topic Re: Regarding Corp-Mobile SSID in Wireless

Regarding Corp-Mobile SSID

jain.manish94 — Mon, 05 Jul 2021 17:39:00 GMT

Hello Team,

Please help me out to resolve the issue.

ISSue : there are some users at the site are able to connect with Corp-Mobile SSID successfully but some are not able to connect in same environment. i am attaching all screen shots and Debug logs from Central WLC and Anchor WLC.

There is only one single SSID.

There is only one single Central WLC.

there is only one single Anchor WLC.

There is only one single Radius server.

There is only one single Intune Server for mobile enrollment.

i am not understanding why for user iphone users are not able to connect in same network but some iphone users are connecting successfully.

This is only Iphone ios device issue.

---------------------------------------------

From Central WLC

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2019.07.01 16:29:34 =~=~=~=~=~=~=~=~=~=~=~=
login as:

(Cisco Controller)
User: pa6nwadmin
Password:**********
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >debug client m 00:56:CD:BF:B7:E2

(Cisco Controller) >*RRM-CLNT-5_0: May 22 01:24:26.955: [rrmClientSendNeighborCtrl] AP mac:20:4c:9e:0e:c7:50 slot:1Measurement Interval: b4

*apfMsConnTask_1: Jul 01 06:34:12.380: 00:56:cd:bf:b7:e2 Processing assoc-req station:00:56:cd:bf:b7:e2 AP:00:fe:c8:be:d9:d0-00 ssid : CORP-MOBILE-WLAN thread:18d07600
*spamApTask4: Jul 01 06:34:12.527: 00:56:cd:bf:b7:e2 Sent dot1x auth initiate message for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.527: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 1 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:47
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.527: 00:56:cd:bf:b7:e2 EAP-PARAM Debug - eap-params for Wlan-Id :5 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.527: 00:56:cd:bf:b7:e2 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.527: 00:56:cd:bf:b7:e2 Station 00:56:cd:bf:b7:e2 setting dot1x reauth timeout = 36000
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.527: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Connecting state
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.527: 00:56:cd:bf:b7:e2 Sending EAP-Request/Identity to mobile 00:56:cd:bf:b7:e2 (EAP Id 1)
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.737: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.737: 00:56:cd:bf:b7:e2 Received Identity Response (count=1) from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.737: 00:56:cd:bf:b7:e2 Resetting reauth count 1 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.737: 00:56:cd:bf:b7:e2 EAP State update from Connecting to Authenticating for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.737: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Authenticating state
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.737: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.754: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.754: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=2) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.754: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 2)
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.754: 00:56:cd:bf:b7:e2 Allocating EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.923: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.923: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.923: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.937: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.937: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 3)
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.157: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.157: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 3, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.157: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.157: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.169: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.169: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 4)
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.169: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.359: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.359: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 4, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.359: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.359: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.371: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.371: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=5) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.371: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 5)
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.371: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.584: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.584: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 5, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.584: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2

(Cisco Controller) >*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.584: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*spamApTask4: Jul 01 06:35:22.563: 00:56:cd:bf:b7:e2 Received DELETE mobile, reason UNKNOWN, from AP 00:fe:c8:be:d9:d0, slot 0 ...cleaning up mscb
*spamApTask4: Jul 01 06:35:22.563: 00:56:cd:bf:b7:e2 apfMsDeleteByMscb Scheduling mobile for deletion with deleteReason 15, reasonCode 1

*spamApTask4: Jul 01 06:35:22.563: 00:56:cd:bf:b7:e2 Scheduling deletion of Mobile Station: (callerId: 30) in 1 seconds
*osapiBsnTimer: Jul 01 06:35:23.407: 00:56:cd:bf:b7:e2 apfMsExpireCallback (apf_ms.c:638) Expiring Mobile!
*apfReceiveTask: Jul 01 06:35:23.407: 00:56:cd:bf:b7:e2 apfMsExpireMobileStation (apf_ms.c:7442) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Associated to Disassociated

*apfReceiveTask: Jul 01 06:35:23.407: 00:56:cd:bf:b7:e2 Freeing EAP Retransmit Bufer for mobile 00:56:cd:bf:b7:e2
*apfReceiveTask: Jul 01 06:35:23.407: 00:56:cd:bf:b7:e2 apfMsAssoStateDec
*apfReceiveTask: Jul 01 06:35:23.407: 00:56:cd:bf:b7:e2 apfMsExpireMobileStation (apf_ms.c:7581) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Disassociated to Idle

*apfReceiveTask: Jul 01 06:35:23.407: 00:56:cd:bf:b7:e2 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfReceiveTask: Jul 01 06:35:23.407: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Deleted mobile LWAPP rule on AP [00:fe:c8:be:d9:d0]
*apfReceiveTask: Jul 01 06:35:23.407: 00:56:cd:bf:b7:e2 Deleting mobile on AP 00:fe:c8:be:d9:d0(0)
*spamApTask4: Jul 01 06:35:23.552: 00:56:cd:bf:b7:e2 apfUpdateDeleteAckInMscb (apf_api.c:50821) Expiring Mobile!
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Processing assoc-req station:00:56:cd:bf:b7:e2 AP:00:fe:c8:be:d9:d0-00 ssid : CORP-MOBILE-WLAN thread:18d07600
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Created Acct-Session-ID (5d19a9b1/00:56:cd:bf:b7:e2/1113697) for the mobile
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Adding mobile on LWAPP AP 00:fe:c8:be:d9:d0(0)
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Association received from mobile on BSSID 00:fe:c8:be:d9:d4 AP bsacnwwa89g-VS
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Station: 00:56:CD:BF:B7:E2 11v BSS Transition not enabled on the AP 00:FE:C8:BE:D9:D0
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Global 200 Clients are allowed to AP radio

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Max Client Trap Threshold: 0 cur: 13

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 override for default ap group, marking intgrp NULL
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 0 Quarantine Vlan 0 Access Vlan 0

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Re-applying interface policy for client

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2711)
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2732)
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User - 0
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 In processSsidIE:6332 setting Central switched to TRUE
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 In processSsidIE:6335 apVapId = 5 and Split Acl Id = 65535
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Applying site-specific Local Bridging override for station 00:56:cd:bf:b7:e2 - vapId 5, site 'SAC2', interface 'management'
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Applying Local Bridging Interface Policy for station 00:56:cd:bf:b7:e2 - vlan 2409, interface id 0, interface 'management'
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 override from ap group, removing intf group from mscb
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Applying site-specific override for station 00:56:cd:bf:b7:e2 - vapId 5, site 'SAC2', interface 'management'
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 2409

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Re-applying interface policy for client

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2711)
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2732)
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 STA - rates (8): 130 132 139 150 36 48 72 108 0 0 0 0 0 0 0 0
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_1: Jul 01 06:35:29.600: RSNIE in Assoc. Req.: (20)

*apfMsConnTask_1: Jul 01 06:35:29.600: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_1: Jul 01 06:35:29.600: [0016] ac 01 0c 00

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Processing RSN IE type 48, length 20 for mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Received 802.11i 802.1X key management suite, enabling dot1x Authentication
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 RSN Capabilities: 12
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Marking Mobile as non-11w Capable
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Received RSN IE with 0 PMKIDs from mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Setting active key cache index 8 ---> 8
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 unsetting PmkIdValidatedByAp
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Updating AID for REAP AP Client 00:fe:c8:be:d9:d0 - AID ===> 16
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 AuthenticationRequired = 1
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Encryption policy is set to 0x80000001
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Vlan while overriding the policy = -1
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 sending to spamAddMobile vlanId -1 flex aclName = , flexAclId 65535

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 00:fe:c8:be:d9:d0 vapId 5 apVapId 5 flex-acl-name:
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 apfMsAssoStateInc
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 apfPemAddUser2 (apf_policy.c:362) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Idle to Associated

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 apfPemAddUser2:session timeout forstation 00:56:cd:bf:b7:e2 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Sending assoc-resp with status 0 station:00:56:cd:bf:b7:e2 AP:00:fe:c8:be:d9:d0-00 on apVapId 5
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Sending Assoc Response to station on BSSID 00:fe:c8:be:d9:d4 (status 0) ApVapId 5 Slot 0
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 apfProcessAssocReq (apf_80211.c:10552) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Associated to Associated

*spamApTask4: Jul 01 06:35:29.746: 00:56:cd:bf:b7:e2 Sent dot1x auth initiate message for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.746: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 1 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:47
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.746: 00:56:cd:bf:b7:e2 EAP-PARAM Debug - eap-params for Wlan-Id :5 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.746: 00:56:cd:bf:b7:e2 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.746: 00:56:cd:bf:b7:e2 Station 00:56:cd:bf:b7:e2 setting dot1x reauth timeout = 36000
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.746: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Connecting state
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.746: 00:56:cd:bf:b7:e2 Sending EAP-Request/Identity to mobile 00:56:cd:bf:b7:e2 (EAP Id 1)
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.899: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.899: 00:56:cd:bf:b7:e2 Resetting reauth count 1 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.899: 00:56:cd:bf:b7:e2 EAP State update from Connecting to Authenticating for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.899: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Authenticating state
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.899: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.916: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.916: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=2) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.916: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 2)
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.916: 00:56:cd:bf:b7:e2 Allocating EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*osapiBsnTimer: Jul 01 06:35:33.955: 00:56:cd:bf:b7:e2 802.1x 'timeoutEvt' Timer expired for station 00:56:cd:bf:b7:e2 and for message = M0
*Dot1x_NW_MsgTask_2: Jul 01 06:35:33.955: 00:56:cd:bf:b7:e2 Retransmit 1 of EAP-Request (length 10) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.105: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.105: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 2, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.105: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.105: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.120: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.120: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=3) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.120: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 3)
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.306: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.306: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 3, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.306: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.306: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.317: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.317: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 4)
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.317: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.520: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.520: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 4, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.520: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.520: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.532: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.532: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=5) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.532: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 5)
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.532: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.781: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.781: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 5, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.781: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.781: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:14.515: 00:56:cd:bf:b7:e2 Processing AAA Error 'Timeout' (-5) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:14.515: 00:56:cd:bf:b7:e2 Sent Deauthenticate to mobile on BSSID 00:fe:c8:be:d9:d4 slot 0(caller 1x_auth_pae.c:1636)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:14.515: 00:56:cd:bf:b7:e2 Deleting the PMK cache when de-authenticating the client.
*Dot1x_NW_MsgTask_2: Jul 01 06:36:14.515: 00:56:cd:bf:b7:e2 Global PMK Cache deletion failed.
*Dot1x_NW_MsgTask_2: Jul 01 06:36:14.515: 00:56:cd:bf:b7:e2 Scheduling deletion of Mobile Station: (callerId: 65) in 10 seconds
*Dot1x_NW_MsgTask_2: Jul 01 06:36:14.515: 00:56:cd:bf:b7:e2 Freeing EAP Retransmit Bufer for mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Processing assoc-req station:00:56:cd:bf:b7:e2 AP:00:fe:c8:be:d9:d0-00 ssid : CORP-MOBILE-WLAN thread:18d07600
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Station: 00:56:CD:BF:B7:E2 11v BSS Transition not enabled on the AP 00:FE:C8:BE:D9:D0
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Reassociation received from mobile on BSSID 00:fe:c8:be:d9:d4 AP bsacnwwa89g-VS
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Station: 00:56:CD:BF:B7:E2 11v BSS Transition not enabled on the AP 00:FE:C8:BE:D9:D0
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Global 200 Clients are allowed to AP radio

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Max Client Trap Threshold: 0 cur: 14

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 override for default ap group, marking intgrp NULL
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 2409

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Re-applying interface policy for client

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2711)
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2732)
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User - 0
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 In processSsidIE:6332 setting Central switched to TRUE
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 In processSsidIE:6335 apVapId = 5 and Split Acl Id = 65535
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Applying site-specific Local Bridging override for station 00:56:cd:bf:b7:e2 - vapId 5, site 'SAC2', interface 'management'
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Applying Local Bridging Interface Policy for station 00:56:cd:bf:b7:e2 - vlan 2409, interface id 0, interface 'management'
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 override from ap group, removing intf group from mscb
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Applying site-specific override for station 00:56:cd:bf:b7:e2 - vapId 5, site 'SAC2', interface 'management'
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 2409

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Re-applying interface policy for client

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2732)
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_1: Jul 01 06:36:14.911: RSNIE in Assoc. Req.: (20)

*apfMsConnTask_1: Jul 01 06:36:14.911: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_1: Jul 01 06:36:14.911: [0016] ac 01 0c 00

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Processing RSN IE type 48, length 20 for mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Received 802.11i 802.1X key management suite, enabling dot1x Authentication
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 RSN Capabilities: 12
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Marking Mobile as non-11w Capable
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Received RSN IE with 0 PMKIDs from mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Setting active key cache index 8 ---> 8
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 unsetting PmkIdValidatedByAp
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Updating AID for REAP AP Client 00:fe:c8:be:d9:d0 - AID ===> 16
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 apfVapSecurity=0x6040 L2=16384 SkipWeb=0
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 AuthenticationRequired = 1
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Encryption policy is set to 0x80000001
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 sending to spamAddMobile vlanId -1 flex aclName = , flexAclId 65535

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 00:fe:c8:be:d9:d0 vapId 5 apVapId 5 flex-acl-name:
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 apfPemAddUser2 (apf_policy.c:362) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Associated to Associated

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 apfPemAddUser2:session timeout forstation 00:56:cd:bf:b7:e2 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Sending assoc-resp with status 0 station:00:56:cd:bf:b7:e2 AP:00:fe:c8:be:d9:d4-00 on apVapId 5
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Sending Assoc Response to station on BSSID 00:fe:c8:be:d9:d4 (status 0) ApVapId 5 Slot 0
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 apfProcessAssocReq (apf_80211.c:10552) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Associated to Associated

*spamApTask4: Jul 01 06:36:15.059: 00:56:cd:bf:b7:e2 Sent dot1x auth initiate message for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.059: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 1 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:47
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.059: 00:56:cd:bf:b7:e2 EAP-PARAM Debug - eap-params for Wlan-Id :5 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.059: 00:56:cd:bf:b7:e2 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.059: 00:56:cd:bf:b7:e2 Station 00:56:cd:bf:b7:e2 setting dot1x reauth timeout = 36000
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.059: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Connecting state
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.059: 00:56:cd:bf:b7:e2 Sending EAP-Request/Identity to mobile 00:56:cd:bf:b7:e2 (EAP Id 1)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.214: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.214: 00:56:cd:bf:b7:e2 Resetting reauth count 1 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.214: 00:56:cd:bf:b7:e2 EAP State update from Connecting to Authenticating for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.214: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Authenticating state
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.232: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.232: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=2) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.232: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 2)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.232: 00:56:cd:bf:b7:e2 Allocating EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.390: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.390: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 2, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.390: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.390: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.403: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.403: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=3) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.403: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 3)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.403: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.571: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.571: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.571: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.583: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.583: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=4) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.583: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 4)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.583: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.757: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.757: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 4, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.757: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.757: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.769: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.769: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=5) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.769: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 5)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.769: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.969: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.969: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.969: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Processing assoc-req station:00:56:cd:bf:b7:e2 AP:00:fe:c8:be:d9:d0-00 ssid : CORP-MOBILE-WLAN thread:18d07600
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Station: 00:56:CD:BF:B7:E2 11v BSS Transition not enabled on the AP 00:FE:C8:BE:D9:D0
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Association received from mobile on BSSID 00:fe:c8:be:d9:d4 AP bsacnwwa89g-VS
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Station: 00:56:CD:BF:B7:E2 11v BSS Transition not enabled on the AP 00:FE:C8:BE:D9:D0
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Global 200 Clients are allowed to AP radio

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Max Client Trap Threshold: 0 cur: 13

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 override for default ap group, marking intgrp NULL
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 2409

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Re-applying interface policy for client

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2711)
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2732)
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User - 0
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 In processSsidIE:6332 setting Central switched to TRUE
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 In processSsidIE:6335 apVapId = 5 and Split Acl Id = 65535
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Applying site-specific Local Bridging override for station 00:56:cd:bf:b7:e2 - vapId 5, site 'SAC2', interface 'management'
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Applying Local Bridging Interface Policy for station 00:56:cd:bf:b7:e2 - vlan 2409, interface id 0, interface 'management'
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 override from ap group, removing intf group from mscb
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Applying site-specific override for station 00:56:cd:bf:b7:e2 - vapId 5, site 'SAC2', interface 'management'
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 2409

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Re-applying interface policy for client

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2711)
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2732)
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_1: Jul 01 06:36:32.547: RSNIE in Assoc. Req.: (20)

*apfMsConnTask_1: Jul 01 06:36:32.547: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_1: Jul 01 06:36:32.547: [0016] ac 01 0c 00

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Processing RSN IE type 48, length 20 for mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Received 802.11i 802.1X key management suite, enabling dot1x Authentication
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 RSN Capabilities: 12
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Marking Mobile as non-11w Capable
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Received RSN IE with 0 PMKIDs from mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Setting active key cache index 8 ---> 8
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 unsetting PmkIdValidatedByAp
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 AID 16 in Assoc Req from flex AP 00:fe:c8:be:d9:d0 is same as in mscb 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Initializing policy
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 apfVapSecurity=0x6040 L2=16384 SkipWeb=0
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 AuthenticationRequired = 1
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Encryption policy is set to 0x80000001
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 sending to spamAddMobile vlanId -1 flex aclName = , flexAclId 65535

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 00:fe:c8:be:d9:d0 vapId 5 apVapId 5 flex-acl-name:
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 apfPemAddUser2 (apf_policy.c:362) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Associated to Associated

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 apfPemAddUser2:session timeout forstation 00:56:cd:bf:b7:e2 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Sending assoc-resp with status 0 station:00:56:cd:bf:b7:e2 AP:00:fe:c8:be:d9:d4-00 on apVapId 5
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 apfProcessAssocReq (apf_80211.c:10552) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Associated to Associated

*spamApTask4: Jul 01 06:36:32.693: 00:56:cd:bf:b7:e2 Sent dot1x auth initiate message for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:32.694: 00:56:cd:bf:b7:e2 reauth_sm state transition 1 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:53
*Dot1x_NW_MsgTask_2: Jul 01 06:36:32.694: 00:56:cd:bf:b7:e2 EAP-PARAM Debug - eap-params for Wlan-Id :5 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_2: Jul 01 06:36:32.694: 00:56:cd:bf:b7:e2 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_2: Jul 01 06:36:32.694: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Connecting state
*Dot1x_NW_MsgTask_2: Jul 01 06:36:32.694: 00:56:cd:bf:b7:e2 Sending EAP-Request/Identity to mobile 00:56:cd:bf:b7:e2 (EAP Id 1)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:32.912: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:32.912: 00:56:cd:bf:b7:e2 Received Identity Response (count=1) from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:32.912: 00:56:cd:bf:b7:e2 Resetting reauth count 1 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:32.912: 00:56:cd:bf:b7:e2 EAP State update from Connecting to Authenticating for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:32.912: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Authenticating state
*Dot1x_NW_MsgTask_2: Jul 01 06:36:32.912: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:37.906: 00:56:cd:bf:b7:e2 Received EAPOL START, dot1x state = 3
*Dot1x_NW_MsgTask_2: Jul 01 06:36:37.906: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:53
*Dot1x_NW_MsgTask_2: Jul 01 06:36:37.906: 00:56:cd:bf:b7:e2 Received EAPOL START from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:37.906: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Aborting state
*Dot1x_NW_MsgTask_2: Jul 01 06:36:37.906: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:37.906: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Connecting state
*Dot1x_NW_MsgTask_2: Jul 01 06:36:37.906: 00:56:cd:bf:b7:e2 Sending EAP-Request/Identity to mobile 00:56:cd:bf:b7:e2 (EAP Id 3)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:37.906: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:37.906: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.097: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.097: 00:56:cd:bf:b7:e2 Received Identity Response (count=1) from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.097: 00:56:cd:bf:b7:e2 Resetting reauth count 1 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.097: 00:56:cd:bf:b7:e2 EAP State update from Connecting to Authenticating for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.097: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Authenticating state
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.097: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.097: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.097: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.114: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.114: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.114: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=4) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.114: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 4)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.114: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.114: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.302: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.302: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.302: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.302: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.302: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.315: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.315: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=5) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.315: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 5)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.315: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.315: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*osapiBsnTimer: Jul 01 06:36:42.167: 00:56:cd:bf:b7:e2 802.1x 'timeoutEvt' Timer expired for station 00:56:cd:bf:b7:e2 and for message = M0
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.167: 00:56:cd:bf:b7:e2 Retransmit 1 of EAP-Request (length 1300) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.365: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.365: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 5, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.365: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.365: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.365: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.365: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.376: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.376: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=6) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.376: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 6)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.376: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.376: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.564: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.564: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.564: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.564: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.564: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.576: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.576: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=7) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.576: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 7)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.576: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.576: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.887: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.887: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 7, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.887: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.887: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.887: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.887: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71

(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >*apfReceiveTask: Jul 01 06:38:09.851: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) 802.1X/WPA Policy timeout
*apfReceiveTask: Jul 01 06:38:09.851: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Pem timed out, Try to delete client in 10 secs.
*apfReceiveTask: Jul 01 06:38:09.851: 00:56:cd:bf:b7:e2 Scheduling deletion of Mobile Station: (callerId: 12) in 10 seconds
*osapiBsnTimer: Jul 01 06:38:19.939: 00:56:cd:bf:b7:e2 apfMsExpireCallback (apf_ms.c:638) Expiring Mobile!
*apfReceiveTask: Jul 01 06:38:19.939: 00:56:cd:bf:b7:e2 apfMsExpireMobileStation (apf_ms.c:7442) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Associated to Disassociated

*apfReceiveTask: Jul 01 06:38:19.939: 00:56:cd:bf:b7:e2 Freeing EAP Retransmit Bufer for mobile 00:56:cd:bf:b7:e2
*apfReceiveTask: Jul 01 06:38:19.939: 00:56:cd:bf:b7:e2 Scheduling deletion of Mobile Station: (callerId: 45) in 10 seconds
*osapiBsnTimer: Jul 01 06:38:30.071: 00:56:cd:bf:b7:e2 apfMsExpireCallback (apf_ms.c:638) Expiring Mobile!
*apfReceiveTask: Jul 01 06:38:30.071: 00:56:cd:bf:b7:e2 apfMsAssoStateDec
*apfReceiveTask: Jul 01 06:38:30.071: 00:56:cd:bf:b7:e2 apfMsExpireMobileStation (apf_ms.c:7581) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Disassociated to Idle

*apfReceiveTask: Jul 01 06:38:30.071: 00:56:cd:bf:b7:e2 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfReceiveTask: Jul 01 06:38:30.071: 00:56:cd:bf:b7:e2 Deleting mobile on AP 00:fe:c8:be:d9:d0(0)

(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >*spamApTask4: Jul 01 06:38:30.216: 00:56:cd:bf:b7:e2 apfUpdateDeleteAckInMscb (apf_api.c:50821) Expiring Mobile!
*apfMsConnTask_1: Jul 01 06:38:56.967: 00:56:cd:bf:b7:e2 Processing assoc-req station:00:56:cd:bf:b7:e2 AP:00:fe:c8:be:d9:d0-00 ssid : CORP-MOBILE-WLAN thread:18d07600
*apfMsConnTask_1: Jul 01 06:38:56.967: 00:56:cd:bf:b7:e2 Created Acct-Session-ID (5d19aa80/00:56:cd:bf:b7:e2/1113714) for the mobile
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Adding mobile on LWAPP AP 00:fe:c8:be:d9:d0(0)
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Association received from mobile on BSSID 00:fe:c8:be:d9:d4 AP bsacnwwa89g-VS
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Station: 00:56:CD:BF:B7:E2 11v BSS Transition not enabled on the AP 00:FE:C8:BE:D9:D0
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Global 200 Clients are allowed to AP radio

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Max Client Trap Threshold: 0 cur: 12

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 override for default ap group, marking intgrp NULL
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 0 Quarantine Vlan 0 Access Vlan 0

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Re-applying interface policy for client

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2711)
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2732)
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User - 0
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 In processSsidIE:6332 setting Central switched to TRUE
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 In processSsidIE:6335 apVapId = 5 and Split Acl Id = 65535
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Applying site-specific Local Bridging override for station 00:56:cd:bf:b7:e2 - vapId 5, site 'SAC2', interface 'management'
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Applying Local Bridging Interface Policy for station 00:56:cd:bf:b7:e2 - vlan 2409, interface id 0, interface 'management'
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 override from ap group, removing intf group from mscb
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Applying site-specific override for station 00:56:cd:bf:b7:e2 - vapId 5, site 'SAC2', interface 'management'
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 2409

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Re-applying interface policy for client

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2711)
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2732)
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 STA - rates (8): 130 132 139 150 36 48 72 108 0 0 0 0 0 0 0 0
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_1: Jul 01 06:38:56.968: RSNIE in Assoc. Req.: (20)

*apfMsConnTask_1: Jul 01 06:38:56.968: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_1: Jul 01 06:38:56.968: [0016] ac 01 0c 00

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Processing RSN IE type 48, length 20 for mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Received 802.11i 802.1X key management suite, enabling dot1x Authentication
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 RSN Capabilities: 12
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Marking Mobile as non-11w Capable
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Received RSN IE with 0 PMKIDs from mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Setting active key cache index 8 ---> 8
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 unsetting PmkIdValidatedByAp
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Updating AID for REAP AP Client 00:fe:c8:be:d9:d0 - AID ===> 16
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 apfVapSecurity=0x6040 L2=16384 SkipWeb=0
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 AuthenticationRequired = 1
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Encryption policy is set to 0x80000001
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Vlan while overriding the policy = -1
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 sending to spamAddMobile vlanId -1 flex aclName = , flexAclId 65535

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 00:fe:c8:be:d9:d0 vapId 5 apVapId 5 flex-acl-name:
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 apfMsAssoStateInc
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 apfPemAddUser2 (apf_policy.c:362) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Idle to Associated

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 apfPemAddUser2:session timeout forstation 00:56:cd:bf:b7:e2 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Sending assoc-resp with status 0 station:00:56:cd:bf:b7:e2 AP:00:fe:c8:be:d9:d0-00 on apVapId 5
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Sending Assoc Response to station on BSSID 00:fe:c8:be:d9:d4 (status 0) ApVapId 5 Slot 0
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 apfProcessAssocReq (apf_80211.c:10552) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Associated to Associated

*spamApTask4: Jul 01 06:38:57.114: 00:56:cd:bf:b7:e2 Sent dot1x auth initiate message for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.114: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 1 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:47
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.114: 00:56:cd:bf:b7:e2 EAP-PARAM Debug - eap-params for Wlan-Id :5 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.114: 00:56:cd:bf:b7:e2 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.114: 00:56:cd:bf:b7:e2 Station 00:56:cd:bf:b7:e2 setting dot1x reauth timeout = 36000
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.114: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Connecting state
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.114: 00:56:cd:bf:b7:e2 Sending EAP-Request/Identity to mobile 00:56:cd:bf:b7:e2 (EAP Id 1)
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.278: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.278: 00:56:cd:bf:b7:e2 Received Identity Response (count=1) from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.278: 00:56:cd:bf:b7:e2 Resetting reauth count 1 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.278: 00:56:cd:bf:b7:e2 EAP State update from Connecting to Authenticating for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.278: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Authenticating state
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.278: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.381: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.381: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=2) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.381: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 2)
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.381: 00:56:cd:bf:b7:e2 Allocating EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.604: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.604: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 2, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.604: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.604: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.621: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.621: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=3) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.621: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 3)
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.621: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.814: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.814: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 3, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.814: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.814: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.826: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.826: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 4)
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.826: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:58.006: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:58.006: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:58.020: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:58.020: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=5) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:58.020: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 5)
*Dot1x_NW_MsgTask_2: Jul 01 06:38:58.308: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:58.308: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:58.308: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Processing assoc-req station:00:56:cd:bf:b7:e2 AP:00:fe:c8:be:d9:d0-00 ssid : CORP-MOBILE-WLAN thread:18d07600
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Station: 00:56:CD:BF:B7:E2 11v BSS Transition not enabled on the AP 00:FE:C8:BE:D9:D0
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Association received from mobile on BSSID 00:fe:c8:be:d9:d4 AP bsacnwwa89g-VS
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Station: 00:56:CD:BF:B7:E2 11v BSS Transition not enabled on the AP 00:FE:C8:BE:D9:D0
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Global 200 Clients are allowed to AP radio

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Max Client Trap Threshold: 0 cur: 13

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 override for default ap group, marking intgrp NULL
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 2409

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Re-applying interface policy for client

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2711)
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2732)
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User - 0
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 In processSsidIE:6332 setting Central switched to TRUE
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 In processSsidIE:6335 apVapId = 5 and Split Acl Id = 65535
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Applying site-specific Local Bridging override for station 00:56:cd:bf:b7:e2 - vapId 5, site 'SAC2', interface 'management'
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Applying Local Bridging Interface Policy for station 00:56:cd:bf:b7:e2 - vlan 2409, interface id 0, interface 'management'
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 override from ap group, removing intf group from mscb
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 2409

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2711)
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2732)
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_1: Jul 01 06:40:05.129: RSNIE in Assoc. Req.: (20)

*apfMsConnTask_1: Jul 01 06:40:05.129: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_1: Jul 01 06:40:05.129: [0016] ac 01 0c 00

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Processing RSN IE type 48, length 20 for mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Received 802.11i 802.1X key management suite, enabling dot1x Authentication
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 RSN Capabilities: 12
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Marking Mobile as non-11w Capable
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Received RSN IE with 0 PMKIDs from mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Setting active key cache index 8 ---> 8
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 unsetting PmkIdValidatedByAp
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 AID 16 in Assoc Req from flex AP 00:fe:c8:be:d9:d0 is same as in mscb 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Initializing policy
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 apfVapSecurity=0x6040 L2=16384 SkipWeb=0
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 AuthenticationRequired = 1
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Encryption policy is set to 0x80000001
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Vlan while overriding the policy = -1
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 sending to spamAddMobile vlanId -1 flex aclName = , flexAclId 65535

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 00:fe:c8:be:d9:d0 vapId 5 apVapId 5 flex-acl-name:
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 apfPemAddUser2 (apf_policy.c:362) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Associated to Associated

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 apfPemAddUser2:session timeout forstation 00:56:cd:bf:b7:e2 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Sending assoc-resp with status 0 station:00:56:cd:bf:b7:e2 AP:00:fe:c8:be:d9:d0-00 on apVapId 5
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Sending Assoc Response to station on BSSID 00:fe:c8:be:d9:d4 (status 0) ApVapId 5 Slot 0
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 apfProcessAssocReq (apf_80211.c:10552) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Associated to Associated

*spamApTask4: Jul 01 06:40:05.276: 00:56:cd:bf:b7:e2 Sent dot1x auth initiate message for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.276: 00:56:cd:bf:b7:e2 reauth_sm state transition 1 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:53
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.276: 00:56:cd:bf:b7:e2 EAP-PARAM Debug - eap-params for Wlan-Id :5 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.276: 00:56:cd:bf:b7:e2 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.276: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Connecting state
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.276: 00:56:cd:bf:b7:e2 Sending EAP-Request/Identity to mobile 00:56:cd:bf:b7:e2 (EAP Id 1)
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.436: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.436: 00:56:cd:bf:b7:e2 Received Identity Response (count=1) from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.436: 00:56:cd:bf:b7:e2 Resetting reauth count 1 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.436: 00:56:cd:bf:b7:e2 EAP State update from Connecting to Authenticating for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.436: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Authenticating state
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.436: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.453: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.453: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 2)
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.453: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.630: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.630: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.630: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.645: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.645: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 3)
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.645: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.816: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.816: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.816: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.276: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.276: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=4) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.276: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 4)
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.276: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.442: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.442: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.442: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.455: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.455: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=5) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.455: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 5)
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.455: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.725: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.725: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2

(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >close exit

Incorrect usage. Use the '?' or <TAB> key to list commands.

(Cisco Controller) >logout

----------------------------------------------------------

From Anchor WLC

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2019.07.01 16:38:39 =~=~=~=~=~=~=~=~=~=~=~=
login as:

(Cisco Controller)
User: pa6nwadmin
Password:**********
(Cisco Controller) >debug client m ?

<MAC addr1> Enter MAC address

(Cisco Controller) >debug client 00:56:CD:BF:B7:E2

(Cisco Controller) >*mmListen: Mar 25 17:20:12.710: Received mmIpAddrUpdateAck for client

*mmListen: Jul 01 18:35:28.780: Received mmIpAddrUpdateAck for client

*mmListen: Jul 01 18:35:29.943: Received mmIpv6AddrUpdateAck for client

*mmListen: Jul 01 18:35:45.821: Received mmIpAddrUpdateAck for client

(Cisco Controller) >*mmListen: Jul 01 18:36:00.737: Received mmIpAddrUpdateAck for client

*mmListen: Jul 01 18:38:05.043: Received mmIpv6AddrUpdateAck for client

*mmListen: Jul 01 18:38:05.575: Received mmIpAddrUpdateAck for client

*mmListen: Jul 01 18:38:19.216: Received mmIpAddrUpdateAck for client

(Cisco Controller) >
(Cisco Controller) >*mmListen: Jul 01 18:38:19.343: Received mmIpv6AddrUpdateAck for client

*mmListen: Jul 01 18:38:45.275: Received mmIpv6AddrUpdateAck for client

(Cisco Controller) >
(Cisco Controller) >*mmListen: Jul 01 18:38:45.848: Received mmIpAddrUpdateAck for client

*mmListen: Jul 01 18:39:57.015: Received mmIpAddrUpdateAck for client

(Cisco Controller) >
(Cisco Controller) >*mmListen: Jul 01 18:40:07.726: Received mmIpAddrUpdateAck for client

*mmListen: Jul 01 18:40:07.927: Received mmIpv6AddrUpdateAck for client

(Cisco Controller) >
(Cisco Controller) >*mmListen: Jul 01 18:40:28.691: Received mmIpv6AddrUpdateAck for client

*mmListen: Jul 01 18:40:37.823: Received mmIpv6AddrUpdateAck for client

(Cisco Controller) >
(Cisco Controller) >*mmListen: Jul 01 18:40:38.719: Received mmIpAddrUpdateAck for client

*mmListen: Jul 01 18:42:45.020: Received mmIpAddrUpdateAck for client

(Cisco Controller) >
(Cisco Controller) >logout

Re: Regarding Corp-Mobile SSID

patoberli — Wed, 03 Jul 2019 14:58:23 GMT

I haven't looked very thorough at the log output, but do you see any errors on the radius server for the client?
It looks as if the authentication is somewhere failing.

Re: Regarding Corp-Mobile SSID

Emerson Rodrigues — Wed, 03 Jul 2019 22:07:30 GMT

*osapiBsnTimer: Jul 01 06:35:33.955: 00:56:cd:bf:b7:e2 802.1x 'timeoutEvt' Timer expired for station 00:56:cd:bf:b7:e2 and for message = M0

Its a issue of 4 way handshake, try to increase following timers:

config advanced eap eapol-key-timeout
config advanced eap eapol-key-retries

Re: Regarding Corp-Mobile SSID

patoberli — Thu, 04 Jul 2019 06:58:29 GMT

Thanks for digging out this error. This could also be caused because of a to weak signal.

Re: Regarding Corp-Mobile SSID

jain.manish94 — Thu, 04 Jul 2019 10:42:36 GMT

what is the default timeout and retries ?

Re: Regarding Corp-Mobile SSID

jain.manish94 — Thu, 04 Jul 2019 11:00:03 GMT

this is the current output

(Cisco Controller) >show advanced eap

EAP-Identity-Request Timeout (seconds)........... 4
EAP-Identity-Request Max Retries................. 6
EAP Key-Index for Dynamic WEP.................... 0
EAP Max-Login Ignore Identity Response........... enable
EAP-Request Timeout (seconds).................... 4
EAP-Request Max Retries.......................... 6
EAPOL-Key Timeout (milliseconds)................. 5000
EAPOL-Key Max Retries............................ 4
EAP-Broadcast Key Interval....................... 3600

Re: Regarding Corp-Mobile SSID

jain.manish94 — Thu, 04 Jul 2019 11:15:54 GMT

Please check these all screen shots for AP group, Radius Server entry in WLC, and let me know if any changes required.

Re: Regarding Corp-Mobile SSID

patoberli — Thu, 04 Jul 2019 11:25:02 GMT

Screenshots look ok for me.

I think your EAP values are at default.

To change them you have to login via SSH to the WLC and enter the two commands:

config advanced eap eapol-key-timeout 7500
config advanced eap eapol-key-retries 5

This will increase the time by 50% and could help. It will not help if the signal is too weak or disturbed though.

Check if the disconnects always happen around the same area and if yes, check the signal strength there. I suggest to have at least -75dB, better -70dB.

Re: Regarding Corp-Mobile SSID

jain.manish94 — Thu, 04 Jul 2019 12:03:46 GMT

I suggest to have at least -75dB, better -70dB.

where i change these value in WLC ? could you please help

Re: Regarding Corp-Mobile SSID

jain.manish94 — Thu, 04 Jul 2019 12:19:18 GMT

there is max 5000 only for eapol-key-timeout

Re: Regarding Corp-Mobile SSID

patoberli — Thu, 04 Jul 2019 12:56:51 GMT

You don't change that (directly) on the WLC (unless they run at low power, for whatever reason).

Typically, you first do a Site Survey where this is measured. Based on this you plan the AP placement for optimal signal coverage.

Can you check under Wireless - Access Points - 802.11a or 802.11b how the Power Level is?

If it has a * (star), it's managed by the WLC and should be ok.

Re: Regarding Corp-Mobile SSID

jain.manish94 — Thu, 04 Jul 2019 14:11:23 GMT

yes all are showing with *

what does means with * here. ?

i don know why for 802.11 a/n/ac all are *1

for b/g/n most are with *1

Re: Regarding Corp-Mobile SSID

Emerson Rodrigues — Thu, 04 Jul 2019 14:46:57 GMT

* is for WLC auto configuration, if you manually change these parameters, * will be removed. Leave as it is now.

WLC is adjusting 802.11 radios as needed, don't worry about it now.

Were you able to tweak EAP parameters?

Re: Regarding Corp-Mobile SSID

patoberli — Thu, 04 Jul 2019 15:13:01 GMT

Yes leave the *. How many APs do you have in the same building?
Most 2.4 GHz radios on Power *1 might show an issue with the AP placement, that they are too far away from each other -> Site Survey needed.

Also you might want to disable "DHCP Address Assignement - Required" on the SSID, that caused issues with roaming (mostly mobile phones) for me in the past.

Re: Regarding Corp-Mobile SSID

jain.manish94 — Thu, 04 Jul 2019 15:50:00 GMT

Were you able to tweak EAP parameters?

what does means about above question.

Re: Regarding Corp-Mobile SSID

jain.manish94 — Thu, 04 Jul 2019 15:53:48 GMT

Hello Patoberli,

i have one single central WLC and single Anchor controller. if i disabled DHCP address assignement from Corp-Mobile-SSID how they will get the IP Address.

from which Controller you mwant me to disable the DHCP Address assignement , it if from central WLC or Anchor WLC.

Please suggest me.

Re: Regarding Corp-Mobile SSID

patoberli — Fri, 05 Jul 2019 06:46:49 GMT

Sorry I have never done an Anchor WLC deployment. If it is required for that, leave it enabled.

Re: Regarding Corp-Mobile SSID

jain.manish94 — Thu, 11 Jul 2019 12:10:16 GMT

Hello Team,

Thanks for you comment.

Please let me know why i am getting these error in WLC.

RADIUS server 10.209.42.15:1812 failed to respond to request (ID 206) for client 20:a2:e4:83:60:7d / user 'rick.vanvegchel@nunhemsseeds.com'

RADIUS auth-server 10.209.42.16:1812 available

RADIUS auth-server 10.209.42.15:1812 available

RADIUS server 10.209.42.15:1812 activated on WLAN 5

RADIUS server 10.209.42.16:1812 deactivated on WLAN 5

RADIUS auth-server 10.209.42.16:1812 unavailable

why this is happening again and again.

Re: Regarding Corp-Mobile SSID

patoberli — Thu, 11 Jul 2019 12:20:50 GMT

Check the radius server logfiles. For whatever reason it doesn't answer the requests and thus gets marked as unavailable.

Re: Regarding Corp-Mobile SSID

jain.manish94 — Wed, 24 Jul 2019 18:17:33 GMT

Hello Team,

Plz plz please help me. this is esclated for me now. please help me.

this is the debug for the same user. first he was connecting successfully but after 5 mint disconnected and not connecting again now.

i checked with radius team , i can see success logs for some users but i am not understanding by some Iphone users are getting denied by radius.

Please team nobody is understanding my issue. i can provide all information which you want.

i have already told that there is only one Single WLC (Central), Central radius, Central MDM server.

issue : suppose 10 users at the site with corporate mobile , 5 users are connecting but other 5 are getting denied by i am not understanding.

one more important things that this issue only with Central WLC but not from Local WLC.

Please find attachment of one users before and after.