

I just asked the user to move her laptop over APs but even before she moved, she was kicked out from the network. Here is what I see over console:

*emWeb: Mar 15 12:04:06.640:
Debugging session started on Mar 15 12:04:06.640 for WLC AIR-AP3802I-E-K9 Version :8.8.100.0 SN :xxx Hostname xxx
*spamApTask0: Mar 15 12:07:53.769: 5c:f9:38:8c:5e:68 Received DELETE mobile, reasonCode MN_IDLE_TIMEOUT, deleteReason 4 from AP 78:72:5d:f8:7c:60, slot 0 ...cleaning up mscb
*spamApTask0: Mar 15 12:07:53.769: 5c:f9:38:8c:5e:68 Succesfully freed AID 196, slot 0 on AP 78:72:5d:f8:7c:60, #client on this slot 4
*spamApTask0: Mar 15 12:07:53.769: 5c:f9:38:8c:5e:68 apfMsDeleteByMscb Scheduling mobile for deletion with deleteReason 4, reasonCode 4

*spamApTask0: Mar 15 12:07:53.769: 5c:f9:38:8c:5e:68 Scheduling deletion of Mobile Station: (callerId: 30) in 1 seconds
*spamApTask0: Mar 15 12:07:53.769: 5c:f9:38:8c:5e:68 Removing PMK cache entry for station 5c:f9:38:8c:5e:68
*spamApTask0: Mar 15 12:07:53.769: 5c:f9:38:8c:5e:68 0 PMK-remove groupcast messages sent
*spamApTask0: Mar 15 12:07:53.769: 5c:f9:38:8c:5e:68 Deleted global PMK cache and MSCB PMKID/PMK cache entry for the client
*osapiBsnTimer: Mar 15 12:07:54.610: 5c:f9:38:8c:5e:68 apfMsExpireCallback (apf_ms.c:655) Expiring Mobile!
*apfReceiveTask: Mar 15 12:07:54.610: 5c:f9:38:8c:5e:68 apfSendDisAssocMsgDebug (apf_80211.c:3962) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:f8:7c:60 from Associated to Disassociated

*apfReceiveTask: Mar 15 12:07:54.610: 5c:f9:38:8c:5e:68 Sent Disassociate to mobile on AP 78:72:5d:f8:7c:60-0 on BSSID 78:72:5d:f8:7c:61(reason 4, caller apf_ms.c:7913)
*apfReceiveTask: Mar 15 12:07:54.610: 5c:f9:38:8c:5e:68 Client already in disassociated state, not sending disassociation
*apfReceiveTask: Mar 15 12:07:54.610: 5c:f9:38:8c:5e:68 Setting active key cache index 0 ---> 8
*apfReceiveTask: Mar 15 12:07:54.610: 5c:f9:38:8c:5e:68 Global PMK Cache deletion failed.
*apfReceiveTask: Mar 15 12:07:54.610: 5c:f9:38:8c:5e:68 Sent Deauthenticate to mobile on BSSID 78:72:5d:f8:7c:61 slot 0(caller apf_ms.c:8032)
*apfReceiveTask: Mar 15 12:07:54.611: 5c:f9:38:8c:5e:68 Initiating Accounting request(2) update for mobile
*apfReceiveTask: Mar 15 12:07:54.611: 5c:f9:38:8c:5e:68 PemLocationConfigured [1]Adding VSA with NAS update and Role[1] with state[0]
*apfReceiveTask: Mar 15 12:07:54.611: 5c:f9:38:8c:5e:68 apfMsAssoStateDec
*apfReceiveTask: Mar 15 12:07:54.611: 5c:f9:38:8c:5e:68 apfMsWepPskStateDec
*apfReceiveTask: Mar 15 12:07:54.611: 5c:f9:38:8c:5e:68 apfMsExpireMobileStation (apf_ms.c:8090) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:f8:7c:60 from Disassociated to Idle

*apfReceiveTask: Mar 15 12:07:54.611: 5c:f9:38:8c:5e:68 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfReceiveTask: Mar 15 12:07:54.611: 5c:f9:38:8c:5e:68 the value of url acl preserve flag is 0 for mobile 5c:f9:38:8c:5e:68 (caller pem_api.c:5096)
*apfReceiveTask: Mar 15 12:07:54.611: 5c:f9:38:8c:5e:68 10.10.162.6 START (0) Deleted mobile LWAPP rule on AP [78:72:5d:f8:7c:60]
*apfReceiveTask: Mar 15 12:07:54.611: 5c:f9:38:8c:5e:68 0 PMK-remove groupcast messages sent
*apfReceiveTask: Mar 15 12:07:54.611: 5c:f9:38:8c:5e:68 Deleted global PMK cache and MSCB PMKID/PMK cache entry for the client
*apfReceiveTask: Mar 15 12:07:54.611: 5c:f9:38:8c:5e:68 Deleting mobile on AP 78:72:5d:f8:7c:60(0)

Re: Mobility express - Roaming

patoberli — Fri, 15 Mar 2019 12:34:36 GMT

You might just be missing the important lines before you started the debug.
This line is interesting:
Received DELETE mobile, reasonCode MN_IDLE_TIMEOUT, deleteReason 4 from AP 78:72:5d:f8:7c:60, slot 0 ...cleaning up mscb
You might be hitting some Idle Timeouts while your clients are in standby or have a client driver bug.
First of all, disable Optimized Roaming. Then try to get 8.8.111.0 or 88MR2 beta and update to that version. 8.8.100.0 has quite a lot of bugs.

Re: Mobility express - Roaming

3xIT — Wed, 20 Mar 2019 09:44:53 GMT

So I did the next things:
- Disable Optimized Roaming
- Disable Fast SSID (there is 3 SSID and users should connect only on one so it's not important to have fast SSID)
- Update firmware to 8.8.111.0

Still the same problem. Just got a call from one user, she is in last 30 minutes kicked out three times on her MacBook.

Re: Mobility express - Roaming

patoberli — Wed, 20 Mar 2019 10:10:11 GMT

Apple users....
Can you check if under the SSID configuration the FT security options are enabled? If so, disable them.

Re: Mobility express - Roaming

3xIT — Wed, 20 Mar 2019 10:15:38 GMT

Again did a test with debug client MAC add and she got kicked out without moving her MacBook. Here are the results:

(Cisco Controller) >*emWeb: Mar 20 09:56:04.347:
Debugging session started on Mar 20 09:56:04.347 for WLC AIR-AP3802I-E-K9 Version :8.8.111.0 SN :FGL2225A8DP Hostname WWLC01
*apfReceiveTask: Mar 20 10:06:15.479: 5c:f9:38:8c:5e:68 Received management frame ASSOCIATION REQUEST on BSSID 78:72:5d:f8:7c:62 destination addr 78:72:5d:f8:7c:62
*apfMsConnTask_0: Mar 20 10:06:15.479: 5c:f9:38:8c:5e:68 Updating 11r vendor IE

*apfMsConnTask_0: Mar 20 10:06:15.480: 5c:f9:38:8c:5e:68 Processing assoc-req station:5c:f9:38:8c:5e:68 AP:78:72:5d:f8:7c:60-00 ssid : GUEST thread:5e0bef70
*apfMsConnTask_0: Mar 20 10:06:15.480: 5c:f9:38:8c:5e:68 Association received from mobile on BSSID 78:72:5d:f8:7c:62 AP WAP07 on ssid GUEST
*apfMsConnTask_0: Mar 20 10:06:15.480: 5c:f9:38:8c:5e:68 Sending assoc-resp with status 17 station:5c:f9:38:8c:5e:68 AP:78:72:5d:fd:fc:c0-00 on apVapId 3
*apfMsConnTask_0: Mar 20 10:06:15.480: 5c:f9:38:8c:5e:68 Sending Assoc Response (status: 'maximum station reached') to station on AP WAP07 on BSSID 78:72:5d:f8:7c:62 ApVapId 3 Slot 0, mobility role 1
*spamApTask0: Mar 20 10:06:21.351: 5c:f9:38:8c:5e:68 Received DELETE mobile, reasonCode MN_REASSOC_TIMEOUT, deleteReason 4 from AP 78:72:5d:f8:7c:60, slot 0 ...cleaning up mscb
*spamApTask0: Mar 20 10:06:21.351: 5c:f9:38:8c:5e:68 Warning, ignore the DELETE_MOBILE_PAYLOAD from AP: 78:72:5d:f8:7c:60, slot 0. STA connecting AP: 78:72:5d:fd:fc:c0, slot 0
*apfReceiveTask: Mar 20 10:06:25.740: 5c:f9:38:8c:5e:68 Received management frame ASSOCIATION REQUEST on BSSID 78:72:5d:fd:fc:c1 destination addr 78:72:5d:fd:fc:c1
*apfMsConnTask_0: Mar 20 10:06:25.741: 5c:f9:38:8c:5e:68 Updating 11r vendor IE

*apfMsConnTask_0: Mar 20 10:06:25.741: 5c:f9:38:8c:5e:68 Processing assoc-req station:5c:f9:38:8c:5e:68 AP:78:72:5d:fd:fc:c0-00 ssid : STAFF thread:5e0bef70
*apfMsConnTask_0: Mar 20 10:06:25.741: 5c:f9:38:8c:5e:68 Association received from mobile on BSSID 78:72:5d:fd:fc:c1 AP WAP02 on ssid STAFF
*apfMsConnTask_0: Mar 20 10:06:25.741: 5c:f9:38:8c:5e:68 Sending assoc-resp with status 17 station:5c:f9:38:8c:5e:68 AP:78:72:5d:fd:fc:c0-00 on apVapId 2
*apfMsConnTask_0: Mar 20 10:06:25.741: 5c:f9:38:8c:5e:68 Sending Assoc Response (status: 'maximum station reached') to station on AP WAP02 on BSSID 78:72:5d:fd:fc:c1 ApVapId 2 Slot 0, mobility role 1
*apfReceiveTask: Mar 20 10:06:29.671: 5c:f9:38:8c:5e:68 Received management frame REASSOCIATION REQUEST on BSSID 78:72:5d:f8:7c:61 destination addr 78:72:5d:f8:7c:61
*apfMsConnTask_0: Mar 20 10:06:29.671: 5c:f9:38:8c:5e:68 Updating 11r vendor IE

*apfMsConnTask_0: Mar 20 10:06:29.671: 5c:f9:38:8c:5e:68 Processing assoc-req station:5c:f9:38:8c:5e:68 AP:78:72:5d:f8:7c:60-00 ssid : STAFF thread:5e0bef70
*apfMsConnTask_0: Mar 20 10:06:29.671: 5c:f9:38:8c:5e:68 Reassociation received from mobile on BSSID 78:72:5d:f8:7c:61 AP WAP07 on ssid STAFF
*apfMsConnTask_0: Mar 20 10:06:29.671: 5c:f9:38:8c:5e:68 Sending assoc-resp with status 17 station:5c:f9:38:8c:5e:68 AP:78:72:5d:fd:fc:c0-00 on apVapId 2
*apfMsConnTask_0: Mar 20 10:06:29.671: 5c:f9:38:8c:5e:68 Sending Assoc Response (status: 'maximum station reached') to station on AP WAP07 on BSSID 78:72:5d:f8:7c:61 ApVapId 2 Slot 0, mobility role 1
*spamApTask0: Mar 20 10:06:31.108: 5c:f9:38:8c:5e:68 Received DELETE mobile, reasonCode MN_REASSOC_TIMEOUT, deleteReason 4 from AP 78:72:5d:fd:fc:c0, slot 0 ...cleaning up mscb
*spamApTask0: Mar 20 10:06:31.108: 5c:f9:38:8c:5e:68 Succesfully freed AID 113, slot 0 on AP 78:72:5d:fd:fc:c0, #client on this slot 1
*spamApTask0: Mar 20 10:06:31.108: 5c:f9:38:8c:5e:68 apfMsDeleteByMscb Scheduling mobile for deletion with deleteReason 4, reasonCode 4

*spamApTask0: Mar 20 10:06:31.108: 5c:f9:38:8c:5e:68 Scheduling deletion of Mobile Station: (callerId: 30) in 1 seconds
*spamApTask0: Mar 20 10:06:31.108: 5c:f9:38:8c:5e:68 Removing PMK cache entry for station 5c:f9:38:8c:5e:68
*spamApTask0: Mar 20 10:06:31.108: 5c:f9:38:8c:5e:68 0 PMK-remove groupcast messages sent
*spamApTask0: Mar 20 10:06:31.108: 5c:f9:38:8c:5e:68 Deleted global PMK cache and MSCB PMKID/PMK cache entry for the client
*osapiBsnTimer: Mar 20 10:06:32.055: 5c:f9:38:8c:5e:68 apfMsExpireCallback (apf_ms.c:657) Expiring Mobile!
*apfReceiveTask: Mar 20 10:06:32.055: 5c:f9:38:8c:5e:68 apfMsExpireMobileStation (apf_ms.c:7986) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:fd:fc:c0 from Associated to Disassociated

*apfReceiveTask: Mar 20 10:06:32.055: 5c:f9:38:8c:5e:68 apfSendDisAssocMsgDebug (apf_80211.c:3962) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:fd:fc:c0 from Disassociated to Disassociated

*apfReceiveTask: Mar 20 10:06:32.055: 5c:f9:38:8c:5e:68 Sent Disassociate to mobile on AP 78:72:5d:fd:fc:c0-0 on BSSID 78:72:5d:fd:fc:c2(reason 1, caller apf_ms.c:8070)
*apfReceiveTask: Mar 20 10:06:32.055: 5c:f9:38:8c:5e:68 Setting active key cache index 0 ---> 8
*apfReceiveTask: Mar 20 10:06:32.055: 5c:f9:38:8c:5e:68 Deleting the PMK cache when de-authenticating the client.
*apfReceiveTask: Mar 20 10:06:32.055: 5c:f9:38:8c:5e:68 Global PMK Cache deletion failed.
*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 Sent Deauthenticate to mobile on BSSID 78:72:5d:fd:fc:c2 slot 0(caller apf_ms.c:8078)
*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 Initiating Accounting request(2) update for mobile
*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 PemLocationConfigured [1]Adding VSA with NAS update and Role[1] with state[0]
*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 apfMsAssoStateDec
*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 apfMsWepPskStateDec
*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 apfMsExpireMobileStation (apf_ms.c:8136) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:fd:fc:c0 from Disassociated to Idle

*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 the value of url acl preserve flag is 0 for mobile 5c:f9:38:8c:5e:68 (caller pem_api.c:5148)
*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 192.168.163.12 START (0) Deleted mobile LWAPP rule on AP [78:72:5d:fd:fc:c0]
*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 0 PMK-remove groupcast messages sent
*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 Deleted global PMK cache and MSCB PMKID/PMK cache entry for the client
*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 Deleting mobile on AP 78:72:5d:fd:fc:c0(0)
*spamApTask0: Mar 20 10:06:32.067: 5c:f9:38:8c:5e:68 Setting DEL_MOBILE (seqno 0, action 6) ack state for STA on AP 78:72:5d:fd:fc:c0
*apfReceiveTask: Mar 20 10:06:32.078: 5c:f9:38:8c:5e:68 apf_ms.c:5565 Clearing the SGT 0 of mobile
*apfReceiveTask: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Received management frame REASSOCIATION REQUEST on BSSID 78:72:5d:f8:7c:61 destination addr 78:72:5d:f8:7c:61
*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Updating 11r vendor IE

*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Processing assoc-req station:5c:f9:38:8c:5e:68 AP:78:72:5d:f8:7c:60-00 ssid : STAFF thread:5e0bef70
*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 apfCreateMobileStationEntryWrapper (apf_ms.c:4446) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:f8:7c:60 from Idle to Idle

*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Adding mobile on LWAPP AP 78:72:5d:f8:7c:60(0)
*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Created Acct-Session-ID (5c9210a9/5c:f9:38:8c:5e:68/748) for the mobile
*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Setting hasApChnaged Flag as true. It is a fresh assoc request.

*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Setting RTTS enabled to 0
*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Reassociation received from mobile on BSSID 78:72:5d:f8:7c:61 AP WAP07
*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Station: 5C:F9:38:8C:5E:68 trying to join WLAN with RSSI -65. Checking for XOR roam conditions on AP: 78:72:5D:F8:7C:60 Slot: 0
*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Station: 5C:F9:38:8C:5E:68 is associating to AP 78:72:5D:F8:7C:60 which is not XOR roam capable
*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Global 200 Clients are allowed to AP radio

*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Max Client Trap Threshold: 0 cur: 8

*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Updated local bridging VLAN to 0 while applying WLAN policy
*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Updated session timeout to 0 and Sleep timeout to 720 while applying WLAN policy
*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 override for default ap group, marking intgrp NULL
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 0 Quarantine Vlan 0 Access Vlan 0

*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Not re-applying interface policy for local switching Client

*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 After applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 0

*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:3274)
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 0.0.0.0 START (0) Changing Url ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255),Default action is '0' --- (caller apf_policy.c:3294)
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:3315)
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Values before applying NASID - interfacetype:0, ovrd:0, mscb nasid:, interface nasid:, APgrpset:0
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User - 0
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Check before Setting the NAS Id to WLAN specific Id ''
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 apf_policy.c:2559 Assigning the SGT 0 to mobile (earlier sgt 0)
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 In processSsidIE:7088 setting Central switched to FALSE
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Set Clinet MSCB as Central Association Disabled
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Applying site-specific Local Bridging override for station 5c:f9:38:8c:5e:68 - vapId 2, site 'default-group', interface 'management'
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Applying Local Bridging Interface Policy for station 5c:f9:38:8c:5e:68 - vlan 0, interface id 0, interface 'management', nasId:''
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Set Clinet Non AP specific WLAN apfMsAccessVlan = 602
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 This apfMsAccessVlan may be changed later from AAA after L2 Auth
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Cleared localSwitchingVlan, may be assigned later based on AAA override
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 STA - rates (7): 18 152 36 48 72 96 108 0 0 0 0 0 0 0 0 0
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_0: Mar 20 10:06:33.515: RSNIE in Assoc. Req.: (20)

*apfMsConnTask_0: Mar 20 10:06:33.515: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_0: Mar 20 10:06:33.515: [0016] ac 02 00 00

*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Processing RSN IE type 48, length 20 for mobile 5c:f9:38:8c:5e:68
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Selected Unicast cipher CCMP128 for client device
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Received 802.11i PSK key management suite, enabling Authentication
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 RSN Capabilities: 0
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 non-11w Capable mobile
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Received RSN IE with 0 PMKIDs from mobile 5c:f9:38:8c:5e:68
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Assigning flex webauth IPv4-ACL ID :65535, IPv6-ACL ID:65535 for AP WLAN ID : 2
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Assigned flex post-auth IPv4-ACL ID :65535, IPv6-ACL ID:65535 for AP WLAN ID : 2
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Updating AID for REAP AP Client 78:72:5d:f8:7c:60 - AID ===> 169
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 apfVapSecurity=0x40004000 L2=16384 SkipWeb=0
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 AuthenticationRequired = 1
*apfMsConnTask_0: Mar 20 10:06:33.516: 5c:f9:38:8c:5e:68 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_0: Mar 20 10:06:33.516: 5c:f9:38:8c:5e:68 Encryption policy is set to 0x80000001
*apfMsConnTask_0: Mar 20 10:06:33.516: 5c:f9:38:8c:5e:68 Setting the action to initiate 1x 4 way handshake upon Add_Mobile_Ack for station with encrypt policy:[80000001]
*apfMsConnTask_0: Mar 20 10:06:33.516: 5c:f9:38:8c:5e:68 0.0.0.0 8021X_REQD (3) DHCP required on AP 78:72:5d:f8:7c:60 vapId 2 apVapId 2for this client
*apfMsConnTask_0: Mar 20 10:06:33.516: 5c:f9:38:8c:5e:68 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_0: Mar 20 10:06:33.516: 5c:f9:38:8c:5e:68 flex webauth acl id to be sent :65535 name : client acl id :65535 name :
*apfMsConnTask_0: Mar 20 10:06:33.516: 5c:f9:38:8c:5e:68 flex webauth ipv6 acl id to be sent :65535 name : client acl id :65535 name :
*apfMsConnTask_0: Mar 20 10:06:33.516: 5c:f9:38:8c:5e:68 Vlan while overriding the policy = -1
*apfMsConnTask_0: Mar 20 10:06:33.516: 5c:f9:38:8c:5e:68 sending to spamAddMobile vlanId -1 aclName = , flexAclId 65535

*apfMsConnTask_0: Mar 20 10:06:33.516: 5c:f9:38:8c:5e:68 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 78:72:5d:f8:7c:60 vapId 2 apVapId 2 flex acl-name: v6acl-name
*apfMsConnTask_0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 apfMsAssoStateInc
*apfMsConnTask_0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 apfMsWepPskStateInc
*apfMsConnTask_0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 apfPemAddUser2 (apf_policy.c:451) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:f8:7c:60 from Idle to Associated

*apfMsConnTask_0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 apfPemAddUser2:session timeout forstation 5c:f9:38:8c:5e:68 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 Sending assoc-resp with status 0 station:5c:f9:38:8c:5e:68 AP:78:72:5d:f8:7c:60-00 on apVapId 2
*apfMsConnTask_0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 Sending Assoc Response (status: '0') to station on AP WAP07 on BSSID 78:72:5d:f8:7c:61 ApVapId 2 Slot 0, mobility role 0
*apfMsConnTask_0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 apfProcessAssocReq (apf_80211.c:12199) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:f8:7c:60 from Associated to Associated

*spamApTask0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 Add SGT:0 to AP 78:72:5d:f8:7c:60
*spamApTask0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 Add CTS mobile SGT - Encoded the capwap payload for the mobile with SGT 0
*spamApTask0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 Flex Ipv6 pre-auth acl is not present, not Encoding Flex Ipv6 acl for add mobile Payload
*spamApTask0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 Flex Ipv6 post auth acl is not present, not updating add mobile Payload
*spamApTask0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 Successful transmission of LWAPP Add-Mobile to AP 78:72:5d:f8:7c:60 idx@50
*spamApTask0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 Setting ADD_MOBILE (idx 0, seqno 0, action 1, count 1004616088) ack state for STA on AP 78:72:5d:f8:7c:60
*spamApTask0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Received ADD_MOBILE ack - Initiating 1x to STA 5c:f9:38:8c:5e:68 (idx 50)
*spamApTask0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 APF Initiating 1x to STA 5c:f9:38:8c:5e:68
*spamApTask0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Sent dot1x auth initiate message for mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 dot1xProcessInitiate1XtoMobile to mobile station 5c:f9:38:8c:5e:68 (mscb 1, msg 1)
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 reauth_sm state transition 0 ---> 1 for mobile 5c:f9:38:8c:5e:68 at 1x_reauth_sm.c:47
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Normal psk client, full auth
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Creating a PKC PMKID Cache entry for station 5c:f9:38:8c:5e:68 (RSN 2)
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Resetting MSCB PMK Cache Entry @index 0 for station 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Setting active key cache index 8 ---> 8
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Setting active key cache index 8 ---> 0
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Created PMKID PMK Cache for BSSID 78:72:5d:f8:7c:61 at index 0 for station 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: New PMKID: (16)

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: [0000] f3 47 4e 6f 8b e2 ec de c9 f6 ab 2b 56 64 91 7e

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Initiating RSN PSK to mobile 5c:f9:38:8c:5e:68keyMgmtType : 0
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 unsetting PmkIdValidatedByAp
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 EAP-PARAM Debug - eap-params for Wlan-Id :2 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 dot1x - moving mobile 5c:f9:38:8c:5e:68 into Force Auth state
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Skipping EAP-Success to mobile 5c:f9:38:8c:5e:68 (encryptBit:0)
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Found an cache entry for BSSID 78:72:5d:f8:7c:61 in PMKID cache at index 0 of station 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Found an cache entry for BSSID 78:72:5d:f8:7c:61 in PMKID cache at index 0 of station 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: Including PMKID in M1 (16)

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: [0000] f3 47 4e 6f 8b e2 ec de c9 f6 ab 2b 56 64 91 7e

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: M1 - Key Data: (22)

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: [0000] dd 14 00 0f ac 04 f3 47 4e 6f 8b e2 ec de c9 f6

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: [0016] ab 2b 56 64 91 7e

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Starting key exchange to mobile 5c:f9:38:8c:5e:68, data packets will be dropped
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Sending EAPOL-Key Message to mobile 5c:f9:38:8c:5e:68
state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Allocating EAP Pkt for retransmission to mobile 5c:f9:38:8c:5e:68
*CAPWAP DATA: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 validating eapol pkt: key version = 2
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 Received EAPOL-Key from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 Received EAPOL-key in PTK_START state (message 2) from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 Encryption Policy: 4, PTK Key Length: 48
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 Successfully computed PTK from PMK!!!
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 Received valid MIC in EAPOL Key Message M2!!!!!
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 Compare RSN IE in association and EAPOL-M2 frame(rsnie_len :20, and grpMgmtCipherLen:0)
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 rsnieCapabilty = 0 rsnie_len =20
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 Dumping RSNIE received in Association request(len = 22):
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 00000000: 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0...............
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 00000010: 00 0f ac 02 00 00 ......
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 Dumping RSNIE received in EAPOL M2 (len = 20):
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 00000010: ac 02 00 00 ....
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 Stopping retransmission timer for mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.524: 5c:f9:38:8c:5e:68 key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.524: 5c:f9:38:8c:5e:68 Sending EAPOL-Key Message to mobile 5c:f9:38:8c:5e:68
state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.524: 5c:f9:38:8c:5e:68 Reusing allocated memory for EAP Pkt for retransmission to mobile 5c:f9:38:8c:5e:68
*CAPWAP DATA: Mar 20 10:06:33.525: 5c:f9:38:8c:5e:68 validating eapol pkt: key version = 2
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.525: 5c:f9:38:8c:5e:68 Received EAPOL-Key from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.525: 5c:f9:38:8c:5e:68 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.525: 5c:f9:38:8c:5e:68 key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Stopping retransmission timer for mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Freeing EAP Retransmit Bufer for mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 apfMs1xStateInc
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Mobility query, PEM State: L2AUTHCOMPLETE

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 L2AUTHCOMPLETE (4) NO release MSCB
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Building Mobile Announce :

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Building Client Payload:

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Client Ip: 0.0.0.0

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Client Vlan Ip: 10.10.130.10, Vlan mask : 255.255.255.128

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Client Vap Security: 1073758208

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Virtual Ip: 192.0.2.1

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 ssid: STAFF

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Building VlanIpPayload.

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 L2AUTHCOMPLETE (4) DHCP required on AP 78:72:5d:f8:7c:60 vapId 2 apVapId 2for this client
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Not Using WMM Compliance code qosCap 00
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 flex webauth acl id to be sent :65535 name : client acl id :65535 name :
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 flex webauth ipv6 acl id to be sent :65535 name : client acl id :65535 name :
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Vlan while overriding the policy = -1
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 sending to spamAddMobile vlanId -1 aclName = , flexAclId 65535

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 78:72:5d:f8:7c:60 vapId 2 apVapId 2 flex acl-name: v6acl-name
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state L2AUTHCOMPLETE (4)

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 7231, Adding TMP rule
*spamApTask0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Add SGT:0 to AP 78:72:5d:f8:7c:60
*spamApTask0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Add CTS mobile SGT - Encoded the capwap payload for the mobile with SGT 0
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Adding Fast Path rule
type = Airespace AP - Learn IP address
on AP 78:72:5d:f8:7c:60, slot 0, interface = 1, QOS = 0
IPv4 ACL ID = 255, IPv
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 1706, IntfId = 0 Local Bridging Vlan = 0, Local Bridging intf id = 0
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255,URL ACL ID 255,URL ACL Action 0)
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Updating info change db with CMX bitmap 0x0000
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) NO release MSCB
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Successfully Plumbed PTK session Keysfor mobile 5c:f9:38:8c:5e:68
*apfReceiveTask: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) mobility role update request from Unassociated to Local
Peer = 0.0.0.0, Old Anchor = 0.0.0.0, New Anchor = 10.10.130.10
*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 Created Cisco-Audit-Session-ID for the mobile: 0a820a0a000001dda910925c type: local
*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 Audit session id is created 0a820a0a000001dda910925c for mobility complete
*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 pemAdvanceState2 (pem_api.c:6735) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:f8:7c:60 from Associated to Associated

*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) State Update from Mobility-Incomplete to Mobility-Complete, mobility role=Local, client state=APF_MS_STATE_ASSOCIATED
*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 6869, Adding TMP rule
*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Replacing Fast Path rule
type = Airespace AP - Learn IP address
on AP 78:72:5d:f8:7c:60, slot 0, interface = 1, QOS = 0
IPv4 ACL ID = 255,
*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 1706, IntfId = 0 Local Bridging Vlan = 0, Local Bridging intf id = 0
*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255,URL ACL ID 255,URL ACL Action 0)
*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 Updating info change db with CMX bitmap 0x0000
*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) NO release MSCB
*spamApTask0: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 Flex Ipv6 pre-auth acl is not present, not Encoding Flex Ipv6 acl for add mobile Payload
*spamApTask0: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 Flex Ipv6 post auth acl is not present, not updating add mobile Payload
*pemReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
*pemReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
*spamApTask0: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 Successful transmission of LWAPP Add-Mobile to AP 78:72:5d:f8:7c:60 idx@51
*apfReceiveTask: Mar 20 10:06:34.683: 5c:f9:38:8c:5e:68 Recieved MS IPv4 Addr= 0.0.0.0
*apfReceiveTask: Mar 20 10:06:34.683: 5c:f9:38:8c:5e:68 Updating MS IPv6[1] Addr= fe80:0000:0000:0000:0cda:2b10:6584:4f3e
*apfReceiveTask: Mar 20 10:06:36.583: 5c:f9:38:8c:5e:68 WcdbClientUpdate: IP Binding from WCDB ip_learn_type 1, add_or_delete 1
*apfReceiveTask: Mar 20 10:06:36.583: 5c:f9:38:8c:5e:68 IPv4 Addr: 0:0:0:0

*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 WcdbClientUpdate: IP Binding from WCDB ip_learn_type 1, add_or_delete 1
*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 IPv4 Addr: 10:10:162:6

*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 dtlArpInsert: Add ARP entry IP 10.10.162.6, MAC 5c:f9:38:8c:5e:68, VLAN 0, INTF 1, Type 0, New 1 (caller apf_foreignap.c:1176)
,arp count = 26
*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 dtlArpSetType: Changing ARP Type from 0 ---> 1 for station 5c:f9:38:8c:5e:68
*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 apfMsRunStateInc
*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 10.10.162.6 DHCP_REQD (7) Change state to RUN (20) last state DHCP_REQD (7)

*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 Created Session Cache Entry with timeout 86388 for client. Type: Local
*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 apfCreatePmkCacheEntry: added a new pmk cache entry for 5c:f9:38:8c:5e:68

*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 Created audit session id (0a820a0a000001dda910925c) in pmk cache. type: local
*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 Adding Audit session ID payload in Mobility handoff

*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 0 PMK-update groupcast messages sent
*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 the value of url acl preserve flag is 0 for mobile 5c:f9:38:8c:5e:68 (caller pem_api.c:7854)
*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 Initiating Accounting request(0) update for mobile
*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 PemLocationConfigured [1]Adding VSA with NAS update and Role[1] with state[0]
*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 10.10.162.6 RUN (20) NO release MSCB
*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 Assigning Address 10.10.162.6 to mobile
*apfReceiveTask: Mar 20 10:06:36.635: 5c:f9:38:8c:5e:68 DHCP success event for client. Clearing dhcp failure count for interface management.
*apfReceiveTask: Mar 20 10:06:36.635: 5c:f9:38:8c:5e:68 DHCP success event for client. Clearing dhcp failure count for interface management.
*apfReceiveTask: Mar 20 10:06:36.635: 5c:f9:38:8c:5e:68 No DHCP scope for IP scope name none.
*pemReceiveTask: Mar 20 10:06:36.635: 5c:f9:38:8c:5e:68 10.10.162.6 Removed NPU entry.
*apfReceiveTask: Mar 20 10:06:37.740: 5c:f9:38:8c:5e:68 Recieved MS IPv4 Addr= 10.10.162.6
*apfReceiveTask: Mar 20 10:06:37.740: 5c:f9:38:8c:5e:68 Updating MS IPv6[1] Addr= fe80:0000:0000:0000:0cda:2b10:6584:4f3e
*apfReceiveTask: Mar 20 10:06:37.740: 5c:f9:38:8c:5e:68 WcdbClientUpdate: IP Binding from WCDB ip_learn_type 2, add_or_delete 1
*apfReceiveTask: Mar 20 10:06:37.740: 5c:f9:38:8c:5e:68 IPv4 Addr: 10:10:162:6

*apfReceiveTask: Mar 20 10:06:37.741: 5c:f9:38:8c:5e:68 Static IP client associated to interface management which cannot support client subnet.
*apfReceiveTask: Mar 20 10:06:37.741: 5c:f9:38:8c:5e:68 No DHCP scope for IP scope name none.
*apfReceiveTask: Mar 20 10:06:38.065: 5c:f9:38:8c:5e:68 WcdbClientUpdate: IP Binding from WCDB ip_learn_type 2, add_or_delete 1
*apfReceiveTask: Mar 20 10:06:38.065: 5c:f9:38:8c:5e:68 IPv4 Addr: 10:10:162:6

*apfReceiveTask: Mar 20 10:06:38.065: 5c:f9:38:8c:5e:68 Static IP client associated to interface management which cannot support client subnet.
*apfReceiveTask: Mar 20 10:06:38.065: 5c:f9:38:8c:5e:68 No DHCP scope for IP scope name none.
*apfReceiveTask: Mar 20 10:06:38.391: 5c:f9:38:8c:5e:68 WcdbClientUpdate: IP Binding from WCDB ip_learn_type 2, add_or_delete 1
*apfReceiveTask: Mar 20 10:06:38.391: 5c:f9:38:8c:5e:68 IPv4 Addr: 10:10:162:6

Re: Mobility express - Roaming

3xIT — Wed, 20 Mar 2019 10:23:39 GMT

Also, I asked the user to delete second Wi-Fi on her MacBook because sometimes she is connected to Guest and sometimes to Staff which is really wired and maybe this is causing problems. She is supposed to use "Staff" and nothing else but it looks she tried "Guest" before and now she is automatically jumping from one to other. Will see if this helps.

Re: Mobility express - Roaming

patoberli — Wed, 20 Mar 2019 14:23:24 GMT

Ah look this:
*apfMsConnTask_0: Mar 20 10:06:15.480: 5c:f9:38:8c:5e:68 Sending Assoc Response (status: 'maximum station reached') to station on AP WAP07 on BSSID 78:72:5d:f8:7c:62 ApVapId 3 Slot 0, mobility role 1
There is this bug here, but I don't think you hit it:
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCve81314/?rfs=iqvred

But then there is this bug here:
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvj14972/?rfs=iqvred
That one you actually might be hitting. Try the workaround listed there, maybe it helps.

Can you provide me with the output of show wlan #, where # is the number of the SSID (either 1 or 2 with two configured SSIDs)?

Re: Mobility express - Roaming

3xIT — Thu, 21 Mar 2019 10:36:07 GMT

I am waiting for users approval to reboot and I have also added "config ap aid-audit enable"

Here is the output of show wlan 2 (Staff)
(Cisco Controller) >show wlan 2

WLAN Identifier.................................. 2
Profile Name..................................... STAFF
Network Name (SSID).............................. STAFF
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled
Network Admission Control
Client Profiling Status
Radius Profiling ............................ Disabled
DHCP ....................................... Disabled
HTTP ....................................... Disabled
Local Profiling ............................. Disabled
DHCP ....................................... Disabled
HTTP ....................................... Disabled
Radius-NAC State............................... Disabled
SNMP-NAC State................................. Disabled
Quarantine VLAN................................ 0
Maximum Clients Allowed.......................... Unlimited
Security Group Tag............................... Unknown(0)

--More-- or (q)uit
Maximum number of Clients per AP Radio........... 200
ATF Policy....................................... 0
Number of Active Clients......................... 3
Exclusionlist Timeout............................ 60 seconds
Session Timeout.................................. 86400 seconds
User Idle Timeout................................ Disabled
Sleep Client..................................... disable
Sleep Client Timeout............................. 720 minutes
Sleep Client Auto Auth Feature................... Enabled
Web Auth Captive Bypass Mode..................... None
User Idle Threshold.............................. 0 Bytes
NAS-identifier................................... none
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ management
Multicast Interface.............................. Not Configured
WLAN IPv4 ACL.................................... unconfigured
WLAN IPv6 ACL.................................... unconfigured
WLAN Layer2 ACL.................................. unconfigured
mDNS Status...................................... Disabled
mDNS Profile Name................................ unconfigured
DHCP Server...................................... Default
DHCP Scope Name.................................. none

--More-- or (q)uit
Central NAT...................................... Disabled
Central NAT Peer-Peer Blocking................... Disabled
DHCP Address Assignment Required................. Disabled
Static IP client tunneling....................... Disabled
Tunnel Profile................................... Unconfigured
EoGRE Override VLAN state........................ disable
EoGRE Override VLAN ID........................... 0
Quality of Service............................... Silver
Per-BSSID Rate Limits............................ Upstream Downstream
Average Data Rate................................ 0 0
Average Realtime Data Rate....................... 0 0
Burst Data Rate.................................. 0 0
Burst Realtime Data Rate......................... 0 0
Per-Client Rate Limits........................... Upstream Downstream
Average Data Rate................................ 0 0
Average Realtime Data Rate....................... 0 0
Burst Data Rate.................................. 0 0
Burst Realtime Data Rate......................... 0 0
Per-WLAN Rate Limits............................. Upstream Downstream
Average Data Rate................................ 0 0
Average Realtime Data Rate....................... 0 0
Burst Data Rate.................................. 0 0
Burst Realtime Data Rate......................... 0 0

--More-- or (q)uit
Scan Defer Priority.............................. 4,5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Allowed
WMM UAPSD Compliant Client Support............... Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Enabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... 802.1P (Tag=0)
Passive Client Feature........................... Disabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... All
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
Authentication................................ Disabled
Accounting.................................... Global Servers
Interim Update............................. Enabled
Interim Update Interval.................... 0
Framed IPv6 Acct AVP ...................... Prefix
Authorization ACA............................. Disabled
Accounting ACA................................ Disabled

--More-- or (q)uit
Dynamic Interface............................. Disabled
Dynamic Interface Priority.................... wlan
Local EAP Authentication......................... Disabled
Radius NAI-Realm................................. Disabled
Radius Authentication caching.................... Disabled
Mu-Mimo.......................................... Enabled
Security

802.11 Authentication:........................ Open System
FT Support.................................... Adaptive
Static WEP Keys............................... Disabled
802.1X........................................ Disabled
Wi-Fi Protected Access (WPA/WPA2)............. Enabled
WPA (SSN IE)............................... Disabled
WPA2 (RSN IE).............................. Enabled
TKIP Cipher............................. Disabled
AES Cipher.............................. Enabled
CCMP256 Cipher.......................... Disabled
GCMP128 Cipher.......................... Disabled
GCMP256 Cipher.......................... Disabled
OSEN IE.................................... Disabled
Auth Key Management
802.1x.................................. Disabled

--More-- or (q)uit
PSK..................................... Enabled
CCKM.................................... Disabled
FT-1X(802.11r).......................... Disabled
FT-PSK(802.11r)......................... Disabled
PMF-1X(802.11w)......................... Disabled
PMF-PSK(802.11w)........................ Disabled
OSEN-1X................................. Disabled
SUITEB-1X............................... Disabled
SUITEB192-1X............................ Disabled
FT Reassociation Timeout................... 20
FT Over-The-DS mode........................ Enabled
GTK Randomization.......................... Disabled
SKC Cache Support.......................... Disabled
CCKM TSF Tolerance......................... 1000
Wi-Fi Direct policy configured................ Disabled
EAP-Passthrough............................... Disabled
CKIP ......................................... Disabled
Web Based Authentication...................... Disabled
Web Authentication Timeout.................... 300
Web-Passthrough............................... Disabled
Mac-auth-server............................... 0.0.0.0
Web-portal-server............................. 0.0.0.0
qrscan-des-key................................ 12345678

--More-- or (q)uit
Conditional Web Redirect...................... Disabled
Splash-Page Web Redirect...................... Disabled
Auto Anchor................................... Disabled
FlexConnect Local Switching................... Enabled
FlexConnect Central Association............... Disabled
flexconnect Central Dhcp Flag................. Disabled
flexconnect nat-pat Flag...................... Disabled
flexconnect Dns Override Flag................. Disabled
flexconnect PPPoE pass-through................ Disabled
flexconnect local-switching IP-source-guar.... Disabled
FlexConnect Vlan based Central Switching ..... Disabled
FlexConnect Local Authentication.............. Disabled
FlexConnect Learn IP Address.................. Enabled
Fleconnect Post-Auth IPv4 ACL................. Unconfigured
Fleconnect Post-Auth IPv6 ACL................. Unconfigured
Client MFP.................................... Optional
PMF........................................... Disabled
PMF Association Comeback Time................. 1
PMF SA Query RetryTimeout..................... 200
Tkip MIC Countermeasure Hold-down Timer....... 60
Eap-params.................................... Disabled
AVC Visibilty.................................... Disabled
Flex Avc Profile Name............................ STAFF

--More-- or (q)uit
OpenDns Profile Name............................. None
OpenDns Wlan Mode................................ ignore
OpenDns Wlan Dhcp Option 6....................... enable
Flow Monitor Name................................ None
Split Tunnel Configuration
Split Tunnel................................. Disabled
Call Snooping.................................... Disabled
Roamed Call Re-Anchor Policy..................... Disabled
SIP CAC Fail Send-486-Busy Policy................ Enabled
SIP CAC Fail Send Dis-Association Policy......... Disabled
KTS based CAC Policy............................. Disabled
Assisted Roaming Prediction Optimization......... Disabled
802.11k Neighbor List............................ Enabled
802.11k Neighbor List Dual Band.................. Disabled
802.11v Directed Multicast Service............... Enabled
802.11v BSS Max Idle Service..................... Enabled
802.11v BSS Transition Service................... Enabled
802.11v BSS Transition Disassoc Imminent......... Disabled
802.11v BSS Transition Disassoc Timer............ 200
802.11v BSS Transition OpRoam Disassoc Timer..... 40
DMS DB is empty
Band Select...................................... Enabled
Load Balancing................................... Client-Count Based

--More-- or (q)uit
Multicast Buffer................................. Disabled
Universal Ap Admin............................... Disabled
Broadcast Tagging................................ Disabled
PRP.............................................. Disabled
Fast Receive..................................... Disabled

Mobility Anchor List
WLAN ID IP Address Status Priority
------- --------------- ------ --------

802.11u........................................ Disabled

MSAP Services.................................. Disabled

Local Policy
----------------
Priority Policy Name
-------- ---------------

QoS Fastlane Status.............................. Disable
Selective Reanchoring Status..................... Disable
Lobby Admin Access............................... Disabled

--More-- or (q)uit
Fabric Status
--------------

Fabric status.................................... Disable
Vnid Name........................................
Vnid............................................. 0
Applied SGT Tag.................................. 0
Peer Ip Address.................................. 0.0.0.0
Flex Acl Name....................................
Flex IPv6 Acl Name...............................
Flex Avc Policy Name.............................

U3-Interface................................... Disable

U3-Reporting Interval.......................... 30