Clients getting limited connectivity when trying to connect guest SSID

[Abinaya R]

Hi,

I have configured two WLC in Lan and one in DMZ for guest access. The EOIP tunnel is up between the WLCs in the LAN and that in the DMZ.

The DHCP scope is created internally for the guest users in the DMZ WLC and all the required configuration in WLC was done and it was working fine. But suddenly the clients couldnot take the IP and am getting limited or no connectivity. I tried debug of the client in the WLC and i am getting the following log. please suggest me a solution to take up

Idle to Probe
Tue Mar 15 19:09:06 2011: 00:22:5f:31:8c:d1 Scheduling deletion of Mobile Station:  (callerId: 24) in 5 seconds
Tue Mar 15 19:09:07 2011: 00:22:5f:31:8c:d1 Scheduling deletion of Mobile Station:  (callerId: 24) in 5 seconds
Tue Mar 15 19:09:07 2011: 00:22:5f:31:8c:d1 Scheduling deletion of Mobile Station:  (callerId: 24) in 5 seconds
Tue Mar 15 19:09:07 2011: 00:22:5f:31:8c:d1 Scheduling deletion of Mobile Station:  (callerId: 24) in 5 seconds
Tue Mar 15 19:09:07 2011: 00:22:5f:31:8c:d1 Scheduling deletion of Mobile Station:  (callerId: 24) in 5 seconds
Tue Mar 15 19:09:07 2011: 00:22:5f:31:8c:d1 Scheduling deletion of Mobile Station:  (callerId: 24) in 5 seconds
Tue Mar 15 19:09:07 2011: 00:22:5f:31:8c:d1 Scheduling deletion of Mobile Station:  (callerId: 24) in 5 seconds
Tue Mar 15 19:09:07 2011: 00:22:5f:31:8c:d1 Scheduling deletion of Mobile Station:  (callerId: 24) in 5 seconds
Tue Mar 15 19:09:12 2011: 00:22:5f:31:8c:d1 apfMsExpireCallback (apf_ms.c:433) Expiring Mobile!
Tue Mar 15 19:09:12 2011: 00:22:5f:31:8c:d1 0.0.0.0 START (0) Deleted mobile LWAPP rule on AP [00:1a:e3:02:63:30]
Tue Mar 15 19:09:12 2011: 00:22:5f:31:8c:d1 Deleting mobile on AP 00:1a:e3:02:63:30(0)
Tue Mar 15 19:09:28 2011: 00:22:5f:31:8c:d1 Adding mobile on LWAPP AP 00:1a:e3:02:63:30(0)
Tue Mar 15 19:09:28 2011: 00:22:5f:31:8c:d1 Scheduling deletion of Mobile Station:  (callerId: 23) in 5 seconds
Tue Mar 15 19:09:28 2011: 00:22:5f:31:8c:d1 apfProcessProbeReq (apf_80211.c:4142) Changing state for mobile 00:22:5f:31:8c:d1 on AP 00:1a:e3:02:63:30 from Idle to Probe
Tue Mar 15 19:09:28 2011: 00:22:5f:31:8c:d1 Scheduling deletion of Mobile Station:  (callerId: 24) in 5 seconds
Tue Mar 15 19:09:31 2011: 00:22:5f:31:8c:d1 Association received from mobile on AP 00:1a:e3:02:63:30
Tue Mar 15 19:09:31 2011: 00:22:5f:31:8c:d1 STA - rates (4): 130 132 139 150 0 0 0 0 0 0 0 0 0 0 0 0
Tue Mar 15 19:09:31 2011: 00:22:5f:31:8c:d1 STA - rates (12): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
Tue Mar 15 19:09:31 2011: 00:22:5f:31:8c:d1 0.0.0.0 START (0) Initializing policy
Tue Mar 15 19:09:31 2011: 00:22:5f:31:8c:d1 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state AUTHCHECK (2)
Tue Mar 15 19:09:31 2011: 00:22:5f:31:8c:d1 0.0.0.0 AUTHCHECK (2) Change state to L2AUTHCOMPLETE (4) last state L2AUTHCOMPLETE (4)
Tue Mar 15 19:09:31 2011: 00:22:5f:31:8c:d1 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 00:1a:e3:02:63:30
Tue Mar 15 19:09:31 2011: 00:22:5f:31:8c:d1 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state DHCP_REQD (7)
Tue Mar 15 19:09:31 2011: 00:22:5f:31:8c:d1 apfPemAddUser2 (apf_policy.c:212) Changing state for mobile 00:22:5f:31:8c:d1 on AP 00:1a:e3:02:63:30 from Probe to Associated
Tue Mar 15 19:09:31 2011: 00:22:5f:31:8c:d1 Scheduling deletion of Mobile Station:  (callerId: 49) in 1800 seconds
Tue Mar 15 19:09:31 2011: 00:22:5f:31:8c:d1 Sending Assoc Response to station on BSSID 00:1a:e3:02:63:30 (status 0)
Tue Mar 15 19:09:31 2011: 00:22:5f:31:8c:d1 apfProcessAssocReq (apf_80211.c:3888) Changing state for mobile 00:22:5f:31:8c:d1 on AP 00:1a:e3:02:63:30 from Associated to Associated
Tue Mar 15 19:09:31 2011: 00:22:5f:31:8c:d1 Updating AID for REAP AP Client 00:1a:e3:02:63:30 - AID ===> 3
Tue Mar 15 19:09:31 2011: 00:22:5f:31:8c:d1 DHCP received op BOOTREQUEST (1) (len 308, port 29, encap 0xec03)
Tue Mar 15 19:09:31 2011: 00:22:5f:31:8c:d1 DHCP dropping packet due to ongoing mobility handshake exchange, (siaddr 0.0.0.0,  mobility state = 'apfMsMmQueryRequested'
Tue Mar 15 19:09:31 2011: 00:22:5f:31:8c:d1 DHCP received op BOOTREQUEST (1) (len 308, port 29, encap 0xec03)
Tue Mar 15 19:09:31 2011: 00:22:5f:31:8c:d1 DHCP dropping packet due to ongoing mobility handshake exchange, (siaddr 0.0.0.0,  mobility state = 'apfMsMmQueryRequested'
Tue Mar 15 19:09:33 2011: 00:22:5f:31:8c:d1 0.0.0.0 DHCP_REQD (7) State Update from Mobility-Incomplete to Mobility-Complete, mobility role=ExpForeign
Tue Mar 15 19:09:33 2011: 00:22:5f:31:8c:d1 0.0.0.0 DHCP_REQD (7) Change state to RUN (20) last state RUN (20)

[Surendra BG]

Hi,

Please let me know the WLC software version that we are running? and where is theDHCP pool configured??

If its either 6.0.199.4 or 7.0.98 , and the DHCP pool on the WLC, then we have know bug.. u need to open up a case with us (TAC) to get the same and upgrade the WLC to that..

If not  the work around is to run the DHCP services on any other L3 device or server other than WLC internal.

here is the bug ID..

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCth68708

Lemme know if this answered your question

Regards

Surendra

[Abinaya R]

Hi,

The sofware version on all the three controllers is 4.2.207.0. The DHCP for the guest users is configured  internally in the WLC at DMZ.

What would be the issue ?

[Surendra BG]

Ok. In that case.. we are not hitting the bug.. Enable DHCP proxy on the WLC and let me know if this helps..

Regards

Surendra

[Surendra BG]

And just to add.. the debud looks good with the client going into RUN state without any problem..

Regards

Surendra

[Surendra BG]

Tue Mar 15 19:09:31 2011: 00:22:5f:31:8c:d1 Scheduling deletion of Mobile Station:  (callerId: 49) in 1800 seconds
Tue Mar 15 19:09:31 2011: 00:22:5f:31:8c:d1 Sending Assoc Response to station on BSSID 00:1a:e3:02:63:30 (status 0)
Tue  Mar 15 19:09:31 2011: 00:22:5f:31:8c:d1 apfProcessAssocReq  (apf_80211.c:3888) Changing state for mobile 00:22:5f:31:8c:d1 on AP  00:1a:e3:02:63:30 from Associated to Associated

On the WLAN advanced page.. please disable SESSION TIME OUT , if it is set to 1800 (default), the client will get disconnected when the client passes 1800 seconds..

lemme know if this helps

Regards

Surendra

[Abinaya R]

HI,

I tried these options.. Still its not working...

Anyother option can be there? I have attached the debug logs.

[danielavieira]

Maybe you have a problem with your DHCP server, please try to repush of the lease.