The user does not receive IP, remaining as 0.0.0.0

PaulReveco — Sun, 05 Sep 2021 19:22:33 GMT

Hello, community

The user does not receive IP remaining as "0.0.0.0", The radius was verified and the test is without problems.

User status is "Radius NAC State:8021X_REQD".

This is one of the messages that catches my attention.

*DHCP Server: Sep 05 15:05:45.210: %DHCP-4-REQIP_NOT_PRESENT: dhcpd.c:686 Received a packet without a requested ip!.

DESCR: "Cisco 5500 Series Wireless LAN Controller"

sysinfo syslog system
(Cisco Controller) >show sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 8.3.143.0
Bootloader Version............................... 1.0.18
Field Recovery Image Version..................... 7.6.95.16
Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2
OUI File Update Time............................. Sun Sep 07 10:44:07 IST 2014

Build Type....................................... DATA + WPS

System Name......................................
System Location..................................
System Contact...................................
System ObjectID.................................. 1.3.6.1.4.1.9.1.1069
Redundancy Mode.................................. Disabled
IP Address....................................... 10.201.158.4
IPv6 Address..................................... ::
Last Reset....................................... Software reset
System Up Time................................... 314 days 5 hrs 18 mins 40 secs
System Timezone Location.........................
System Stats Realtime Interval................... 5

--More-- or (q)uit
System Stats Normal Interval..................... 180

Configured Country............................... US - United States
Operating Environment............................ Commercial (0 to 40 C)
Internal Temp Alarm Limits....................... 0 to 65 C
Internal Temperature............................. +41 C
External Temperature............................. +25 C
Fan Status....................................... OK

State of 802.11b Network......................... Enabled
State of 802.11a Network......................... Enabled
Number of WLANs.................................. 3
Number of Active Clients......................... 6

OUI Classification Failure Count................. 0

Burned-in MAC Address............................ 78:DA:6E:8A:BF:60
Power Supply 1................................... Present, OK
Power Supply 2................................... Present, OK
Maximum number of APs supported.................. 500
System Nas-Id....................................
WLC MIC Certificate Types........................ SHA1

(Cisco Controller) >test aaa show radius

Radius Test Request
Wlan-id........................................ 1
ApGroup Name................................... none
Radius Test Response

Radius Server Retry Status

*spamApTask0: Sep 05 15:10:04.325: %LWAPP-4-SIG_INFO1: spam_lrad.c:51650 Signature information; AP 5c:e1:76:81:00:80, alarm ON, standard sig NULL probe resp 1, track per-Macprecedence 2, hits 1, slot 0, channel 11, most offending MAC de:cb:bc:be:22:5c
*apfReceiveTask: Sep 05 15:10:01.551: %APF-4-MOBILESTATION_NOT_FOUND: apf_ms.c:7398 Could not find the mobile 34:7e:00:bf:99:11 in internal database
*dtlArpTask: Sep 05 15:09:57.787: %APF-4-SUBNET_MISMATCH_IP_ADD_ON_MSCB: apf_foreignap.c:2035 Subnet mismatches while registering IP address 192.0.0.64 with netmask 255.255.252.0 for client 00:95:69:88:00:62
*apfReceiveTask: Sep 05 15:09:51.147: %APF-4-MOBILESTATION_NOT_FOUND: apf_ms.c:7398 Could not find the mobile 00:95:69:88:00:62 in internal database
*idsTrackEventTask: Sep 05 15:09:49.325: %WPS-4-SIG_ALARM_OFF_CONT: sig_event.c:660 ...continue, source mac= DE:CB:BC:BE:22:5C
*idsTrackEventTask: Sep 05 15:09:49.325: %WPS-4-SIG_ALARM_OFF: sig_event.c:656 AP 5C:E1:76:81:00:80 : Alarm OFF, standard sig NULL probe resp 1, track=per-Mac preced=2 hits=1 slot=0 channel=11
*Dot1x_NW_MsgTask_4: Sep 05 15:08:59.803: %DOT1X-3-CLIENT_NOT_FOUND: dot1x_msg_task.c:1582 Unable to process 802.1X 1 msg - client 74:40:bb:75:cc:f4 not found
*apfReceiveTask: Sep 05 15:08:48.749: %APF-4-MOBILESTATION_NOT_FOUND: apf_ms.c:7398 Could not find the mobile 74:40:bb:75:cc:f4 in internal database
*idsTrackEventTask: Sep 05 15:08:20.702: %WPS-4-SIG_ALARM_OFF_CONT: sig_event.c:660 ...continue, source mac= DE:CB:BC:96:08:74
*idsTrackEventTask: Sep 05 15:08:20.702: %WPS-4-SIG_ALARM_OFF: sig_event.c:656 AP 6C:71:0D:FF:45:A0 : Alarm OFF, standard sig NULL probe resp 1, track=per-Mac preced=2 hits=1 slot=0 channel=1
*spamApTask1: Sep 05 15:08:20.258: %LWAPP-4-SIG_INFO1: spam_lrad.c:51650 Signature information; AP 5c:e1:76:81:0a:80, alarm ON, standard sig NULL probe resp 1, track per-Macprecedence 2, hits 1, slot 0, channel 1, most offending MAC de:cb:bc:96:08:74
*apfReceiveTask: Sep 05 15:08:13.143: %APF-4-MOBILESTATION_NOT_FOUND: apf_ms.c:7398 Could not find the mobile c8:ff:28:d9:c5:4a in internal database
*spamApTask4: Sep 05 15:07:16.395: %LWAPP-4-SIG_INFO1: spam_lrad.c:51650 Signature information; AP a4:b4:39:41:97:c0, alarm ON, standard sig NULL probe resp 1, track per-Macprecedence 2, hits 1, slot 0, channel 11, most offending MAC de:cb:bc:be:22:5c
*idsTrackEventTask: Sep 05 15:06:54.395: %WPS-4-SIG_ALARM_OFF_CONT: sig_event.c:660 ...continue, source mac= DE:CB:BC:BE:22:5C
*idsTrackEventTask: Sep 05 15:06:54.395: %WPS-4-SIG_ALARM_OFF: sig_event.c:656 AP A4:B4:39:41:97:C0 : Alarm OFF, standard sig NULL probe resp 1, track=per-Mac preced=2 hits=1 slot=0 channel=11
*apfReceiveTask: Sep 05 15:06:37.342: %APF-4-MOBILESTATION_NOT_FOUND: apf_ms.c:7398 Could not find the mobile 92:cd:33:a4:2b:b6 in internal database
*apfReceiveTask: Sep 05 15:06:31.541: %APF-4-MOBILESTATION_NOT_FOUND: apf_ms.c:7398 Could not find the mobile 00:b8:b6:a2:bf:22 in internal database
*DHCP Server: Sep 05 15:05:45.210: %DHCP-4-REQIP_NOT_PRESENT: dhcpd.c:686 Received a packet without a requested ip!.
*apfReceiveTask: Sep 05 15:05:33.972: %APF-4-MOBILESTATION_NOT_FOUND: apf_ms.c:7398 Could not find the mobile 20:f5:43:78:a0:85 in internal database
*dtlArpTask: Sep 05 15:04:31.252: %APF-4-SUBNET_MISMATCH_IP_ADD_ON_MSCB: apf_foreignap.c:2035 Subnet mismatches while registering IP address 192.0.0.64 with netmask 255.255.252.0 for client 00:95:69:88:00:62
*apfReceiveTask: Sep 05 15:04:25.543: %APF-4-MOBILESTATION_NOT_FOUND: apf_ms.c:7398 Could not find the mobile 00:95:69:88:00:62 in internal database
*spamApTask0: Sep 05 15:04:03.313: %LWAPP-4-SIG_INFO1: spam_lrad.c:51650 Signature information; AP 5c:e1:76:81:00:80, alarm ON, standard sig NULL probe resp 1, track per-Macprecedence 2, hits 1, slot 0, channel 11, most offending MAC de:cb:bc:be:22:5c
*Dot1x_NW_MsgTask_4: Sep 05 15:03:58.189: %DOT1X-3-CLIENT_NOT_FOUND: dot1x_msg_task.c:1582 Unable to process 802.1X 1 msg - client 74:40:bb:75:cc:f4 not found
*idsTrackEventTask: Sep 05 15:03:54.313: %WPS-4-SIG_ALARM_OFF_CONT: sig_event.c:660 ...continue, source mac= DE:CB:BC:BE:22:5C
*idsTrackEventTask: Sep 05 15:03:54.313: %WPS-4-SIG_ALARM_OFF: sig_event.c:656 AP 5C:E1:76:81:00:80 : Alarm OFF, standard sig NULL probe resp 1, track=per-Mac preced=2 hits=1 slot=0 channel=11
*apfReceiveTask: Sep 05 15:03:50.149: %APF-4-MOBILESTATION_NOT_FOUND: apf_ms.c:7398
------------- ----- ------
10.201.158.7 1 Success

Authentication Response:
Result Code: Success

Attributes Values
---------- ------
User-Name wifitest
Class CACS:acs-pdi01/419819859/11001

(Cisco Controller) >show wlan 1

WLAN Identifier.................................. 1
Profile Name..................................... Funcionarios
Network Name (SSID).............................. QEJ
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled
Network Admission Control
Client Profiling Status
Radius Profiling ............................ Disabled
DHCP ....................................... Disabled
HTTP ....................................... Disabled
Local Profiling ............................. Disabled
DHCP ....................................... Disabled
HTTP ....................................... Disabled
Radius-NAC State............................... Disabled
SNMP-NAC State................................. Disabled
Quarantine VLAN................................ 0
Maximum Clients Allowed.......................... Unlimited
Maximum number of Clients per AP Radio........... 200

--More-- or (q)uit
ATF Policy....................................... 0
Number of Active Clients......................... -19
Exclusionlist Timeout............................ 60 seconds
Session Timeout.................................. 1800 seconds
User Idle Timeout................................ Disabled
Sleep Client..................................... disable
Sleep Client Timeout............................. 720 minutes
User Idle Threshold.............................. 0 Bytes
NAS-identifier................................... none
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ management
Multicast Interface.............................. Not Configured
WLAN IPv4 ACL.................................... unconfigured
WLAN IPv6 ACL.................................... unconfigured
WLAN Layer2 ACL.................................. unconfigured
WLAN URL ACL..................................... unconfigured
mDNS Status...................................... Disabled
mDNS Profile Name................................ unconfigured
DHCP Server...................................... Default
DHCP Address Assignment Required................. Disabled
Static IP client tunneling....................... Disabled
Tunnel Profile................................... Unconfigured

--More-- or (q)uit
PMIPv6 Mobility Type............................. none
PMIPv6 MAG Profile........................... Unconfigured
PMIPv6 Default Realm......................... Unconfigured
PMIPv6 NAI Type.............................. Hexadecimal
PMIPv6 MAG location.......................... AP
Quality of Service............................... Silver
Per-SSID Rate Limits............................. Upstream Downstream
Average Data Rate................................ 0 0
Average Realtime Data Rate....................... 0 0
Burst Data Rate.................................. 0 0
Burst Realtime Data Rate......................... 0 0
Per-Client Rate Limits........................... Upstream Downstream
Average Data Rate................................ 0 0
Average Realtime Data Rate....................... 0 0
Burst Data Rate.................................. 0 0
Burst Realtime Data Rate......................... 0 0
Scan Defer Priority.............................. 4,5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Allowed
WMM UAPSD Compliant Client Support............... Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Disabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled

--More-- or (q)uit
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... 802.1P (Tag=0)
Passive Client Feature........................... Enabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... All
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
Authentication................................ 10.201.158.7 1812 *
Accounting.................................... 10.201.158.7 1813 *
Interim Update............................. Enabled
Interim Update Interval.................... 0
Framed IPv6 Acct AVP ...................... Prefix
Dynamic Interface............................. Disabled
Dynamic Interface Priority.................... wlan
Local EAP Authentication......................... Disabled
Radius NAI-Realm................................. Disabled
Mu-Mimo.......................................... Enabled
Security

802.11 Authentication:........................ Open System
FT Support.................................... Disabled

--More-- or (q)uit
Static WEP Keys............................... Disabled
802.1X........................................ Disabled
Wi-Fi Protected Access (WPA/WPA2)............. Enabled
WPA (SSN IE)............................... Disabled
WPA2 (RSN IE).............................. Enabled
TKIP Cipher............................. Disabled
AES Cipher.............................. Enabled
CCMP256 Cipher.......................... Disabled
GCMP128 Cipher.......................... Disabled
GCMP256 Cipher.......................... Disabled
OSEN IE.................................... Disabled
Auth Key Management
802.1x.................................. Enabled
PSK..................................... Disabled
CCKM.................................... Disabled
FT-1X(802.11r).......................... Disabled
FT-PSK(802.11r)......................... Disabled
PMF-1X(802.11w)......................... Disabled
PMF-PSK(802.11w)........................ Disabled
OSEN-1X................................. Disabled
SUITEB-1X............................... Disabled
SUITEB192-1X............................ Disabled
FT Reassociation Timeout................... 20

--More-- or (q)uit
FT Over-The-DS mode........................ Disabled
GTK Randomization.......................... Disabled
SKC Cache Support.......................... Disabled
CCKM TSF Tolerance......................... 1000
Wi-Fi Direct policy configured................ Disabled
EAP-Passthrough............................... Disabled
CKIP ......................................... Disabled
Web Based Authentication...................... Disabled
Web Authentication Timeout.................... 300
Web-Passthrough............................... Disabled
Mac-auth-server............................... 0.0.0.0
Web-portal-server............................. 0.0.0.0
Conditional Web Redirect...................... Disabled
Splash-Page Web Redirect...................... Disabled
Auto Anchor................................... Disabled
FlexConnect Local Switching................... Enabled
FlexConnect Central Association............... Disabled
flexconnect Central Dhcp Flag................. Disabled
flexconnect nat-pat Flag...................... Disabled
flexconnect Dns Override Flag................. Disabled
flexconnect PPPoE pass-through................ Disabled
flexconnect local-switching IP-source-guar.... Disabled
FlexConnect Vlan based Central Switching ..... Disabled

--More-- or (q)uit
FlexConnect Local Authentication.............. Disabled
FlexConnect Learn IP Address.................. Enabled
Client MFP.................................... Optional
PMF........................................... Disabled
PMF Association Comeback Time................. 1
PMF SA Query RetryTimeout..................... 200
Tkip MIC Countermeasure Hold-down Timer....... 60
Eap-params.................................... Disabled
AVC Visibilty.................................... Disabled
AVC Profile Name................................. None
Flex Avc Profile Name............................ None
Flow Monitor Name................................ None
Split Tunnel Configuration
Split Tunnel................................. Disabled
Call Snooping.................................... Disabled
Roamed Call Re-Anchor Policy..................... Disabled
SIP CAC Fail Send-486-Busy Policy................ Enabled
SIP CAC Fail Send Dis-Association Policy......... Disabled
KTS based CAC Policy............................. Disabled
Assisted Roaming Prediction Optimization......... Disabled
802.11k Neighbor List............................ Disabled
802.11k Neighbor List Dual Band.................. Disabled
802.11v Directed Multicast Service............... Disabled

--More-- or (q)uit
802.11v BSS Max Idle Service..................... Enabled
802.11v BSS Transition Service................... Disabled
802.11v BSS Transition Disassoc Imminent......... Disabled
802.11v BSS Transition Disassoc Timer............ 200
802.11v BSS Transition OpRoam Disassoc Timer..... 40
DMS DB is empty
Band Select...................................... Enabled
Load Balancing................................... Disabled
Multicast Buffer................................. Disabled
Universal Ap Admin............................... Disabled
Broadcast Tagging................................ Disabled

Mobility Anchor List
WLAN ID IP Address Status Priority
------- --------------- ------ --------

802.11u........................................ Disabled

MSAP Services.................................. Disabled

Local Policy
----------------
Priority Policy Name

--More-- or (q)uit
-------- ---------------

Lync State ...................................... Disabled
Audio QoS Policy................................. Silver
Video QoS Policy................................. Silver
App-Share QoS Policy............................. Silver
File Transfer QoS Policy......................... Silver
QoS Fastlane Status.............................. Disable
Selective Reanchoring Status..................... Disable

Re: The user does not receive IP, remaining as 0.0.0.0

Leo Laohoo — Mon, 06 Sep 2021 00:02:01 GMT

Create an SSID with open authentication and check.

Re: The user does not receive IP, remaining as 0.0.0.0

PaulReveco — Mon, 06 Sep 2021 12:06:03 GMT

Authentication was removed and they began to take IP. The ACS administrator does not observe problems with his equipment. It could be some parameter that the WLC is missing, such as timeout.

Re: The user does not receive IP, remaining as 0.0.0.0

Leo Laohoo — Mon, 06 Sep 2021 12:42:34 GMT

Is "IP Address Required" ticked?

Re: The user does not receive IP, remaining as 0.0.0.0

Arshad Safrulla — Mon, 06 Sep 2021 19:25:54 GMT

Is the ACS doing any kind of Dynamic VLAN assignment? If so you need to have AAA overide enabled.

Also make sure that the client driver is updated and running the latest.

Re: The user does not receive IP, remaining as 0.0.0.0

Sandeep Choudhary — Tue, 07 Sep 2021 12:30:57 GMT

can you paste the output of this command: debug client <mac address>

Regards

Dont forget to arte helpful posts

topic Re: The user does not receive IP, remaining as 0.0.0.0 in Wireless

The user does not receive IP, remaining as 0.0.0.0

Re: The user does not receive IP, remaining as 0.0.0.0

Re: The user does not receive IP, remaining as 0.0.0.0

Re: The user does not receive IP, remaining as 0.0.0.0

Re: The user does not receive IP, remaining as 0.0.0.0

Re: The user does not receive IP, remaining as 0.0.0.0