Android phone won't roam through APs Mobility Express

3xIT · ‎08-09-2019

We got complains from Android users that they can join some APs (3802i). On one site it is Huawei P20 Lite and he just can't see some APs. Some he can and he can connect but before was it that he can connect to any AP without a problem. There was no change on Wi-Fi side and he said there was no update on his phone.
On one other site, we had two users with Huawei Honor 7 and they also can't join some APs.

Also, I just tried to update ME to version 8.8.125.0 but still same problems.

I did debug on the controller for one user with P20 Lite phone and here is the result.

(Cisco Controller) >debug client f0:0f:ec:bf:0f:ab

(Cisco Controller) >*apfReceiveTask: Aug 09 08:57:54.387: f0:0f:ec:bf:0f:ab No D HCP scope for IP scope name none.

*apfReceiveTask: Aug 09 08:58:48.606: f0:0f:ec:bf:0f:ab Received management fram e REASSOCIATION REQUEST on BSSID 78:72:5d:fd:fb:60 destination addr 78:72:5d:fd :fb:60

*apfMsConnTask_0: Aug 09 08:58:48.606: f0:0f:ec:bf:0f:ab Processing assoc-req st ation:f0:0f:ec:bf:0f:ab AP:78:72:5d:fd:fb:60-00 ssid : HOME thread:5e265650

*apfMsConnTask_0: Aug 09 08:58:48.607: f0:0f:ec:bf:0f:ab Station: F0:0F:EC:BF:0 F:AB trying to join WLAN with RSSI -66. Checking for XOR roam conditions on AP: 78:72:5D:FD:FB:60 Slot: 0

*apfMsConnTask_0: Aug 09 08:58:48.607: f0:0f:ec:bf:0f:ab Station: F0:0F:EC:BF:0 F:AB is associating to AP 78:72:5D:FD:FB:60 which is not XOR roam capable

*apfMsConnTask_0: Aug 09 08:58:48.607: f0:0f:ec:bf:0f:ab Setting hasApChnaged F lag as true. It is a roam scenario.

*apfMsConnTask_0: Aug 09 08:58:48.607: f0:0f:ec:bf:0f:ab Setting RTTS enabled to 0

*apfMsConnTask_0: Aug 09 08:58:48.607: f0:0f:ec:bf:0f:ab Reassociation received from mobile on BSSID 78:72:5d:fd:fb:60 AP WAP03

*apfMsConnTask_0: Aug 09 08:58:48.607: f0:0f:ec:bf:0f:ab Station: F0:0F:EC:BF:0 F:AB trying to join WLAN with RSSI -66. Checking for XOR roam conditions on AP: 78:72:5D:FD:FB:60 Slot: 0

*apfMsConnTask_0: Aug 09 08:58:48.607: f0:0f:ec:bf:0f:ab Station: F0:0F:EC:BF:0 F:AB is associating to AP 78:72:5D:FD:FB:60 which is not XOR roam capable

*apfMsConnTask_0: Aug 09 08:58:48.607: f0:0f:ec:bf:0f:ab Global 200 Clients are allowed to AP radio

*apfMsConnTask_0: Aug 09 08:58:48.607: f0:0f:ec:bf:0f:ab Max Client Trap Thresho ld: 0 cur: 1

*apfMsConnTask_0: Aug 09 08:58:48.607: f0:0f:ec:bf:0f:ab Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab Updated local bridging VLAN to 0 while applying WLAN policy

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab Updated session timeout to 0 and Sleep timeout to 720 while applying WLAN policy

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab override for default ap group, marking intgrp NULL

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab apfApplyWlanPolicy: App ly WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User - 0

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab Check before Setting th e NAS Id to WLAN specific Id ''

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab In processSsidIE:7127 s etting Central switched to FALSE

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab Set Clinet MSCB as Cent ral Association Disabled

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab Applying site-specific Local Bridging override for station f0:0f:ec:bf:0f:ab - vapId 1, site 'default-g roup', interface 'management'

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab Applying Local Bridging Interface Policy for station f0:0f:ec:bf:0f:ab - vlan 0, interface id 0, interf ace 'management', nasId:''

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab Set Clinet Non AP speci fic WLAN apfMsAccessVlan = 601

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab This apfMsAccessVlan ma y be changed later from AAA after L2 Auth

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab Cleared localSwitchingV lan, may be assigned later based on AAA override

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab processSsidIE statusCo de is 0 and status is 0

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab processSsidIE ssid_don e_flag is 0 finish_flag is 0

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab STA - rates (6): 152 36 48 72 96 108 0 0 0 0 0 0 0 0 0 0

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab suppRates statusCode i s 0 and gotSuppRatesElement is 1

*apfMsConnTask_0: Aug 09 08:58:48.608: RSNIE in Assoc. Req.: (20)

*apfMsConnTask_0: Aug 09 08:58:48.608: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_0: Aug 09 08:58:48.608: [0016] ac 02 00 00

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab Processing RSN IE type 48, length 20 for mobile f0:0f:ec:bf:0f:ab

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab Selected Unicast cipher CCMP128 for client device

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab Received 802.11i PSK ke y management suite, enabling Authentication

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab RSN Capabilities: 0

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab non-11w Capable mobile

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab Received RSN IE with 0 PMKIDs from mobile f0:0f:ec:bf:0f:ab

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab

Client auth Key mgmt ty pe is 2, but cache key mgmt type is 5

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab Created PMKID PMK Cache for BSSID 78:72:5d:fd:fb:60 at index 0 for station f0:0f:ec:bf:0f:ab

*apfMsConnTask_0: Aug 09 08:58:48.608: New PMKID: (16)

*apfMsConnTask_0: Aug 09 08:58:48.608: [0000] 94 0c fe 46 0e a7 6f d6 90 96 12 c9 07 11 eb e9

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab Setting active key cach e index 0 ---> 0

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab Roamed client : Insert the newly computed pmkId at idx 0 for mobile f0:0f:ec:bf:0f:ab

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab pemApfDeleteMobileStati on2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab the value of url acl pr eserve flag is 1 for mobile f0:0f:ec:bf:0f:ab (caller pem_api.c:5148)

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab 10.10.2.41 RUN (20) D eleted mobile LWAPP rule on AP [78:72:5d:f8:7f:a0]

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab Succesfully freed AID 8 , slot 0 on AP 78:72:5d:f8:7f:a0, #client on this slot 4

*apfMsConnTask_0: Aug 09 08:58:48.608: f0:0f:ec:bf:0f:ab New ctxOwnerMwarIp: 10 .10.130.10 New ctxOwnerApMac: 78:72:5D:FD:FB:60 New ctxOwnerApEthMac: 78:72:5D :F6:FA:0C New ctxOwnerApSlotId: 0

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab Updated location for st ation old AP 78:72:5d:f8:7f:a0 oldSlot 0, new AP 78:72:5d:fd:fb:60 newSlot 0, AI D 0 MsType 0 MobilityRole 1

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab Assigning flex webauth IPv4-ACL ID :65535, IPv6-ACL ID:65535 for AP WLAN ID : 1

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab Assigned flex post-auth IPv4-ACL ID :65535, IPv6-ACL ID:65535 for AP WLAN ID : 1

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab Updating AID for REAP A P Client 78:72:5d:fd:fb:60 - AID ===> 5

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab apfMs1xStateDec

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab 10.10.2.41 RUN (20) C hange state to START (0) last state RUN (20)

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab pemApfAddMobileStation2 : APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab the value of url acl pr eserve flag is 0 for mobile f0:0f:ec:bf:0f:ab (caller pem_api.c:3684)

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab 10.10.2.41 START (0) Initializing policy

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab 10.10.2.41 START (0) Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab apfVapSecurity=0x40004 000 L2=16384 SkipWeb=0

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab AuthenticationRequired = 1

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab 10.10.2.41 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab Encryption policy is se t to 0x80000001

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab Setting the action to i nitiate 1x 4 way handshake upon Add_Mobile_Ack for station with encrypt policy:[ 80000001]

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab 10.10.2.41 8021X_REQD (3) Client already has IP 10.10.2.41, DHCP Not required on AP 78:72:5d:fd:fb: 60 vapId 1 apVapId 1

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab Not Using WMM Complianc e code qosCap 00

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab flex webauth acl id to be sent :65535 name : client acl id :65535 name :

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab flex webauth ipv6 acl i d to be sent :65535 name : client acl id :65535 name :

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab Vlan while overriding t he policy = -1

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab sending to spamAddMobil e vlanId -1 aclName = , flexAclId 65535

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab 10.10.2.41 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 78:72:5d:fd:fb:60 vapId 1 apVapId 1 flex ac l-name: v6acl-name

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab apfPemAddUser2 (apf_pol icy.c:451) Changing state for mobile f0:0f:ec:bf:0f:ab on AP 78:72:5d:fd:fb:60 f rom Associated to Associated

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab apfPemAddUser2:session timeout forstation f0:0f:ec:bf:0f:ab - Session Tout 0, apfMsTimeOut '0' and sess ionTimerRunning flag is 0

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab Stopping deletion of Mo bile Station: (callerId: 48)

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab Func: apfPemAddUser2, M s Timeout = 0, Session Timeout = 0

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab Sending assoc-resp with status 0 station:f0:0f:ec:bf:0f:ab AP:78:72:5d:fd:fb:60-00 on apVapId 1

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab Sending Assoc Response (status: '0') to station on AP WAP03 on BSSID 78:72:5d:fd:fb:60 ApVapId 1 S lot 0, mobility role 1

*spamApTask0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab Setting DEL_MOBILE (seqno 0 , action 6) ack state for STA on AP 78:72:5d:f8:7f:a0

*apfMsConnTask_0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab apfProcessAssocReq (apf _80211.c:12284) Changing state for mobile f0:0f:ec:bf:0f:ab on AP 78:72:5d:fd:fb :60 from Associated to Associated

*spamApTask0: Aug 09 08:58:48.609: f0:0f:ec:bf:0f:ab Delete Mobile request with reason 'MN_DEL_INTER_AP_ROAM' on slot 0 sent to the AP 78:72:5d:f8:7f:a0 IP: 10. 10.130.18:5272.

*spamApTask0: Aug 09 08:58:48.610: f0:0f:ec:bf:0f:ab Add SGT:0 to AP 78:72:5d:fd :fb:60

*spamApTask0: Aug 09 08:58:48.610: f0:0f:ec:bf:0f:ab Add CTS mobile SGT - Encode d the capwap payload for the mobile with SGT 0

*spamApTask0: Aug 09 08:58:48.610: f0:0f:ec:bf:0f:ab Flex Ipv6 pre-auth acl is n ot present, not Encoding Flex Ipv6 acl for add mobile Payload

*spamApTask0: Aug 09 08:58:48.610: f0:0f:ec:bf:0f:ab Flex Ipv6 post auth acl is not present, not updating add mobile Payload

*spamApTask0: Aug 09 08:58:48.610: f0:0f:ec:bf:0f:ab Successful transmission of LWAPP Add-Mobile to AP 78:72:5d:fd:fb:60 idx@45

*spamApTask0: Aug 09 08:58:48.610: f0:0f:ec:bf:0f:ab Setting ADD_MOBILE (idx 0, seqno 0, action 1, count 226944035) ack state for STA on AP 78:72:5d:fd:fb:60

*spamApTask0: Aug 09 08:58:48.613: f0:0f:ec:bf:0f:ab Received ADD_MOBILE ack - I nitiating 1x to STA f0:0f:ec:bf:0f:ab (idx 45)

*spamApTask0: Aug 09 08:58:48.613: f0:0f:ec:bf:0f:ab APF Initiating 1x to STA f0 :0f:ec:bf:0f:ab

*spamApTask0: Aug 09 08:58:48.613: f0:0f:ec:bf:0f:ab Sent dot1x auth initiate me ssage for mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.613: f0:0f:ec:bf:0f:ab dot1xProcessInitiate 1XtoMobile to mobile station f0:0f:ec:bf:0f:ab (mscb 25, msg 25)

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.613: f0:0f:ec:bf:0f:ab reauth_sm state tran sition 0 ---> 0 for mobile f0:0f:ec:bf:0f:ab at 1x_reauth_sm.c:53

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.613: f0:0f:ec:bf:0f:ab PMKID roamed client and psk, initiate handshake directly

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.613: f0:0f:ec:bf:0f:ab Initiating RSN with existing PMK to mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.613: f0:0f:ec:bf:0f:ab EAP-PARAM Debug - ea p-params for Wlan-Id :1 is disabled - applying Global eap timers and retries

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.613: f0:0f:ec:bf:0f:ab Disable re-auth, use PMK lifetime.

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.613: f0:0f:ec:bf:0f:ab dot1x - moving mobil e f0:0f:ec:bf:0f:ab into Force Auth state

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.613: f0:0f:ec:bf:0f:ab Skipping EAP-Success to mobile f0:0f:ec:bf:0f:ab (encryptBit:0)

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.613: f0:0f:ec:bf:0f:ab key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.613: f0:0f:ec:bf:0f:ab Found an cache entry for BSSID 78:72:5d:fd:fb:60 in PMKID cache at index 0 of station f0:0f:ec:bf:0f :ab

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.613: Including PMKID in M1 (16)

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.613: [0000] 94 0c fe 46 0e a7 6f d6 90 96 12 c9 07 11 eb e9

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.613: M1 - Key Data: (22)

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.613: [0000] dd 14 00 0f ac 04 94 0c fe 46 0e a7 6f d6 90 96

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.613: [0016] 12 c9 07 11 eb e9

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.613: f0:0f:ec:bf:0f:ab Starting key exchang e to mobile f0:0f:ec:bf:0f:ab, data packets will be dropped

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.613: f0:0f:ec:bf:0f:ab Sending EAPOL-Key Me ssage to mobile f0:0f:ec:bf:0f:ab

state INITPMK (message 1), replay counter 00 .00.00.00.00.00.00.00

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.613: f0:0f:ec:bf:0f:ab Allocating EAP Pkt f or retransmission to mobile f0:0f:ec:bf:0f:ab

*CAPWAP DATA: Aug 09 08:58:48.635: f0:0f:ec:bf:0f:ab validating eapol pkt: key v ersion = 2

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.635: f0:0f:ec:bf:0f:ab Received EAPOL-Key f rom mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.635: f0:0f:ec:bf:0f:ab Ignoring invalid EAP OL version (1) in EAPOL-key message from mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.635: f0:0f:ec:bf:0f:ab key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.635: f0:0f:ec:bf:0f:ab Received EAPOL-key i n PTK_START state (message 2) from mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.635: f0:0f:ec:bf:0f:ab Encryption Policy: 4 , PTK Key Length: 48

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.635: f0:0f:ec:bf:0f:ab Successfully compute d PTK from PMK!!!

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.635: f0:0f:ec:bf:0f:ab Received valid MIC i n EAPOL Key Message M2!!!!!

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.635: f0:0f:ec:bf:0f:ab Compare RSN IE in as sociation and EAPOL-M2 frame(rsnie_len :20, and grpMgmtCipherLen:0)

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.635: f0:0f:ec:bf:0f:ab rsnieCapabilty = 0 r snie_len =20

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.635: f0:0f:ec:bf:0f:ab Dumping RSNIE receiv ed in Association request(len = 22):

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.635: 00000000: 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0...............

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.635: 00000010: 00 0f ac 02 00 00 ......

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.635: f0:0f:ec:bf:0f:ab Dumping RSNIE receiv ed in EAPOL M2 (len = 20):

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.635: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.635: 00000010: ac 02 00 00 ....

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.635: f0:0f:ec:bf:0f:ab Stopping retransmiss ion timer for mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.635: f0:0f:ec:bf:0f:ab key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.635: f0:0f:ec:bf:0f:ab Sending EAPOL-Key Me ssage to mobile f0:0f:ec:bf:0f:ab

state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.635: f0:0f:ec:bf:0f:ab Reusing allocated me mory for EAP Pkt for retransmission to mobile f0:0f:ec:bf:0f:ab

*apfReceiveTask: Aug 09 08:58:48.647: f0:0f:ec:bf:0f:ab Recieved MS IPv4 Addr= 0 .0.0.0

*apfReceiveTask: Aug 09 08:58:48.647: f0:0f:ec:bf:0f:ab Updating MS IPv6[1] Addr = fe80:0000:0000:0000:f20f:ecff:febf:0fab

*CAPWAP DATA: Aug 09 08:58:48.648: f0:0f:ec:bf:0f:ab validating eapol pkt: key v ersion = 2

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab Received EAPOL-Key f rom mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab Ignoring invalid EAP OL version (1) in EAPOL-key message from mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab Received EAPOL-key i n PTKINITNEGOTIATING state (message 4) from mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab Stopping retransmiss ion timer for mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab Freeing EAP Retransm it Bufer for mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab apfMs1xStateInc

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab 10.10.2.41 8021X_R EQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab 10.10.2.41 L2AUTHC OMPLETE (4) Client already has IP 10.10.2.41, DHCP Not required on AP 78:72:5d :fd:fb:60 vapId 1 apVapId 1

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab Not Using WMM Compli ance code qosCap 00

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab flex webauth acl id to be sent :65535 name : client acl id :65535 name :

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab flex webauth ipv6 ac l id to be sent :65535 name : client acl id :65535 name :

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab Vlan while overridin g the policy = -1

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab sending to spamAddMo bile vlanId -1 aclName = , flexAclId 65535

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab 10.10.2.41 L2AUTHC OMPLETE (4) Plumbed mobile LWAPP rule on AP 78:72:5d:fd:fb:60 vapId 1 apVapId 1 flex acl-name: v6acl-name

*spamApTask0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab Add SGT:0 to AP 78:72:5d:fd :fb:60

*spamApTask0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab Add CTS mobile SGT - Encode d the capwap payload for the mobile with SGT 0

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab apfMsRunStateInc

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab 10.10.2.41 L2AUTHC OMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab 10.10.2.41 RUN (20 ) Reached PLUMBFASTPATH: from line 7373, null

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab Initiating Accountin g request(1) update for mobile

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab PemLocationConfigure d [1]Adding VSA with NAS update and Role[1] with state[0]

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab 10.10.2.41 RUN (20 ) No 11v BTM

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab 10.10.2.41 RUN (20 ) NO release MSCB

*Dot1x_NW_MsgTask_0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab Successfully Plumbed PTK session Keysfor mobile f0:0f:ec:bf:0f:ab

*spamApTask0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab Flex Ipv6 pre-auth acl is n ot present, not Encoding Flex Ipv6 acl for add mobile Payload

*spamApTask0: Aug 09 08:58:48.649: f0:0f:ec:bf:0f:ab Flex Ipv6 post auth acl is not present, not updating add mobile Payload

*spamApTask0: Aug 09 08:58:48.650: f0:0f:ec:bf:0f:ab Successful transmission of LWAPP Add-Mobile to AP 78:72:5d:fd:fb:60 idx@46

*apfReceiveTask: Aug 09 08:58:50.709: f0:0f:ec:bf:0f:ab Recieved MS IPv4 Addr= 1 0.10.2.41

*apfReceiveTask: Aug 09 08:58:50.709: f0:0f:ec:bf:0f:ab Updating MS IPv6[1] Addr = fe80:0000:0000:0000:f20f:ecff:febf:0fab

*apfReceiveTask: Aug 09 08:58:50.709: f0:0f:ec:bf:0f:ab WcdbClientUpdate: IP Bin ding from WCDB ip_learn_type 2, add_or_delete 1

*apfReceiveTask: Aug 09 08:58:50.709: f0:0f:ec:bf:0f:ab IPv4 Addr: 10:10:2:41

*apfReceiveTask: Aug 09 08:58:50.709: f0:0f:ec:bf:0f:ab Static IP client associa ted to interface management which cannot support client subnet.

*apfReceiveTask: Aug 09 08:58:50.709: f0:0f:ec:bf:0f:ab No DHCP scope for IP sco pe name none.

(Cisco Controller) >*apfReceiveTask: Aug 09 08:59:04.955: f0:0f:ec:bf:0f:ab Received management frame ACTION on BSSID 78:72:5d:fd:fb:60 destination addr 78:72:5d:fd:fb:60

*apfMsConnTask_0: Aug 09 08:59:04.955: f0:0f:ec:bf:0f:ab Got action frame from the client (ActionCategory:10), payloadLen:4

*apfReceiveTask: Aug 09 08:59:04.961: f0:0f:ec:bf:0f:ab Received management frame ACTION on BSSID 78:72:5d:fd:fb:60 destination addr 78:72:5d:fd:fb:60

*apfMsConnTask_0: Aug 09 08:59:04.961: f0:0f:ec:bf:0f:ab Got action frame from the client (ActionCategory:10), payloadLen:65

*apfReceiveTask: Aug 09 08:59:05.011: f0:0f:ec:bf:0f:ab Received management frame ASSOCIATION REQUEST on BSSID 78:72:5d:f8:7f:a0 destination addr 78:72:5d:f8:7f:a0

*apfMsConnTask_0: Aug 09 08:59:05.011: f0:0f:ec:bf:0f:ab Processing assoc-req station:f0:0f:ec:bf:0f:ab AP:78:72:5d:f8:7f:a0-00 ssid : HOME thread:5e265650

*apfMsConnTask_0: Aug 09 08:59:05.011: f0:0f:ec:bf:0f:ab Station: F0:0F:EC:BF:0F:AB trying to join WLAN with RSSI -76. Checking for XOR roam conditions on AP: 78:72:5D:F8:7F:A0 Slot: 0

*apfMsConnTask_0: Aug 09 08:59:05.011: f0:0f:ec:bf:0f:ab Station: F0:0F:EC:BF:0F:AB is associating to AP 78:72:5D:F8:7F:A0 which is not XOR roam capable

*apfMsConnTask_0: Aug 09 08:59:05.011: f0:0f:ec:bf:0f:ab Setting hasApChnaged Flag as true. It is a roam scenario.

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab Setting RTTS enabled to 0

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab Association received from mobile on BSSID 78:72:5d:f8:7f:a0 AP WAP08

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab Station: F0:0F:EC:BF:0F:AB trying to join WLAN with RSSI -76. Checking for XOR roam conditions on AP: 78:72:5D:F8:7F:A0 Slot: 0

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab Station: F0:0F:EC:BF:0F:AB is associating to AP 78:72:5D:F8:7F:A0 which is not XOR roam capable

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab Global 200 Clients are allowed to AP radio

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab Max Client Trap Threshold: 0 cur: 4

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab Updated local bridging VLAN to 0 while applying WLAN policy

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab Updated session timeout to 0 and Sleep timeout to 720 while applying WLAN policy

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab override for default ap group, marking intgrp NULL

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User - 0

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab Check before Setting the NAS Id to WLAN specific Id ''

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab In processSsidIE:7127 setting Central switched to FALSE

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab Set Clinet MSCB as Central Association Disabled

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab Applying site-specific Local Bridging override for station f0:0f:ec:bf:0f:ab - vapId 1, site 'default-group', interface 'management'

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab Applying Local Bridging Interface Policy for station f0:0f:ec:bf:0f:ab - vlan 0, interface id 0, interface 'management', nasId:''

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab Set Clinet Non AP specific WLAN apfMsAccessVlan = 601

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab This apfMsAccessVlan may be changed later from AAA after L2 Auth

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab Cleared localSwitchingVlan, may be assigned later based on AAA override

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab processSsidIE statusCode is 0 and status is 0

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab processSsidIE ssid_done_flag is 0 finish_flag is 0

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab STA - rates (6): 152 36 48 72 96 108 0 0 0 0 0 0 0 0 0 0

*apfMsConnTask_0: Aug 09 08:59:05.012: RSNIE in Assoc. Req.: (20)

*apfMsConnTask_0: Aug 09 08:59:05.012: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_0: Aug 09 08:59:05.012: [0016] ac 02 00 00

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab Processing RSN IE type 48, length 20 for mobile f0:0f:ec:bf:0f:ab

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab Selected Unicast cipher CCMP128 for client device

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab Received 802.11i PSK key management suite, enabling Authentication

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab RSN Capabilities: 0

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab non-11w Capable mobile

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab Received RSN IE with 0 PMKIDs from mobile f0:0f:ec:bf:0f:ab

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab

Client auth Key mgmt type is 2, but cache key mgmt type is 5

*apfMsConnTask_0: Aug 09 08:59:05.012: f0:0f:ec:bf:0f:ab Created PMKID PMK Cache for BSSID 78:72:5d:f8:7f:a0 at index 0 for station f0:0f:ec:bf:0f:ab

*apfMsConnTask_0: Aug 09 08:59:05.012: New PMKID: (16)

*apfMsConnTask_0: Aug 09 08:59:05.013: [0000] 0e 7b 37 3c 0e 02 c5 de 98 3c e1 6f 8c 5d d7 3a

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab Setting active key cache index 0 ---> 0

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab Roamed client : Insert the newly computed pmkId at idx 0 for mobile f0:0f:ec:bf:0f:ab

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab the value of url acl preserve flag is 1 for mobile f0:0f:ec:bf:0f:ab (caller pem_api.c:5148)

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab 10.10.2.41 RUN (20) Deleted mobile LWAPP rule on AP [78:72:5d:fd:fb:60]

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab Succesfully freed AID 5, slot 0 on AP 78:72:5d:fd:fb:60, #client on this slot 1

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab New ctxOwnerMwarIp: 10.10.4.10 New ctxOwnerApMac: 78:72:5D:F8:7F:A0 New ctxOwnerApEthMac: 78:72:5D:87:88:8C New ctxOwnerApSlotId: 0

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab Updated location for station old AP 78:72:5d:fd:fb:60 oldSlot 0, new AP 78:72:5d:f8:7f:a0 newSlot 0, AID 0 MsType 0 MobilityRole 1

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab Assigning flex webauth IPv4-ACL ID :65535, IPv6-ACL ID:65535 for AP WLAN ID : 1

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab Assigned flex post-auth IPv4-ACL ID :65535, IPv6-ACL ID:65535 for AP WLAN ID : 1

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab Updating AID for REAP AP Client 78:72:5d:f8:7f:a0 - AID ===> 9

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab apfMsRunStateDec

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab apfMs1xStateDec

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab 10.10.2.41 RUN (20) Change state to START (0) last state RUN (20)

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab the value of url acl preserve flag is 0 for mobile f0:0f:ec:bf:0f:ab (caller pem_api.c:3684)

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab 10.10.2.41 START (0) Initializing policy

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab 10.10.2.41 START (0) Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab apfVapSecurity=0x40004000 L2=16384 SkipWeb=0

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab AuthenticationRequired = 1

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab 10.10.2.41 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab Encryption policy is set to 0x80000001

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab Setting the action to initiate 1x 4 way handshake upon Add_Mobile_Ack for station with encrypt policy:[80000001]

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab 10.10.2.41 8021X_REQD (3) Client already has IP 10.10.2.41, DHCP Not required on AP 78:72:5d:f8:7f:a0 vapId 1 apVapId 1

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab Not Using WMM Compliance code qosCap 00

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab flex webauth acl id to be sent :65535 name : client acl id :65535 name :

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab flex webauth ipv6 acl id to be sent :65535 name : client acl id :65535 name :

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab Vlan while overriding the policy = -1

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab sending to spamAddMobile vlanId -1 aclName = , flexAclId 65535

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab 10.10.2.41 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 78:72:5d:f8:7f:a0 vapId 1 apVapId 1 flex acl-name: v6acl-name

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab apfPemAddUser2 (apf_policy.c:451) Changing state for mobile f0:0f:ec:bf:0f:ab on AP 78:72:5d:f8:7f:a0 from Associated to Associated

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab apfPemAddUser2:session timeout forstation f0:0f:ec:bf:0f:ab - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab Stopping deletion of Mobile Station: (callerId: 48)

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_0: Aug 09 08:59:05.013: f0:0f:ec:bf:0f:ab Sending assoc-resp with status 0 station:f0:0f:ec:bf:0f:ab AP:78:72:5d:f8:7f:a0-00 on apVapId 1

*apfMsConnTask_0: Aug 09 08:59:05.014: f0:0f:ec:bf:0f:ab Sending Assoc Response (status: '0') to station on AP WAP08 on BSSID 78:72:5d:f8:7f:a0 ApVapId 1 Slot 0, mobility role 1

*apfMsConnTask_0: Aug 09 08:59:05.014: f0:0f:ec:bf:0f:ab apfProcessAssocReq (apf_80211.c:12284) Changing state for mobile f0:0f:ec:bf:0f:ab on AP 78:72:5d:f8:7f:a0 from Associated to Associated

*spamApTask0: Aug 09 08:59:05.014: f0:0f:ec:bf:0f:ab Setting DEL_MOBILE (seqno 0, action 6) ack state for STA on AP 78:72:5d:fd:fb:60

*spamApTask0: Aug 09 08:59:05.014: f0:0f:ec:bf:0f:ab Delete Mobile request with reason 'MN_DEL_INTER_AP_ROAM' on slot 0 sent to the AP 78:72:5d:fd:fb:60 IP: 10.10.4.13:5272.

*spamApTask0: Aug 09 08:59:05.014: f0:0f:ec:bf:0f:ab Add SGT:0 to AP 78:72:5d:f8:7f:a0

*spamApTask0: Aug 09 08:59:05.014: f0:0f:ec:bf:0f:ab Add CTS mobile SGT - Encoded the capwap payload for the mobile with SGT 0

*spamApTask0: Aug 09 08:59:05.014: f0:0f:ec:bf:0f:ab Flex Ipv6 pre-auth acl is not present, not Encoding Flex Ipv6 acl for add mobile Payload

*spamApTask0: Aug 09 08:59:05.014: f0:0f:ec:bf:0f:ab Flex Ipv6 post auth acl is not present, not updating add mobile Payload

*spamApTask0: Aug 09 08:59:05.014: f0:0f:ec:bf:0f:ab Setting ADD_MOBILE (idx 0, seqno 0, action 1, count 226944037) ack state for STA on AP 78:72:5d:f8:7f:a0

*spamApTask0: Aug 09 08:59:05.017: f0:0f:ec:bf:0f:ab Received ADD_MOBILE ack - Initiating 1x to STA f0:0f:ec:bf:0f:ab (idx 41)

*spamApTask0: Aug 09 08:59:05.017: f0:0f:ec:bf:0f:ab APF Initiating 1x to STA f0:0f:ec:bf:0f:ab

*spamApTask0: Aug 09 08:59:05.017: f0:0f:ec:bf:0f:ab Sent dot1x auth initiate message for mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.017: f0:0f:ec:bf:0f:ab dot1xProcessInitiate1XtoMobile to mobile station f0:0f:ec:bf:0f:ab (mscb 26, msg 26)

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.017: f0:0f:ec:bf:0f:ab reauth_sm state transition 0 ---> 0 for mobile f0:0f:ec:bf:0f:ab at 1x_reauth_sm.c:53

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.017: f0:0f:ec:bf:0f:ab PMKID roamed client and psk, initiate handshake directly

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.017: f0:0f:ec:bf:0f:ab Initiating RSN with existing PMK to mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.017: f0:0f:ec:bf:0f:ab EAP-PARAM Debug - eap-params for Wlan-Id :1 is disabled - applying Global eap timers and retries

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.017: f0:0f:ec:bf:0f:ab Disable re-auth, use PMK lifetime.

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.017: f0:0f:ec:bf:0f:ab dot1x - moving mobile f0:0f:ec:bf:0f:ab into Force Auth state

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.017: f0:0f:ec:bf:0f:ab Skipping EAP-Success to mobile f0:0f:ec:bf:0f:ab (encryptBit:0)

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.017: f0:0f:ec:bf:0f:ab key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.017: f0:0f:ec:bf:0f:ab Found an cache entry for BSSID 78:72:5d:f8:7f:a0 in PMKID cache at index 0 of station f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.017: Including PMKID in M1 (16)

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.017: [0000] 0e 7b 37 3c 0e 02 c5 de 98 3c e1 6f 8c 5d d7 3a

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.017: M1 - Key Data: (22)

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.017: [0000] dd 14 00 0f ac 04 0e 7b 37 3c 0e 02 c5 de 98 3c

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.017: [0016] e1 6f 8c 5d d7 3a

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.017: f0:0f:ec:bf:0f:ab Starting key exchange to mobile f0:0f:ec:bf:0f:ab, data packets will be dropped

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.017: f0:0f:ec:bf:0f:ab Sending EAPOL-Key Message to mobile f0:0f:ec:bf:0f:ab

state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.017: f0:0f:ec:bf:0f:ab Allocating EAP Pkt for retransmission to mobile f0:0f:ec:bf:0f:ab

*CAPWAP DATA: Aug 09 08:59:05.047: f0:0f:ec:bf:0f:ab validating eapol pkt: key version = 2

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.047: f0:0f:ec:bf:0f:ab Received EAPOL-Key from mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.047: f0:0f:ec:bf:0f:ab Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.047: f0:0f:ec:bf:0f:ab key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.047: f0:0f:ec:bf:0f:ab Received EAPOL-key in PTK_START state (message 2) from mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.047: f0:0f:ec:bf:0f:ab Encryption Policy: 4, PTK Key Length: 48

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.047: f0:0f:ec:bf:0f:ab Successfully computed PTK from PMK!!!

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.047: f0:0f:ec:bf:0f:ab Received valid MIC in EAPOL Key Message M2!!!!!

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.047: f0:0f:ec:bf:0f:ab Compare RSN IE in association and EAPOL-M2 frame(rsnie_len :20, and grpMgmtCipherLen:0)

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.047: f0:0f:ec:bf:0f:ab rsnieCapabilty = 0 rsnie_len =20

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.047: f0:0f:ec:bf:0f:ab Dumping RSNIE received in Association request(len = 22):

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.047: 00000000: 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0...............

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.047: 00000010: 00 0f ac 02 00 00 ......

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.047: f0:0f:ec:bf:0f:ab Dumping RSNIE received in EAPOL M2 (len = 20):

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.047: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.047: 00000010: ac 02 00 00 ....

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.047: f0:0f:ec:bf:0f:ab Stopping retransmission timer for mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.047: f0:0f:ec:bf:0f:ab key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.047: f0:0f:ec:bf:0f:ab Sending EAPOL-Key Message to mobile f0:0f:ec:bf:0f:ab

state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.047: f0:0f:ec:bf:0f:ab Reusing allocated memory for EAP Pkt for retransmission to mobile f0:0f:ec:bf:0f:ab

*CAPWAP DATA: Aug 09 08:59:05.062: f0:0f:ec:bf:0f:ab validating eapol pkt: key version = 2

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.062: f0:0f:ec:bf:0f:ab Received EAPOL-Key from mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.062: f0:0f:ec:bf:0f:ab Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.062: f0:0f:ec:bf:0f:ab key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.062: f0:0f:ec:bf:0f:ab Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.062: f0:0f:ec:bf:0f:ab Stopping retransmission timer for mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.062: f0:0f:ec:bf:0f:ab Freeing EAP Retransmit Bufer for mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.062: f0:0f:ec:bf:0f:ab apfMs1xStateInc

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.062: f0:0f:ec:bf:0f:ab 10.10.2.41 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.062: f0:0f:ec:bf:0f:ab 10.10.2.41 L2AUTHCOMPLETE (4) Client already has IP 10.10.2.41, DHCP Not required on AP 78:72:5d:f8:7f:a0 vapId 1 apVapId 1

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.062: f0:0f:ec:bf:0f:ab Not Using WMM Compliance code qosCap 00

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.062: f0:0f:ec:bf:0f:ab flex webauth acl id to be sent :65535 name : client acl id :65535 name :

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.062: f0:0f:ec:bf:0f:ab flex webauth ipv6 acl id to be sent :65535 name : client acl id :65535 name :

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.062: f0:0f:ec:bf:0f:ab Vlan while overriding the policy = -1

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.062: f0:0f:ec:bf:0f:ab sending to spamAddMobile vlanId -1 aclName = , flexAclId 65535

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.062: f0:0f:ec:bf:0f:ab 10.10.2.41 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 78:72:5d:f8:7f:a0 vapId 1 apVapId 1 flex acl-name: v6acl-name

*spamApTask0: Aug 09 08:59:05.062: f0:0f:ec:bf:0f:ab Add SGT:0 to AP 78:72:5d:f8:7f:a0

*spamApTask0: Aug 09 08:59:05.062: f0:0f:ec:bf:0f:ab Add CTS mobile SGT - Encoded the capwap payload for the mobile with SGT 0

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.062: f0:0f:ec:bf:0f:ab apfMsRunStateInc

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.062: f0:0f:ec:bf:0f:ab 10.10.2.41 L2AUTHCOMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.063: f0:0f:ec:bf:0f:ab 10.10.2.41 RUN (20) Reached PLUMBFASTPATH: from line 7373, null

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.063: f0:0f:ec:bf:0f:ab Initiating Accounting request(1) update for mobile

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.063: f0:0f:ec:bf:0f:ab PemLocationConfigured [1]Adding VSA with NAS update and Role[1] with state[0]

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.063: f0:0f:ec:bf:0f:ab 10.10.2.41 RUN (20) No 11v BTM

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.063: f0:0f:ec:bf:0f:ab 10.10.2.41 RUN (20) NO release MSCB

*Dot1x_NW_MsgTask_0: Aug 09 08:59:05.063: f0:0f:ec:bf:0f:ab Successfully Plumbed PTK session Keysfor mobile f0:0f:ec:bf:0f:ab

*spamApTask0: Aug 09 08:59:05.063: f0:0f:ec:bf:0f:ab Flex Ipv6 pre-auth acl is not present, not Encoding Flex Ipv6 acl for add mobile Payload

*spamApTask0: Aug 09 08:59:05.063: f0:0f:ec:bf:0f:ab Flex Ipv6 post auth acl is not present, not updating add mobile Payload

*spamApTask0: Aug 09 08:59:05.063: f0:0f:ec:bf:0f:ab Successful transmission of LWAPP Add-Mobile to AP 78:72:5d:f8:7f:a0 idx@42

*apfReceiveTask: Aug 09 08:59:07.261: f0:0f:ec:bf:0f:ab Recieved MS IPv4 Addr= 10.10.2.41

*apfReceiveTask: Aug 09 08:59:07.262: f0:0f:ec:bf:0f:ab Updating MS IPv6[1] Addr= fe80:0000:0000:0000:f20f:ecff:febf:0fab

*apfReceiveTask: Aug 09 08:59:07.262: f0:0f:ec:bf:0f:ab WcdbClientUpdate: IP Binding from WCDB ip_learn_type 2, add_or_delete 1

*apfReceiveTask: Aug 09 08:59:07.262: f0:0f:ec:bf:0f:ab IPv4 Addr: 10:10:2:41

*apfReceiveTask: Aug 09 08:59:07.262: f0:0f:ec:bf:0f:ab Static IP client associated to interface management which cannot support client subnet.

*apfReceiveTask: Aug 09 08:59:07.262: f0:0f:ec:bf:0f:ab No DHCP scope for IP scope name none.

*apfReceiveTask: Aug 09 08:59:49.133: f0:0f:ec:bf:0f:ab Received management frame ACTION on BSSID 78:72:5d:f8:7f:a0 destination addr 78:72:5d:f8:7f:a0

*apfMsConnTask_0: Aug 09 08:59:49.133: f0:0f:ec:bf:0f:ab Got action frame from the client (ActionCategory:10), payloadLen:4

*apfReceiveTask: Aug 09 08:59:49.199: f0:0f:ec:bf:0f:ab Received management frame ACTION on BSSID 78:72:5d:f8:7f:a0 destination addr 78:72:5d:f8:7f:a0

*apfMsConnTask_0: Aug 09 08:59:49.199: f0:0f:ec:bf:0f:ab Got action frame from the client (ActionCategory:10), payloadLen:5

*apfReceiveTask: Aug 09 08:59:53.602: f0:0f:ec:bf:0f:ab Received management frame REASSOCIATION REQUEST on BSSID 78:72:5d:fd:fc:c0 destination addr 78:72:5d:fd:fc:c0

*apfMsConnTask_0: Aug 09 08:59:53.602: f0:0f:ec:bf:0f:ab Processing assoc-req station:f0:0f:ec:bf:0f:ab AP:78:72:5d:fd:fc:c0-00 ssid : HOME thread:5e265650

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab Station: F0:0F:EC:BF:0F:AB trying to join WLAN with RSSI -36. Checking for XOR roam conditions on AP: 78:72:5D:FD:FC:C0 Slot: 0

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab Station: F0:0F:EC:BF:0F:AB is associating to AP 78:72:5D:FD:FC:C0 which is not XOR roam capable

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab Setting hasApChnaged Flag as true. It is a roam scenario.

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab Setting RTTS enabled to 0

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab Reassociation received from mobile on BSSID 78:72:5d:fd:fc:c0 AP WAP02

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab Station: F0:0F:EC:BF:0F:AB trying to join WLAN with RSSI -36. Checking for XOR roam conditions on AP: 78:72:5D:FD:FC:C0 Slot: 0

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab Station: F0:0F:EC:BF:0F:AB is associating to AP 78:72:5D:FD:FC:C0 which is not XOR roam capable

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab Global 200 Clients are allowed to AP radio

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab Max Client Trap Threshold: 0 cur: 2

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab Updated local bridging VLAN to 0 while applying WLAN policy

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab Updated session timeout to 0 and Sleep timeout to 720 while applying WLAN policy

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab override for default ap group, marking intgrp NULL

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User - 0

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab Check before Setting the NAS Id to WLAN specific Id ''

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab In processSsidIE:7127 setting Central switched to FALSE

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab Set Clinet MSCB as Central Association Disabled

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab Applying site-specific Local Bridging override for station f0:0f:ec:bf:0f:ab - vapId 1, site 'default-group', interface 'management'

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab Applying Local Bridging Interface Policy for station f0:0f:ec:bf:0f:ab - vlan 0, interface id 0, interface 'management', nasId:''

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab Set Clinet Non AP specific WLAN apfMsAccessVlan = 601

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab This apfMsAccessVlan may be changed later from AAA after L2 Auth

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab Cleared localSwitchingVlan, may be assigned later based on AAA override

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab processSsidIE statusCode is 0 and status is 0

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab processSsidIE ssid_done_flag is 0 finish_flag is 0

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab STA - rates (6): 152 36 48 72 96 108 0 0 0 0 0 0 0 0 0 0

*apfMsConnTask_0: Aug 09 08:59:53.603: f0:0f:ec:bf:0f:ab suppRates statusCode is 0 and gotSuppRatesElement is 1

*apfMsConnTask_0: Aug 09 08:59:53.603: RSNIE in Assoc. Req.: (20)

*apfMsConnTask_0: Aug 09 08:59:53.603: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_0: Aug 09 08:59:53.603: [0016] ac 02 00 00

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab Processing RSN IE type 48, length 20 for mobile f0:0f:ec:bf:0f:ab

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab Selected Unicast cipher CCMP128 for client device

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab Received 802.11i PSK key management suite, enabling Authentication

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab RSN Capabilities: 0

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab non-11w Capable mobile

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab Received RSN IE with 0 PMKIDs from mobile f0:0f:ec:bf:0f:ab

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab

Client auth Key mgmt type is 2, but cache key mgmt type is 5

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab Created PMKID PMK Cache for BSSID 78:72:5d:fd:fc:c0 at index 0 for station f0:0f:ec:bf:0f:ab

*apfMsConnTask_0: Aug 09 08:59:53.604: New PMKID: (16)

*apfMsConnTask_0: Aug 09 08:59:53.604: [0000] 4a 9c 38 f0 93 5d f3 6c 49 2b 23 38 61 7b 06 21

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab Setting active key cache index 0 ---> 0

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab Roamed client : Insert the newly computed pmkId at idx 0 for mobile f0:0f:ec:bf:0f:ab

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab the value of url acl preserve flag is 1 for mobile f0:0f:ec:bf:0f:ab (caller pem_api.c:5148)

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab 10.10.2.41 RUN (20) Deleted mobile LWAPP rule on AP [78:72:5d:f8:7f:a0]

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab Succesfully freed AID 9, slot 0 on AP 78:72:5d:f8:7f:a0, #client on this slot 4

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab New ctxOwnerMwarIp: 10.10.4.10 New ctxOwnerApMac: 78:72:5D:FD:FC:C0 New ctxOwnerApEthMac: 78:72:5D:F6:FA:0C New ctxOwnerApSlotId: 0

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab Updated location for station old AP 78:72:5d:f8:7f:a0 oldSlot 0, new AP 78:72:5d:fd:fc:c0 newSlot 0, AID 0 MsType 0 MobilityRole 1

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab Assigning flex webauth IPv4-ACL ID :65535, IPv6-ACL ID:65535 for AP WLAN ID : 1

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab Assigned flex post-auth IPv4-ACL ID :65535, IPv6-ACL ID:65535 for AP WLAN ID : 1

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab Updating AID for REAP AP Client 78:72:5d:fd:fc:c0 - AID ===> 12

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab apfMsRunStateDec

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab apfMs1xStateDec

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab 10.10.2.41 RUN (20) Change state to START (0) last state RUN (20)

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab the value of url acl preserve flag is 0 for mobile f0:0f:ec:bf:0f:ab (caller pem_api.c:3684)

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab 10.10.2.41 START (0) Initializing policy

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab 10.10.2.41 START (0) Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab apfVapSecurity=0x40004000 L2=16384 SkipWeb=0

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab AuthenticationRequired = 1

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab 10.10.2.41 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab Encryption policy is set to 0x80000001

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab Setting the action to initiate 1x 4 way handshake upon Add_Mobile_Ack for station with encrypt policy:[80000001]

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab 10.10.2.41 8021X_REQD (3) Client already has IP 10.10.2.41, DHCP Not required on AP 78:72:5d:fd:fc:c0 vapId 1 apVapId 1

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab Not Using WMM Compliance code qosCap 00

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab flex webauth acl id to be sent :65535 name : client acl id :65535 name :

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab flex webauth ipv6 acl id to be sent :65535 name : client acl id :65535 name :

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab Vlan while overriding the policy = -1

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab sending to spamAddMobile vlanId -1 aclName = , flexAclId 65535

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab 10.10.2.41 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 78:72:5d:fd:fc:c0 vapId 1 apVapId 1 flex acl-name: v6acl-name

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab apfPemAddUser2 (apf_policy.c:451) Changing state for mobile f0:0f:ec:bf:0f:ab on AP 78:72:5d:fd:fc:c0 from Associated to Associated

*apfMsConnTask_0: Aug 09 08:59:53.604: f0:0f:ec:bf:0f:ab apfPemAddUser2:session timeout forstation f0:0f:ec:bf:0f:ab - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0

*apfMsConnTask_0: Aug 09 08:59:53.605: f0:0f:ec:bf:0f:ab Stopping deletion of Mobile Station: (callerId: 48)

*apfMsConnTask_0: Aug 09 08:59:53.605: f0:0f:ec:bf:0f:ab Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_0: Aug 09 08:59:53.605: f0:0f:ec:bf:0f:ab Sending assoc-resp with status 0 station:f0:0f:ec:bf:0f:ab AP:78:72:5d:fd:fc:c0-00 on apVapId 1

*apfMsConnTask_0: Aug 09 08:59:53.605: f0:0f:ec:bf:0f:ab Sending Assoc Response (status: '0') to station on AP WAP02 on BSSID 78:72:5d:fd:fc:c0 ApVapId 1 Slot 0, mobility role 1

*apfMsConnTask_0: Aug 09 08:59:53.605: f0:0f:ec:bf:0f:ab apfProcessAssocReq (apf_80211.c:12284) Changing state for mobile f0:0f:ec:bf:0f:ab on AP 78:72:5d:fd:fc:c0 from Associated to Associated

*spamApTask0: Aug 09 08:59:53.605: f0:0f:ec:bf:0f:ab Setting DEL_MOBILE (seqno 0, action 6) ack state for STA on AP 78:72:5d:f8:7f:a0

*spamApTask0: Aug 09 08:59:53.605: f0:0f:ec:bf:0f:ab Delete Mobile request with reason 'MN_DEL_INTER_AP_ROAM' on slot 0 sent to the AP 78:72:5d:f8:7f:a0 IP: 10.10.4.18:5272.

*spamApTask0: Aug 09 08:59:53.605: f0:0f:ec:bf:0f:ab Add SGT:0 to AP 78:72:5d:fd:fc:c0

*spamApTask0: Aug 09 08:59:53.605: f0:0f:ec:bf:0f:ab Add CTS mobile SGT - Encoded the capwap payload for the mobile with SGT 0

*spamApTask0: Aug 09 08:59:53.605: f0:0f:ec:bf:0f:ab Flex Ipv6 pre-auth acl is not present, not Encoding Flex Ipv6 acl for add mobile Payload

*spamApTask0: Aug 09 08:59:53.605: f0:0f:ec:bf:0f:ab Flex Ipv6 post auth acl is not present, not updating add mobile Payload

*spamApTask0: Aug 09 08:59:53.605: f0:0f:ec:bf:0f:ab Successful transmission of LWAPP Add-Mobile to AP 78:72:5d:fd:fc:c0 idx@50

*spamApTask0: Aug 09 08:59:53.605: f0:0f:ec:bf:0f:ab Setting ADD_MOBILE (idx 0, seqno 0, action 1, count 226944039) ack state for STA on AP 78:72:5d:fd:fc:c0

*spamApTask0: Aug 09 08:59:53.612: f0:0f:ec:bf:0f:ab Received ADD_MOBILE ack - Initiating 1x to STA f0:0f:ec:bf:0f:ab (idx 50)

*spamApTask0: Aug 09 08:59:53.612: f0:0f:ec:bf:0f:ab APF Initiating 1x to STA f0:0f:ec:bf:0f:ab

*spamApTask0: Aug 09 08:59:53.612: f0:0f:ec:bf:0f:ab Sent dot1x auth initiate message for mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.612: f0:0f:ec:bf:0f:ab dot1xProcessInitiate1XtoMobile to mobile station f0:0f:ec:bf:0f:ab (mscb 27, msg 27)

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.612: f0:0f:ec:bf:0f:ab reauth_sm state transition 0 ---> 0 for mobile f0:0f:ec:bf:0f:ab at 1x_reauth_sm.c:53

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.612: f0:0f:ec:bf:0f:ab PMKID roamed client and psk, initiate handshake directly

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.612: f0:0f:ec:bf:0f:ab Initiating RSN with existing PMK to mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.612: f0:0f:ec:bf:0f:ab EAP-PARAM Debug - eap-params for Wlan-Id :1 is disabled - applying Global eap timers and retries

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.612: f0:0f:ec:bf:0f:ab Disable re-auth, use PMK lifetime.

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.612: f0:0f:ec:bf:0f:ab dot1x - moving mobile f0:0f:ec:bf:0f:ab into Force Auth state

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.612: f0:0f:ec:bf:0f:ab Skipping EAP-Success to mobile f0:0f:ec:bf:0f:ab (encryptBit:0)

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.612: f0:0f:ec:bf:0f:ab key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.612: f0:0f:ec:bf:0f:ab Found an cache entry for BSSID 78:72:5d:fd:fc:c0 in PMKID cache at index 0 of station f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.612: Including PMKID in M1 (16)

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.612: [0000] 4a 9c 38 f0 93 5d f3 6c 49 2b 23 38 61 7b 06 21

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.612: M1 - Key Data: (22)

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.612: [0000] dd 14 00 0f ac 04 4a 9c 38 f0 93 5d f3 6c 49 2b

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.612: [0016] 23 38 61 7b 06 21

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.612: f0:0f:ec:bf:0f:ab Starting key exchange to mobile f0:0f:ec:bf:0f:ab, data packets will be dropped

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.612: f0:0f:ec:bf:0f:ab Sending EAPOL-Key Message to mobile f0:0f:ec:bf:0f:ab

state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.612: f0:0f:ec:bf:0f:ab Allocating EAP Pkt for retransmission to mobile f0:0f:ec:bf:0f:ab

*CAPWAP DATA: Aug 09 08:59:53.626: f0:0f:ec:bf:0f:ab validating eapol pkt: key version = 2

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.626: f0:0f:ec:bf:0f:ab Received EAPOL-Key from mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.626: f0:0f:ec:bf:0f:ab Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.626: f0:0f:ec:bf:0f:ab key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.626: f0:0f:ec:bf:0f:ab Received EAPOL-key in PTK_START state (message 2) from mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.626: f0:0f:ec:bf:0f:ab Encryption Policy: 4, PTK Key Length: 48

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.626: f0:0f:ec:bf:0f:ab Successfully computed PTK from PMK!!!

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.626: f0:0f:ec:bf:0f:ab Received valid MIC in EAPOL Key Message M2!!!!!

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.626: f0:0f:ec:bf:0f:ab Compare RSN IE in association and EAPOL-M2 frame(rsnie_len :20, and grpMgmtCipherLen:0)

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.626: f0:0f:ec:bf:0f:ab rsnieCapabilty = 0 rsnie_len =20

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.626: f0:0f:ec:bf:0f:ab Dumping RSNIE received in Association request(len = 22):

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.626: 00000000: 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0...............

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.626: 00000010: 00 0f ac 02 00 00 ......

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.626: f0:0f:ec:bf:0f:ab Dumping RSNIE received in EAPOL M2 (len = 20):

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.626: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.626: 00000010: ac 02 00 00 ....

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.626: f0:0f:ec:bf:0f:ab Stopping retransmission timer for mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.626: f0:0f:ec:bf:0f:ab key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.626: f0:0f:ec:bf:0f:ab Sending EAPOL-Key Message to mobile f0:0f:ec:bf:0f:ab

state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.626: f0:0f:ec:bf:0f:ab Reusing allocated memory for EAP Pkt for retransmission to mobile f0:0f:ec:bf:0f:ab

*CAPWAP DATA: Aug 09 08:59:53.641: f0:0f:ec:bf:0f:ab validating eapol pkt: key version = 2

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.641: f0:0f:ec:bf:0f:ab Received EAPOL-Key from mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.641: f0:0f:ec:bf:0f:ab Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.641: f0:0f:ec:bf:0f:ab key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.641: f0:0f:ec:bf:0f:ab Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.641: f0:0f:ec:bf:0f:ab Stopping retransmission timer for mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.641: f0:0f:ec:bf:0f:ab Freeing EAP Retransmit Bufer for mobile f0:0f:ec:bf:0f:ab

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.641: f0:0f:ec:bf:0f:ab apfMs1xStateInc

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.641: f0:0f:ec:bf:0f:ab 10.10.2.41 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.642: f0:0f:ec:bf:0f:ab 10.10.2.41 L2AUTHCOMPLETE (4) Client already has IP 10.10.2.41, DHCP Not required on AP 78:72:5d:fd:fc:c0 vapId 1 apVapId 1

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.642: f0:0f:ec:bf:0f:ab Not Using WMM Compliance code qosCap 00

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.642: f0:0f:ec:bf:0f:ab flex webauth acl id to be sent :65535 name : client acl id :65535 name :

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.642: f0:0f:ec:bf:0f:ab flex webauth ipv6 acl id to be sent :65535 name : client acl id :65535 name :

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.642: f0:0f:ec:bf:0f:ab Vlan while overriding the policy = -1

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.642: f0:0f:ec:bf:0f:ab sending to spamAddMobile vlanId -1 aclName = , flexAclId 65535

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.642: f0:0f:ec:bf:0f:ab 10.10.2.41 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 78:72:5d:fd:fc:c0 vapId 1 apVapId 1 flex acl-name: v6acl-name

*spamApTask0: Aug 09 08:59:53.642: f0:0f:ec:bf:0f:ab Add SGT:0 to AP 78:72:5d:fd:fc:c0

*spamApTask0: Aug 09 08:59:53.642: f0:0f:ec:bf:0f:ab Add CTS mobile SGT - Encoded the capwap payload for the mobile with SGT 0

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.642: f0:0f:ec:bf:0f:ab apfMsRunStateInc

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.642: f0:0f:ec:bf:0f:ab 10.10.2.41 L2AUTHCOMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.642: f0:0f:ec:bf:0f:ab 10.10.2.41 RUN (20) Reached PLUMBFASTPATH: from line 7373, null

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.642: f0:0f:ec:bf:0f:ab Initiating Accounting request(1) update for mobile

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.642: f0:0f:ec:bf:0f:ab PemLocationConfigured [1]Adding VSA with NAS update and Role[1] with state[0]

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.642: f0:0f:ec:bf:0f:ab 10.10.2.41 RUN (20) No 11v BTM

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.642: f0:0f:ec:bf:0f:ab 10.10.2.41 RUN (20) NO release MSCB

*Dot1x_NW_MsgTask_0: Aug 09 08:59:53.642: f0:0f:ec:bf:0f:ab Successfully Plumbed PTK session Keysfor mobile f0:0f:ec:bf:0f:ab

*spamApTask0: Aug 09 08:59:53.642: f0:0f:ec:bf:0f:ab Flex Ipv6 pre-auth acl is not present, not Encoding Flex Ipv6 acl for add mobile Payload

*spamApTask0: Aug 09 08:59:53.642: f0:0f:ec:bf:0f:ab Flex Ipv6 post auth acl is not present, not updating add mobile Payload

*spamApTask0: Aug 09 08:59:53.642: f0:0f:ec:bf:0f:ab Successful transmission of LWAPP Add-Mobile to AP 78:72:5d:fd:fc:c0 idx@51

*apfReceiveTask: Aug 09 08:59:55.743: f0:0f:ec:bf:0f:ab Recieved MS IPv4 Addr= 10.10.2.41

*apfReceiveTask: Aug 09 08:59:55.743: f0:0f:ec:bf:0f:ab Updating MS IPv6[1] Addr= fe80:0000:0000:0000:f20f:ecff:febf:0fab

*apfReceiveTask: Aug 09 08:59:55.743: f0:0f:ec:bf:0f:ab WcdbClientUpdate: IP Binding from WCDB ip_learn_type 2, add_or_delete 1

*apfReceiveTask: Aug 09 08:59:55.743: f0:0f:ec:bf:0f:ab IPv4 Addr: 10:10:2:41

*apfReceiveTask: Aug 09 08:59:55.743: f0:0f:ec:bf:0f:ab Static IP client associated to interface management which cannot support client subnet.

*apfReceiveTask: Aug 09 08:59:55.743: f0:0f:ec:bf:0f:ab No DHCP scope for IP scope name none.

Leo Laohoo · ‎08-09-2019

Try this: Wifi Roaming Fix

Rasika Nayanajith · ‎08-09-2019

check what channels APs are operating & what channels client is supporting. You can refer below page

https://clients.mikealbano.com/

If your APs on CH149 - 165 in 5GHz, these phones may not support those frequencies (as per the info in that page). So clinet won't see those AP, operate on those frequencies.

HTH

Rasika
*** Pls rate all useful responses ***

3xIT · ‎08-09-2019

I don't think that is the problem