ipad2 can't join cisco wi-fi using wpa2 aes

18091988n · ‎04-13-2012

Hello! Is this a problem from Apple or Cisco side?

we have a cisco WLC 5508 on which few SSIDs are configured, and two kinds of APs: AIR-LAP1142N-E-K9 and converted AIR-AP1141N-E-K9.

When in WLAN settings we leave WPA2 policy and AES encryption, iPads2 can connect without any problems to AIR-LAP1142N-E-K9, but there is no connection to converted AIR-AP1141N-E-K9. MacBooks, iPhones are connecting without questions.

When we set WPA2+TKIP everything is cool, but other Apple devices can't rich 802.11n speeds((

P.S. With only WPA2+AES or both WPA2+AES+TKIP enabled on a WLAN the WLC gets such messages :

Decrypt errors occurred for client xx:xx:xx:xx:xx:xx using WPA2 key on 802.11b/g interface of AP xx:xx:xx:xx:xx:xx

But I know that it can happen when you offer funny encryption combinations that client doesn't like (wpa1+aes, wpa2+tkip). But the advise to try to only enable wpa2/aes for some reason doesn't work(.

What can cause it?...

Will be very appreciated for any advise!

Scott Fella · ‎04-13-2012

802.11N does require either open authentication or wpa2-aes. iOS devices don't really play well with a mixed layer 2 using both wpa-tkip and wpa2-aes. You can create anothe WLAN an name it WPA2 and configure it with the same SSID but only with WPA2-AES. The other WLAN you can name it WPA1 and use wpa-tkip. Try that.

Thanks,

Scott Fella

Sent from my iPhone

-Scott
*** Please rate helpful posts ***

18091988n · ‎08-21-2012

here i am again. Want to add that when i use WPA2+AES at the begining i can get the connection (not always), but in a couple of minutes the connection drops and to get it work again i have to reconnect.

here are the logs :

(Cisco Controller) >debug client a4:67:06:a6:b5:1c

(Cisco Controller) >*apfMsConnTask_6: Aug 20 10:33:19.947: a4:67:06:a6:b5:1c Adding mobile on LWAPP AP 68:bc:0c:63:3d:a0(0)

*apfMsConnTask_6: Aug 20 10:33:19.947: a4:67:06:a6:b5:1c Association received from mobile on AP 68:bc:0c:63:3d:a0

*apfMsConnTask_6: Aug 20 10:33:19.947: a4:67:06:a6:b5:1c 0.0.0.0 START (0) Changing ACL 'none' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1633)

*apfMsConnTask_6: Aug 20 10:33:19.947: a4:67:06:a6:b5:1c Applying site-specific IPv6 override for station a4:67:06:a6:b5:1c - vapId 3, site 'default-group', interface 'novyguest'

*apfMsConnTask_6: Aug 20 10:33:19.947: a4:67:06:a6:b5:1c Applying IPv6 Interface Policy for station a4:67:06:a6:b5:1c - vlan 63, interface id 12, interface 'novyguest'

*apfMsConnTask_6: Aug 20 10:33:19.947: a4:67:06:a6:b5:1c STA - rates (8): 130 132 139 150 36 48 72 108 0 0 0 0 0 0 0 0

*apfMsConnTask_6: Aug 20 10:33:19.947: a4:67:06:a6:b5:1c STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0

*apfMsConnTask_6: Aug 20 10:33:19.947: a4:67:06:a6:b5:1c Processing RSN IE type 48, length 20 for mobile a4:67:06:a6:b5:1c

*apfMsConnTask_6: Aug 20 10:33:19.947: a4:67:06:a6:b5:1c 0.0.0.0 START (0) Initializing policy

*apfMsConnTask_6: Aug 20 10:33:19.947: a4:67:06:a6:b5:1c 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state AUTHCHECK (2)

*apfMsConnTask_6: Aug 20 10:33:19.947: a4:67:06:a6:b5:1c 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state 8021X_REQD (3)

*apfMsConnTask_6: Aug 20 10:33:19.947: a4:67:06:a6:b5:1c 0.0.0.0 8021X_REQD (3) DHCP Not required on AP 68:bc:0c:63:3d:a0 vapId 3 apVapId 3for this client

*apfMsConnTask_6: Aug 20 10:33:19.947: a4:67:06:a6:b5:1c Not Using WMM Compliance code qosCap 00

*apfMsConnTask_6: Aug 20 10:33:19.947: a4:67:06:a6:b5:1c 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 68:bc:0c:63:3d:a0 vapId 3 apVapId 3

*apfMsConnTask_6: Aug 20 10:33:19.947: a4:67:06:a6:b5:1c apfMsAssoStateInc

*apfMsConnTask_6: Aug 20 10:33:19.947: a4:67:06:a6:b5:1c apfPemAddUser2 (apf_policy.c:223) Changing state for mobile a4:67:06:a6:b5:1c on AP 68:bc:0c:63:3d:a0 from Idle to Associated

*apfMsConnTask_6: Aug 20 10:33:19.947: a4:67:06:a6:b5:1c Scheduling deletion of Mobile Station: (callerId: 49) in 1800 seconds

*apfMsConnTask_6: Aug 20 10:33:19.947: a4:67:06:a6:b5:1c Sending Assoc Response to station on BSSID 68:bc:0c:63:3d:a0 (status 0) ApVapId 3 Slot 0

*apfMsConnTask_6: Aug 20 10:33:19.948: a4:67:06:a6:b5:1c apfProcessAssocReq (apf_80211.c:5272) Changing state for mobile a4:67:06:a6:b5:1c on AP 68:bc:0c:63:3d:a0 from Associated to Associated

*dot1xMsgTask: Aug 20 10:33:19.950: a4:67:06:a6:b5:1c Creating a PKC PMKID Cache entry for station a4:67:06:a6:b5:1c (RSN 2)

*dot1xMsgTask: Aug 20 10:33:19.950: a4:67:06:a6:b5:1c Adding BSSID 68:bc:0c:63:3d:a2 to PMKID cache for station a4:67:06:a6:b5:1c

*dot1xMsgTask: Aug 20 10:33:19.950: New PMKID: (16)

*dot1xMsgTask: Aug 20 10:33:19.950: [0000] b9 d9 fc ef 76 7a 2d 5a 34 ed 93 87 cd 57 45 a1

*dot1xMsgTask: Aug 20 10:33:19.950: a4:67:06:a6:b5:1c Initiating RSN PSK to mobile a4:67:06:a6:b5:1c

*dot1xMsgTask: Aug 20 10:33:19.950: a4:67:06:a6:b5:1c dot1x - moving mobile a4:67:06:a6:b5:1c into Force Auth state

*dot1xMsgTask: Aug 20 10:33:19.950: a4:67:06:a6:b5:1c Skipping EAP-Success to mobile a4:67:06:a6:b5:1c

*dot1xMsgTask: Aug 20 10:33:19.950: Including PMKID in M1 (16)

*dot1xMsgTask: Aug 20 10:33:19.950: [0000] b9 d9 fc ef 76 7a 2d 5a 34 ed 93 87 cd 57 45 a1

*dot1xMsgTask: Aug 20 10:33:19.950: a4:67:06:a6:b5:1c Starting key exchange to mobile a4:67:06:a6:b5:1c, data packets will be dropped

*dot1xMsgTask: Aug 20 10:33:19.950: a4:67:06:a6:b5:1c Sending EAPOL-Key Message to mobile a4:67:06:a6:b5:1c

state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00

*Dot1x_NW_MsgTask_4: Aug 20 10:33:19.960: a4:67:06:a6:b5:1c Received EAPOL-Key from mobile a4:67:06:a6:b5:1c

*Dot1x_NW_MsgTask_4: Aug 20 10:33:19.960: a4:67:06:a6:b5:1c Received EAPOL-key in PTK_START state (message 2) from mobile a4:67:06:a6:b5:1c

*Dot1x_NW_MsgTask_4: Aug 20 10:33:19.960: a4:67:06:a6:b5:1c Stopping retransmission timer for mobile a4:67:06:a6:b5:1c

*Dot1x_NW_MsgTask_4: Aug 20 10:33:19.960: a4:67:06:a6:b5:1c Sending EAPOL-Key Message to mobile a4:67:06:a6:b5:1c

state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01

*Dot1x_NW_MsgTask_4: Aug 20 10:33:19.968: a4:67:06:a6:b5:1c Received EAPOL-Key from mobile a4:67:06:a6:b5:1c

*Dot1x_NW_MsgTask_4: Aug 20 10:33:19.968: a4:67:06:a6:b5:1c Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile a4:67:06:a6:b5:1c

*Dot1x_NW_MsgTask_4: Aug 20 10:33:19.968: a4:67:06:a6:b5:1c apfMs1xStateInc

*Dot1x_NW_MsgTask_4: Aug 20 10:33:19.968: a4:67:06:a6:b5:1c 0.0.0.0 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state L2AUTHCOMPLETE (4)

*Dot1x_NW_MsgTask_4: Aug 20 10:33:19.968: a4:67:06:a6:b5:1c 0.0.0.0 L2AUTHCOMPLETE (4) DHCP Not required on AP 68:bc:0c:63:3d:a0 vapId 3 apVapId 3for this client

*Dot1x_NW_MsgTask_4: Aug 20 10:33:19.969: a4:67:06:a6:b5:1c Not Using WMM Compliance code qosCap 00

*Dot1x_NW_MsgTask_4: Aug 20 10:33:19.969: a4:67:06:a6:b5:1c 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 68:bc:0c:63:3d:a0 vapId 3 apVapId 3

*Dot1x_NW_MsgTask_4: Aug 20 10:33:19.969: a4:67:06:a6:b5:1c 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state DHCP_REQD (7)

*Dot1x_NW_MsgTask_4: Aug 20 10:33:19.969: a4:67:06:a6:b5:1c 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 4833, Adding TMP rule

*Dot1x_NW_MsgTask_4: Aug 19 18:03:27.969: a4:67:06:a6:b5:1c 0.0.0.0 DHCP_REQD (7) Adding Fast Path rule

type = Airespace AP - Learn IP address

on AP 68:bc:0c:63:3d:a0, slot 0, interface = 13, QOS = 0

ACL Id = 255, Jumbo F

*Dot1x_NW_MsgTask_4: Aug 20 10:33:19.969: a4:67:06:a6:b5:1c 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 7006 IPv6 Vlan = 63, IPv6 intf id = 12

*Dot1x_NW_MsgTask_4: Aug 20 10:33:19.969: a4:67:06:a6:b5:1c 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (ACL ID 255)

*Dot1x_NW_MsgTask_4: Aug 20 10:33:19.969: a4:67:06:a6:b5:1c Stopping retransmission timer for mobile a4:67:06:a6:b5:1c

*pemReceiveTask: Aug 20 10:33:19.969: a4:67:06:a6:b5:1c 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0

*pemReceiveTask: Aug 20 10:33:19.969: a4:67:06:a6:b5:1c Sent an XID frame

*apfReceiveTask: Aug 20 10:33:19.970: a4:67:06:a6:b5:1c 0.0.0.0 DHCP_REQD (7) State Update from Mobility-Incomplete to Mobility-Complete, mobility role=Local, client state=APF_MS_STATE_ASSOCIATED

*apfReceiveTask: Aug 20 10:33:19.970: a4:67:06:a6:b5:1c 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 4494, Adding TMP rule

*apfReceiveTask: Aug 20 10:33:19.052: a4:67:06:a6:b5:1c 0.0.0.0 DHCP_REQD (7) Replacing Fast Path rule

type = Airespace AP - Learn IP address

on AP 68:bc:0c:63:3d:a0, slot 0, interface = 13, QOS = 0

ACL Id = 255, Jumb

*apfReceiveTask: Aug 20 10:33:19.970: a4:67:06:a6:b5:1c 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 7006 IPv6 Vlan = 63, IPv6 intf id = 12

*apfReceiveTask: Aug 20 10:33:19.970: a4:67:06:a6:b5:1c 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (ACL ID 255)

*pemReceiveTask: Aug 20 10:33:19.970: a4:67:06:a6:b5:1c 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0

*pemReceiveTask: Aug 20 10:33:19.970: a4:67:06:a6:b5:1c Sent an XID frame

*apfMsConnTask_6: Aug 20 10:34:20.585: a4:67:06:a6:b5:1c Association received from mobile on AP 68:bc:0c:63:3d:a0

*apfMsConnTask_6: Aug 20 10:34:20.585: a4:67:06:a6:b5:1c 0.0.0.0 DHCP_REQD (7) Changing ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1633)

*apfMsConnTask_6: Aug 20 10:34:20.586: a4:67:06:a6:b5:1c Applying site-specific IPv6 override for station a4:67:06:a6:b5:1c - vapId 3, site 'default-group', interface 'novyguest'

*apfMsConnTask_6: Aug 20 10:34:20.586: a4:67:06:a6:b5:1c Applying IPv6 Interface Policy for station a4:67:06:a6:b5:1c - vlan 63, interface id 12, interface 'novyguest'

*apfMsConnTask_6: Aug 20 10:34:20.586: a4:67:06:a6:b5:1c STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0

*apfMsConnTask_6: Aug 20 10:34:20.586: a4:67:06:a6:b5:1c STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0

*apfMsConnTask_6: Aug 20 10:34:20.586: a4:67:06:a6:b5:1c Processing RSN IE type 48, length 20 for mobile a4:67:06:a6:b5:1c

*apfMsConnTask_6: Aug 20 10:34:20.586: a4:67:06:a6:b5:1c apfMs1xStateDec

*apfMsConnTask_6: Aug 20 10:34:20.586: a4:67:06:a6:b5:1c 0.0.0.0 DHCP_REQD (7) Change state to START (0) last state DHCP_REQD (7)

*apfMsConnTask_6: Aug 20 10:34:20.586: a4:67:06:a6:b5:1c pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.

*apfMsConnTask_6: Aug 20 10:34:20.586: a4:67:06:a6:b5:1c 0.0.0.0 START (0) Initializing policy

*apfMsConnTask_6: Aug 20 10:34:20.586: a4:67:06:a6:b5:1c 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state DHCP_REQD (7)

*apfMsConnTask_6: Aug 20 10:34:20.586: a4:67:06:a6:b5:1c 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state DHCP_REQD (7)

*pemReceiveTask: Aug 20 10:34:20.586: a4:67:06:a6:b5:1c 0.0.0.0 Removed NPU entry.

*apfMsConnTask_6: Aug 20 10:34:20.586: a4:67:06:a6:b5:1c 0.0.0.0 8021X_REQD (3) DHCP Not required on AP 68:bc:0c:63:3d:a0 vapId 3 apVapId 3for this client

*apfMsConnTask_6: Aug 20 10:34:20.586: a4:67:06:a6:b5:1c Not Using WMM Compliance code qosCap 00

*apfMsConnTask_6: Aug 20 10:34:20.586: a4:67:06:a6:b5:1c 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 68:bc:0c:63:3d:a0 vapId 3 apVapId 3

*apfMsConnTask_6: Aug 20 10:34:20.586: a4:67:06:a6:b5:1c apfPemAddUser2 (apf_policy.c:223) Changing state for mobile a4:67:06:a6:b5:1c on AP 68:bc:0c:63:3d:a0 from Associated to Associated

*apfMsConnTask_6: Aug 20 10:34:20.586: a4:67:06:a6:b5:1c Scheduling deletion of Mobile Station: (callerId: 49) in 1800 seconds

*apfMsConnTask_6: Aug 20 10:34:20.586: a4:67:06:a6:b5:1c Sending Assoc Response to station on BSSID 68:bc:0c:63:3d:a0 (status 0) ApVapId 3 Slot 0

*apfMsConnTask_6: Aug 20 10:34:20.586: a4:67:06:a6:b5:1c apfProcessAssocReq (apf_80211.c:5272) Changing state for mobile a4:67:06:a6:b5:1c on AP 68:bc:0c:63:3d:a0 from Associated to Associated

*dot1xMsgTask: Aug 20 10:34:20.589: a4:67:06:a6:b5:1c Creating a PKC PMKID Cache entry for station a4:67:06:a6:b5:1c (RSN 2)

*dot1xMsgTask: Aug 20 10:34:20.589: a4:67:06:a6:b5:1c Adding BSSID 68:bc:0c:63:3d:a2 to PMKID cache for station a4:67:06:a6:b5:1c

*dot1xMsgTask: Aug 20 10:34:20.589: New PMKID: (16)

*dot1xMsgTask: Aug 20 10:34:20.589: [0000] b9 d9 fc ef 76 7a 2d 5a 34 ed 93 87 cd 57 45 a1

*dot1xMsgTask: Aug 20 10:34:20.589: a4:67:06:a6:b5:1c Initiating RSN PSK to mobile a4:67:06:a6:b5:1c

*dot1xMsgTask: Aug 20 10:34:20.589: a4:67:06:a6:b5:1c dot1x - moving mobile a4:67:06:a6:b5:1c into Force Auth state

*dot1xMsgTask: Aug 20 10:34:20.589: a4:67:06:a6:b5:1c Skipping EAP-Success to mobile a4:67:06:a6:b5:1c

*dot1xMsgTask: Aug 20 10:34:20.589: Including PMKID in M1 (16)

*dot1xMsgTask: Aug 20 10:34:20.589: [0000] b9 d9 fc ef 76 7a 2d 5a 34 ed 93 87 cd 57 45 a1

*dot1xMsgTask: Aug 20 10:34:20.589: a4:67:06:a6:b5:1c Starting key exchange to mobile a4:67:06:a6:b5:1c, data packets will be dropped

*dot1xMsgTask: Aug 20 10:34:20.589: a4:67:06:a6:b5:1c Sending EAPOL-Key Message to mobile a4:67:06:a6:b5:1c

state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00

*Dot1x_NW_MsgTask_4: Aug 20 10:34:20.595: a4:67:06:a6:b5:1c Received EAPOL-Key from mobile a4:67:06:a6:b5:1c

*Dot1x_NW_MsgTask_4: Aug 20 10:34:20.595: a4:67:06:a6:b5:1c Received EAPOL-key in PTK_START state (message 2) from mobile a4:67:06:a6:b5:1c

*Dot1x_NW_MsgTask_4: Aug 20 10:34:20.595: a4:67:06:a6:b5:1c Stopping retransmission timer for mobile a4:67:06:a6:b5:1c

*Dot1x_NW_MsgTask_4: Aug 20 10:34:20.595: a4:67:06:a6:b5:1c Sending EAPOL-Key Message to mobile a4:67:06:a6:b5:1c

state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01

*Dot1x_NW_MsgTask_4: Aug 20 10:34:20.601: a4:67:06:a6:b5:1c Received EAPOL-Key from mobile a4:67:06:a6:b5:1c

*Dot1x_NW_MsgTask_4: Aug 20 10:34:20.601: a4:67:06:a6:b5:1c Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile a4:67:06:a6:b5:1c

*Dot1x_NW_MsgTask_4: Aug 20 10:34:20.601: a4:67:06:a6:b5:1c apfMs1xStateInc

*Dot1x_NW_MsgTask_4: Aug 20 10:34:20.601: a4:67:06:a6:b5:1c 0.0.0.0 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state DHCP_REQD (7)

*Dot1x_NW_MsgTask_4: Aug 20 10:34:20.601: a4:67:06:a6:b5:1c 0.0.0.0 L2AUTHCOMPLETE (4) DHCP Not required on AP 68:bc:0c:63:3d:a0 vapId 3 apVapId 3for this client

*Dot1x_NW_MsgTask_4: Aug 20 10:34:20.601: a4:67:06:a6:b5:1c Not Using WMM Compliance code qosCap 00

*Dot1x_NW_MsgTask_4: Aug 20 10:34:20.601: a4:67:06:a6:b5:1c 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 68:bc:0c:63:3d:a0 vapId 3 apVapId 3

*Dot1x_NW_MsgTask_4: Aug 20 10:34:20.601: a4:67:06:a6:b5:1c 0.0.0.0 L2AUTHCOMPLETE (4) pemAdvanceState2 4817, Adding TMP rule

*Dot1x_NW_MsgTask_4: Aug 20 10:34:20.601: a4:67:06:a6:b5:1c 0.0.0.0 L2AUTHCOMPLETE (4) Adding Fast Path rule

type = Airespace AP - Learn IP address

on AP 68:bc:0c:63:3d:a0, slot 0, interface = 13, QOS = 0

ACL Id = 255, Ju

*Dot1x_NW_MsgTask_4: Aug 20 10:34:20.601: a4:67:06:a6:b5:1c 0.0.0.0 L2AUTHCOMPLETE (4) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 7006 IPv6 Vlan = 63, IPv6 intf id = 12

*Dot1x_NW_MsgTask_4: Aug 20 10:34:20.601: a4:67:06:a6:b5:1c 0.0.0.0 L2AUTHCOMPLETE (4) Successfully plumbed mobile rule (ACL ID 255)

*Dot1x_NW_MsgTask_4: Aug 20 10:34:20.601: a4:67:06:a6:b5:1c 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state DHCP_REQD (7)

*Dot1x_NW_MsgTask_4: Aug 20 10:34:20.601: a4:67:06:a6:b5:1c 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 4833, Adding TMP rule

*Dot1x_NW_MsgTask_4: Aug 20 10:34:20.011: a4:67:06:a6:b5:1c 0.0.0.0 DHCP_REQD (7) Replacing Fast Path rule

type = Airespace AP - Learn IP address

on AP 68:bc:0c:63:3d:a0, slot 0, interface = 13, QOS = 0

ACL Id = 255, Jumb

*Dot1x_NW_MsgTask_4: Aug 20 10:34:20.601: a4:67:06:a6:b5:1c 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 7006 IPv6 Vlan = 63, IPv6 intf id = 12

*Dot1x_NW_MsgTask_4: Aug 20 10:34:20.601: a4:67:06:a6:b5:1c 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (ACL ID 255)

*Dot1x_NW_MsgTask_4: Aug 20 10:34:20.601: a4:67:06:a6:b5:1c Stopping retransmission timer for mobile a4:67:06:a6:b5:1c

*pemReceiveTask: Aug 20 10:34:20.601: a4:67:06:a6:b5:1c 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0

*pemReceiveTask: Aug 20 10:34:20.602: a4:67:06:a6:b5:1c 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0

*DHCP Socket Task: Aug 20 10:34:20.615: a4:67:06:a6:b5:1c DHCP received op BOOTREQUEST (1) (len 308,vlan 90, port 13, encap 0xec03)

*DHCP Socket Task: Aug 20 10:34:20.615: a4:67:06:a6:b5:1c DHCP selecting relay 1 - control block settings:

dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,

dhcpGateway: 0.0.0.0, dhcpRelay: 0.0.0.0 VLAN: 0

*DHCP Socket Task: Aug 20 10:34:20.615: a4:67:06:a6:b5:1c DHCP selected relay 1 - 172.22.90.20 (local address 172.22.63.2, gateway 172.22.63.1, VLAN 63, port 13)

*DHCP Socket Task: Aug 20 10:34:20.615: a4:67:06:a6:b5:1c DHCP transmitting DHCP REQUEST (3)

*DHCP Socket Task: Aug 20 10:34:20.615: a4:67:06:a6:b5:1c DHCP op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1

*DHCP Socket Task: Aug 20 10:34:20.615: a4:67:06:a6:b5:1c DHCP xid: 0x74e97a64 (1961458276), secs: 0, flags: 0

*DHCP Socket Task: Aug 20 10:34:20.615: a4:67:06:a6:b5:1c DHCP chaddr: a4:67:06:a6:b5:1c

*DHCP Socket Task: Aug 20 10:34:20.615: a4:67:06:a6:b5:1c DHCP ciaddr: 0.0.0.0, yiaddr: 0.0.0.0

*DHCP Socket Task: Aug 20 10:34:20.615: a4:67:06:a6:b5:1c DHCP siaddr: 0.0.0.0, giaddr: 172.22.63.2

*DHCP Socket Task: Aug 20 10:34:20.615: a4:67:06:a6:b5:1c DHCP requested ip: 172.22.63.78

*DHCP Socket Task: Aug 20 10:34:20.615: a4:67:06:a6:b5:1c DHCP selecting relay 2 - control block settings:

dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,

dhcpGateway: 0.0.0.0, dhcpRelay: 172.22.63.2 VLAN: 63

*DHCP Socket Task: Aug 20 10:34:20.615: a4:67:06:a6:b5:1c DHCP selected relay 2 - NONE

*DHCP Proxy Task: Aug 20 10:34:20.615: a4:67:06:a6:b5:1c DHCP received op BOOTREPLY (2) (len 572,vlan 0, port 0, encap 0x0)

*DHCP Proxy Task: Aug 20 10:34:20.615: a4:67:06:a6:b5:1c DHCP setting server from ACK (server 172.22.90.20, yiaddr 172.22.63.78)

*DHCP Proxy Task: Aug 20 10:34:20.616: a4:67:06:a6:b5:1c Static IP client associated to interface novyguest which can support client subnet.

*DHCP Proxy Task: Aug 20 10:34:20.616: a4:67:06:a6:b5:1c apfMsRunStateInc

*DHCP Proxy Task: Aug 20 10:34:20.616: a4:67:06:a6:b5:1c 172.22.63.78 DHCP_REQD (7) Change state to RUN (20) last state RUN (20)

*DHCP Proxy Task: Aug 20 10:34:20.618: a4:67:06:a6:b5:1c 172.22.63.78 RUN (20) Reached PLUMBFASTPATH: from line 5354

*DHCP Proxy Task: Aug 20 10:34:20.618: a4:67:06:a6:b5:1c 172.22.63.78 RUN (20) Replacing Fast Path rule

type = Airespace AP Client

on AP 68:bc:0c:63:3d:a0, slot 0, interface = 13, QOS = 0

ACL Id = 255, Jumbo Frames = N

*DHCP Proxy Task: Aug 20 10:34:20.618: a4:67:06:a6:b5:1c 172.22.63.78 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 7006 IPv6 Vlan = 63, IPv6 intf id = 12

*DHCP Proxy Task: Aug 20 10:34:20.618: a4:67:06:a6:b5:1c 172.22.63.78 RUN (20) Successfully plumbed mobile rule (ACL ID 255)

*DHCP Proxy Task: Aug 20 10:34:20.618: a4:67:06:a6:b5:1c Assigning Address 172.22.63.78 to mobile

*DHCP Proxy Task: Aug 20 10:34:20.618: a4:67:06:a6:b5:1c DHCP success event for client. Clearing dhcp failure count for interface novyguest.

*DHCP Proxy Task: Aug 20 10:34:20.618: a4:67:06:a6:b5:1c DHCP sending REPLY to STA (len 418, port 13, vlan 90)

*DHCP Proxy Task: Aug 20 10:34:20.618: a4:67:06:a6:b5:1c DHCP transmitting DHCP ACK (5)

*DHCP Proxy Task: Aug 20 10:34:20.618: a4:67:06:a6:b5:1c DHCP op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0

*DHCP Proxy Task: Aug 20 10:34:20.619: a4:67:06:a6:b5:1c DHCP xid: 0x74e97a64 (1961458276), secs: 0, flags: 0

*DHCP Proxy Task: Aug 20 10:34:20.619: a4:67:06:a6:b5:1c DHCP chaddr: a4:67:06:a6:b5:1c

*DHCP Proxy Task: Aug 20 10:34:20.619: a4:67:06:a6:b5:1c DHCP ciaddr: 0.0.0.0, yiaddr: 172.22.63.78

*DHCP Proxy Task: Aug 20 10:34:20.619: a4:67:06:a6:b5:1c DHCP siaddr: 0.0.0.0, giaddr: 0.0.0.0

*DHCP Proxy Task: Aug 20 10:34:20.619: a4:67:06:a6:b5:1c DHCP server id: 1.1.1.1 rcvd server id: 172.22.90.20

*pemReceiveTask: Aug 20 10:34:20.619: a4:67:06:a6:b5:1c 172.22.63.78 Added NPU entry of type 1, dtlFlags 0x0

*pemReceiveTask: Aug 20 10:34:20.619: a4:67:06:a6:b5:1c Sending a gratuitous ARP for 172.22.63.78, VLAN Id 63

*apfMsConnTask_6: Aug 20 10:34:54.219: a4:67:06:a6:b5:1c Association received from mobile on AP 68:bc:0c:63:3d:a0

*apfMsConnTask_6: Aug 20 10:34:54.219: a4:67:06:a6:b5:1c 172.22.63.78 RUN (20) Changing ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1633)

*apfMsConnTask_6: Aug 20 10:34:54.219: a4:67:06:a6:b5:1c Applying site-specific IPv6 override for station a4:67:06:a6:b5:1c - vapId 3, site 'default-group', interface 'novyguest'

*apfMsConnTask_6: Aug 20 10:34:54.219: a4:67:06:a6:b5:1c Applying IPv6 Interface Policy for station a4:67:06:a6:b5:1c - vlan 63, interface id 12, interface 'novyguest'

*apfMsConnTask_6: Aug 20 10:34:54.219: a4:67:06:a6:b5:1c STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0

*apfMsConnTask_6: Aug 20 10:34:54.219: a4:67:06:a6:b5:1c STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0

*apfMsConnTask_6: Aug 20 10:34:54.219: a4:67:06:a6:b5:1c Processing RSN IE type 48, length 20 for mobile a4:67:06:a6:b5:1c

*apfMsConnTask_6: Aug 20 10:34:54.219: a4:67:06:a6:b5:1c apfMsRunStateDec

*apfMsConnTask_6: Aug 20 10:34:54.220: a4:67:06:a6:b5:1c apfMs1xStateDec

*apfMsConnTask_6: Aug 20 10:34:54.220: a4:67:06:a6:b5:1c 172.22.63.78 RUN (20) Change state to START (0) last state RUN (20)

*apfMsConnTask_6: Aug 20 10:34:54.220: a4:67:06:a6:b5:1c pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.

*apfMsConnTask_6: Aug 20 10:34:54.220: a4:67:06:a6:b5:1c 172.22.63.78 START (0) Initializing policy

*apfMsConnTask_6: Aug 20 10:34:54.220: a4:67:06:a6:b5:1c 172.22.63.78 START (0) Change state to AUTHCHECK (2) last state RUN (20)

*apfMsConnTask_6: Aug 20 10:34:54.220: a4:67:06:a6:b5:1c 172.22.63.78 AUTHCHECK (2) Change state to 8021X_REQD (3) last state RUN (20)

*apfMsConnTask_6: Aug 20 10:34:54.220: a4:67:06:a6:b5:1c 172.22.63.78 8021X_REQD (3) DHCP required on AP 68:bc:0c:63:3d:a0 vapId 3 apVapId 3for this client

*apfMsConnTask_6: Aug 20 10:34:54.220: a4:67:06:a6:b5:1c Not Using WMM Compliance code qosCap 00

*apfMsConnTask_6: Aug 20 10:34:54.220: a4:67:06:a6:b5:1c 172.22.63.78 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 68:bc:0c:63:3d:a0 vapId 3 apVapId 3

*apfMsConnTask_6: Aug 20 10:34:54.220: a4:67:06:a6:b5:1c apfPemAddUser2 (apf_policy.c:223) Changing state for mobile a4:67:06:a6:b5:1c on AP 68:bc:0c:63:3d:a0 from Associated to Associated

*apfMsConnTask_6: Aug 20 10:34:54.220: a4:67:06:a6:b5:1c Scheduling deletion of Mobile Station: (callerId: 49) in 1800 seconds

*apfMsConnTask_6: Aug 20 10:34:54.220: a4:67:06:a6:b5:1c Sending Assoc Response to station on BSSID 68:bc:0c:63:3d:a0 (status 0) ApVapId 3 Slot 0

*apfMsConnTask_6: Aug 20 10:34:54.220: a4:67:06:a6:b5:1c apfProcessAssocReq (apf_80211.c:5272) Changing state for mobile a4:67:06:a6:b5:1c on AP 68:bc:0c:63:3d:a0 from Associated to Associated

*pemReceiveTask: Aug 20 10:34:54.222: a4:67:06:a6:b5:1c 172.22.63.78 Removed NPU entry.

*dot1xMsgTask: Aug 20 10:34:54.223: a4:67:06:a6:b5:1c Creating a PKC PMKID Cache entry for station a4:67:06:a6:b5:1c (RSN 2)

*dot1xMsgTask: Aug 20 10:34:54.223: a4:67:06:a6:b5:1c Adding BSSID 68:bc:0c:63:3d:a2 to PMKID cache for station a4:67:06:a6:b5:1c

*dot1xMsgTask: Aug 20 10:34:54.223: New PMKID: (16)

*dot1xMsgTask: Aug 20 10:34:54.223: [0000] b9 d9 fc ef 76 7a 2d 5a 34 ed 93 87 cd 57 45 a1

*dot1xMsgTask: Aug 20 10:34:54.223: a4:67:06:a6:b5:1c Initiating RSN PSK to mobile a4:67:06:a6:b5:1c

*dot1xMsgTask: Aug 20 10:34:54.223: a4:67:06:a6:b5:1c dot1x - moving mobile a4:67:06:a6:b5:1c into Force Auth state

*dot1xMsgTask: Aug 20 10:34:54.224: a4:67:06:a6:b5:1c Skipping EAP-Success to mobile a4:67:06:a6:b5:1c

*dot1xMsgTask: Aug 20 10:34:54.224: Including PMKID in M1 (16)

*dot1xMsgTask: Aug 20 10:34:54.224: [0000] b9 d9 fc ef 76 7a 2d 5a 34 ed 93 87 cd 57 45 a1

*dot1xMsgTask: Aug 20 10:34:54.224: a4:67:06:a6:b5:1c Starting key exchange to mobile a4:67:06:a6:b5:1c, data packets will be dropped

*dot1xMsgTask: Aug 20 10:34:54.224: a4:67:06:a6:b5:1c Sending EAPOL-Key Message to mobile a4:67:06:a6:b5:1c

state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00

*Dot1x_NW_MsgTask_4: Aug 20 10:34:54.240: a4:67:06:a6:b5:1c Received EAPOL-Key from mobile a4:67:06:a6:b5:1c

*Dot1x_NW_MsgTask_4: Aug 20 10:34:54.240: a4:67:06:a6:b5:1c Received EAPOL-key in PTK_START state (message 2) from mobile a4:67:06:a6:b5:1c

*Dot1x_NW_MsgTask_4: Aug 20 10:34:54.240: a4:67:06:a6:b5:1c Stopping retransmission timer for mobile a4:67:06:a6:b5:1c

*Dot1x_NW_MsgTask_4: Aug 20 10:34:54.240: a4:67:06:a6:b5:1c Sending EAPOL-Key Message to mobile a4:67:06:a6:b5:1c

state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01

*Dot1x_NW_MsgTask_4: Aug 20 10:34:54.246: a4:67:06:a6:b5:1c Received EAPOL-Key from mobile a4:67:06:a6:b5:1c

*Dot1x_NW_MsgTask_4: Aug 20 10:34:54.246: a4:67:06:a6:b5:1c Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile a4:67:06:a6:b5:1c

*Dot1x_NW_MsgTask_4: Aug 20 10:34:54.246: a4:67:06:a6:b5:1c apfMs1xStateInc

*Dot1x_NW_MsgTask_4: Aug 20 10:34:54.246: a4:67:06:a6:b5:1c 172.22.63.78 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state RUN (20)

*Dot1x_NW_MsgTask_4: Aug 20 10:34:54.246: a4:67:06:a6:b5:1c 172.22.63.78 L2AUTHCOMPLETE (4) DHCP required on AP 68:bc:0c:63:3d:a0 vapId 3 apVapId 3for this client

*Dot1x_NW_MsgTask_4: Aug 20 10:34:54.246: a4:67:06:a6:b5:1c Not Using WMM Compliance code qosCap 00

*Dot1x_NW_MsgTask_4: Aug 20 10:34:54.246: a4:67:06:a6:b5:1c 172.22.63.78 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 68:bc:0c:63:3d:a0 vapId 3 apVapId 3

*Dot1x_NW_MsgTask_4: Aug 20 10:34:54.246: a4:67:06:a6:b5:1c apfMsRunStateInc

*Dot1x_NW_MsgTask_4: Aug 20 10:34:54.246: a4:67:06:a6:b5:1c 172.22.63.78 L2AUTHCOMPLETE (4) Change state to RUN (20) last state RUN (20)

*Dot1x_NW_MsgTask_4: Aug 20 10:34:54.248: a4:67:06:a6:b5:1c 172.22.63.78 RUN (20) Reached PLUMBFASTPATH: from line 4942

*Dot1x_NW_MsgTask_4: Aug 20 10:34:54.248: a4:67:06:a6:b5:1c 172.22.63.78 RUN (20) Adding Fast Path rule

type = Airespace AP Client

on AP 68:bc:0c:63:3d:a0, slot 0, interface = 13, QOS = 0

ACL Id = 255, Jumbo Frames = NO

*Dot1x_NW_MsgTask_4: Aug 20 10:34:54.248: a4:67:06:a6:b5:1c 172.22.63.78 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 7006 IPv6 Vlan = 63, IPv6 intf id = 12

*Dot1x_NW_MsgTask_4: Aug 20 10:34:54.248: a4:67:06:a6:b5:1c 172.22.63.78 RUN (20) Successfully plumbed mobile rule (ACL ID 255)

*Dot1x_NW_MsgTask_4: Aug 20 10:34:54.248: a4:67:06:a6:b5:1c Stopping retransmission timer for mobile a4:67:06:a6:b5:1c

*pemReceiveTask: Aug 20 10:34:54.249: a4:67:06:a6:b5:1c 172.22.63.78 Added NPU entry of type 1, dtlFlags 0x0

*DHCP Socket Task: Aug 20 10:34:54.254: a4:67:06:a6:b5:1c DHCP received op BOOTREQUEST (1) (len 308,vlan 90, port 13, encap 0xec03)

*DHCP Socket Task: Aug 20 10:34:54.254: a4:67:06:a6:b5:1c DHCP selecting relay 1 - control block settings:

dhcpServer: 172.22.90.20, dhcpNetmask: 255.255.255.0,

dhcpGateway: 172.22.63.1, dhcpRelay: 172.22.63.2 VLAN: 63

*DHCP Socket Task: Aug 20 10:34:54.254: a4:67:06:a6:b5:1c DHCP selected relay 1 - 172.22.90.20 (local address 172.22.63.2, gateway 172.22.63.1, VLAN 63, port 13)

*DHCP Socket Task: Aug 20 10:34:54.254: a4:67:06:a6:b5:1c DHCP transmitting DHCP REQUEST (3)

*DHCP Socket Task: Aug 20 10:34:54.254: a4:67:06:a6:b5:1c DHCP op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1

*DHCP Socket Task: Aug 20 10:34:54.254: a4:67:06:a6:b5:1c DHCP xid: 0x74e97a65 (1961458277), secs: 0, flags: 0

*DHCP Socket Task: Aug 20 10:34:54.254: a4:67:06:a6:b5:1c DHCP chaddr: a4:67:06:a6:b5:1c

*DHCP Socket Task: Aug 20 10:34:54.254: a4:67:06:a6:b5:1c DHCP ciaddr: 0.0.0.0, yiaddr: 0.0.0.0

*DHCP Socket Task: Aug 20 10:34:54.254: a4:67:06:a6:b5:1c DHCP siaddr: 0.0.0.0, giaddr: 172.22.63.2

*DHCP Socket Task: Aug 20 10:34:54.254: a4:67:06:a6:b5:1c DHCP requested ip: 172.22.63.78

*DHCP Socket Task: Aug 20 10:34:54.255: a4:67:06:a6:b5:1c DHCP selecting relay 2 - control block settings:

dhcpServer: 172.22.90.20, dhcpNetmask: 255.255.255.0,

dhcpGateway: 172.22.63.1, dhcpRelay: 172.22.63.2 VLAN: 63

*DHCP Socket Task: Aug 20 10:34:54.255: a4:67:06:a6:b5:1c DHCP selected relay 2 - NONE

*DHCP Proxy Task: Aug 20 10:34:54.255: a4:67:06:a6:b5:1c DHCP received op BOOTREPLY (2) (len 572,vlan 0, port 0, encap 0x0)

*DHCP Proxy Task: Aug 20 10:34:54.255: a4:67:06:a6:b5:1c DHCP sending REPLY to STA (len 418, port 13, vlan 90)

*DHCP Proxy Task: Aug 20 10:34:54.255: a4:67:06:a6:b5:1c DHCP transmitting DHCP ACK (5)

*DHCP Proxy Task: Aug 20 10:34:54.255: a4:67:06:a6:b5:1c DHCP op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0

*DHCP Proxy Task: Aug 20 10:34:54.255: a4:67:06:a6:b5:1c DHCP xid: 0x74e97a65 (1961458277), secs: 0, flags: 0

*DHCP Proxy Task: Aug 20 10:34:54.255: a4:67:06:a6:b5:1c DHCP chaddr: a4:67:06:a6:b5:1c

*DHCP Proxy Task: Aug 20 10:34:54.255: a4:67:06:a6:b5:1c DHCP ciaddr: 0.0.0.0, yiaddr: 172.22.63.78

*DHCP Proxy Task: Aug 20 10:34:54.255: a4:67:06:a6:b5:1c DHCP siaddr: 0.0.0.0, giaddr: 0.0.0.0

Scott Fella · ‎08-21-2012

Are you switching between SSIDs. If so make sure fast SSID change is enabled. Is your WLAN set for just WPA2 and AES, are you using 802.1x and any features like AAA Override.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***

18091988n · ‎08-21-2012

Yes, WLAN is set for just WPA2 and AES, but we are not using 802.1x and any features like AAA Override.

After making SSID change enabled nothing changes.

First, we get the connection, can open internet pages in Safari, but then pages stop opening, although i can see that I am connected and can see the IP settings that i get from DHCP. but the ping from my test computer to the ip of iPad says that

Request timeout for icmp_seq 1

I have to reconnect to get the real connection again. So, when I get the ip 172.22.73.42 from the SSID on which WLAN WPA2+TKIP is configured everything works fine, when i get the ip 172.22.64.230 from the SSID on which WLAN WPA2+AES is configured everything works how described above.

the logs after making SSID change enabled are below

(Cisco Controller) >debug clienty b8:c7:5d:e0:4d:62

(Cisco Controller) >*DHCP Proxy Task: Aug 20 10:34:54.255: a4:67:06:a6:b5:1c DHCP server id: 1.1.1.1 rcvd server id: 172.22.90.20

*apfMsConnTask_6: Aug 21 15:08:06.093: b8:c7:5d:e0:4d:62 Association received from mobile on AP 68:bc:0c:63:3d:a0

*apfMsConnTask_6: Aug 21 15:08:06.093: b8:c7:5d:e0:4d:62 172.22.73.42 RUN (20) Changing ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1633)

*apfMsConnTask_6: Aug 21 15:08:06.093: b8:c7:5d:e0:4d:62 Applying site-specific IPv6 override for station b8:c7:5d:e0:4d:62 - vapId 4, site 'default-group', interface 'novyapple'

*apfMsConnTask_6: Aug 21 15:08:06.093: b8:c7:5d:e0:4d:62 Applying IPv6 Interface Policy for station b8:c7:5d:e0:4d:62 - vlan 73, interface id 13, interface 'novyapple'

*apfMsConnTask_6: Aug 21 15:08:06.093: b8:c7:5d:e0:4d:62 STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0

*apfMsConnTask_6: Aug 21 15:08:06.093: b8:c7:5d:e0:4d:62 STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0

*apfMsConnTask_6: Aug 21 15:08:06.093: b8:c7:5d:e0:4d:62 Processing RSN IE type 48, length 20 for mobile b8:c7:5d:e0:4d:62

*apfMsConnTask_6: Aug 21 15:08:06.093: b8:c7:5d:e0:4d:62 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.

*apfMsConnTask_6: Aug 21 15:08:06.093: b8:c7:5d:e0:4d:62 172.22.73.42 RUN (20) Deleted mobile LWAPP rule on AP [00:27:0d:9a:4b:a0]

*pemReceiveTask: Aug 21 15:08:06.093: b8:c7:5d:e0:4d:62 172.22.73.42 Removed NPU entry.

*apfMsConnTask_6: Aug 21 15:08:06.093: b8:c7:5d:e0:4d:62 Updated location for station old AP 00:27:0d:9a:4b:a0-0, new AP 68:bc:0c:63:3d:a0-0

*apfMsConnTask_6: Aug 21 15:08:06.093: b8:c7:5d:e0:4d:62 apfMsRunStateDec

*apfMsConnTask_6: Aug 21 15:08:06.093: b8:c7:5d:e0:4d:62 apfMs1xStateDec

*apfMsConnTask_6: Aug 21 15:08:06.093: b8:c7:5d:e0:4d:62 172.22.73.42 RUN (20) Change state to START (0) last state RUN (20)

*apfMsConnTask_6: Aug 21 15:08:06.093: b8:c7:5d:e0:4d:62 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.

*apfMsConnTask_6: Aug 21 15:08:06.093: b8:c7:5d:e0:4d:62 172.22.73.42 START (0) Initializing policy

*apfMsConnTask_6: Aug 21 15:08:06.093: b8:c7:5d:e0:4d:62 172.22.73.42 START (0) Change state to AUTHCHECK (2) last state RUN (20)

*apfMsConnTask_6: Aug 21 15:08:06.094: b8:c7:5d:e0:4d:62 172.22.73.42 AUTHCHECK (2) Change state to 8021X_REQD (3) last state RUN (20)

*apfMsConnTask_6: Aug 21 15:08:06.094: b8:c7:5d:e0:4d:62 172.22.73.42 8021X_REQD (3) DHCP required on AP 68:bc:0c:63:3d:a0 vapId 4 apVapId 4for this client

*apfMsConnTask_6: Aug 21 15:08:06.094: b8:c7:5d:e0:4d:62 Not Using WMM Compliance code qosCap 00

*apfMsConnTask_6: Aug 21 15:08:06.094: b8:c7:5d:e0:4d:62 172.22.73.42 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 68:bc:0c:63:3d:a0 vapId 4 apVapId 4

*apfMsConnTask_6: Aug 21 15:08:06.094: b8:c7:5d:e0:4d:62 apfPemAddUser2 (apf_policy.c:223) Changing state for mobile b8:c7:5d:e0:4d:62 on AP 68:bc:0c:63:3d:a0 from Associated to Associated

*apfMsConnTask_6: Aug 21 15:08:06.094: b8:c7:5d:e0:4d:62 Scheduling deletion of Mobile Station: (callerId: 49) in 1800 seconds

*apfMsConnTask_6: Aug 21 15:08:06.096: b8:c7:5d:e0:4d:62 Sending Assoc Response to station on BSSID 68:bc:0c:63:3d:a0 (status 0) ApVapId 4 Slot 0

*apfMsConnTask_6: Aug 21 15:08:06.096: b8:c7:5d:e0:4d:62 apfProcessAssocReq (apf_80211.c:5272) Changing state for mobile b8:c7:5d:e0:4d:62 on AP 68:bc:0c:63:3d:a0 from Associated to Associated

*dot1xMsgTask: Aug 21 15:08:06.097: b8:c7:5d:e0:4d:62 Creating a PKC PMKID Cache entry for station b8:c7:5d:e0:4d:62 (RSN 2)

*dot1xMsgTask: Aug 21 15:08:06.097: b8:c7:5d:e0:4d:62 Adding BSSID 68:bc:0c:63:3d:a3 to PMKID cache for station b8:c7:5d:e0:4d:62

*dot1xMsgTask: Aug 21 15:08:06.098: New PMKID: (16)

*dot1xMsgTask: Aug 21 15:08:06.098: [0000] e6 17 e7 ae e5 96 34 cb 09 32 b9 6e 69 47 28 ed

*dot1xMsgTask: Aug 21 15:08:06.098: b8:c7:5d:e0:4d:62 Initiating RSN PSK to mobile b8:c7:5d:e0:4d:62

*dot1xMsgTask: Aug 21 15:08:06.098: b8:c7:5d:e0:4d:62 dot1x - moving mobile b8:c7:5d:e0:4d:62 into Force Auth state

*dot1xMsgTask: Aug 21 15:08:06.098: b8:c7:5d:e0:4d:62 Skipping EAP-Success to mobile b8:c7:5d:e0:4d:62

*dot1xMsgTask: Aug 21 15:08:06.098: Including PMKID in M1 (16)

*dot1xMsgTask: Aug 21 15:08:06.098: [0000] e6 17 e7 ae e5 96 34 cb 09 32 b9 6e 69 47 28 ed

*dot1xMsgTask: Aug 21 15:08:06.098: b8:c7:5d:e0:4d:62 Starting key exchange to mobile b8:c7:5d:e0:4d:62, data packets will be dropped

*dot1xMsgTask: Aug 21 15:08:06.098: b8:c7:5d:e0:4d:62 Sending EAPOL-Key Message to mobile b8:c7:5d:e0:4d:62

state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00

*Dot1x_NW_MsgTask_2: Aug 21 15:08:06.109: b8:c7:5d:e0:4d:62 Received EAPOL-Key from mobile b8:c7:5d:e0:4d:62

*Dot1x_NW_MsgTask_2: Aug 21 15:08:06.109: b8:c7:5d:e0:4d:62 Received EAPOL-key in PTK_START state (message 2) from mobile b8:c7:5d:e0:4d:62

*Dot1x_NW_MsgTask_2: Aug 21 15:08:06.110: b8:c7:5d:e0:4d:62 Stopping retransmission timer for mobile b8:c7:5d:e0:4d:62

*Dot1x_NW_MsgTask_2: Aug 21 15:08:06.110: b8:c7:5d:e0:4d:62 Sending EAPOL-Key Message to mobile b8:c7:5d:e0:4d:62

state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01

*Dot1x_NW_MsgTask_2: Aug 21 15:08:06.120: b8:c7:5d:e0:4d:62 Received EAPOL-Key from mobile b8:c7:5d:e0:4d:62

*Dot1x_NW_MsgTask_2: Aug 21 15:08:06.120: b8:c7:5d:e0:4d:62 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile b8:c7:5d:e0:4d:62

*Dot1x_NW_MsgTask_2: Aug 21 15:08:06.120: b8:c7:5d:e0:4d:62 apfMs1xStateInc

*Dot1x_NW_MsgTask_2: Aug 21 15:08:06.120: b8:c7:5d:e0:4d:62 172.22.73.42 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state RUN (20)

*Dot1x_NW_MsgTask_2: Aug 21 15:08:06.120: b8:c7:5d:e0:4d:62 172.22.73.42 L2AUTHCOMPLETE (4) DHCP required on AP 68:bc:0c:63:3d:a0 vapId 4 apVapId 4for this client

*Dot1x_NW_MsgTask_2: Aug 21 15:08:06.120: b8:c7:5d:e0:4d:62 Not Using WMM Compliance code qosCap 00

*Dot1x_NW_MsgTask_2: Aug 21 15:08:06.120: b8:c7:5d:e0:4d:62 172.22.73.42 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 68:bc:0c:63:3d:a0 vapId 4 apVapId 4

*Dot1x_NW_MsgTask_2: Aug 21 15:08:06.120: b8:c7:5d:e0:4d:62 apfMsRunStateInc

*Dot1x_NW_MsgTask_2: Aug 21 15:08:06.120: b8:c7:5d:e0:4d:62 172.22.73.42 L2AUTHCOMPLETE (4) Change state to RUN (20) last state RUN (20)

*Dot1x_NW_MsgTask_2: Aug 21 15:08:06.120: b8:c7:5d:e0:4d:62 172.22.73.42 RUN (20) Reached PLUMBFASTPATH: from line 4942

*Dot1x_NW_MsgTask_2: Aug 21 15:08:06.121: b8:c7:5d:e0:4d:62 172.22.73.42 RUN (20) Adding Fast Path rule

type = Airespace AP Client

on AP 68:bc:0c:63:3d:a0, slot 0, interface = 13, QOS = 1

ACL Id = 255, Jumbo Frames = NO

*Dot1x_NW_MsgTask_2: Aug 21 15:08:06.121: b8:c7:5d:e0:4d:62 172.22.73.42 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 7006 IPv6 Vlan = 73, IPv6 intf id = 13

*Dot1x_NW_MsgTask_2: Aug 21 15:08:06.121: b8:c7:5d:e0:4d:62 172.22.73.42 RUN (20) Successfully plumbed mobile rule (ACL ID 255)

*Dot1x_NW_MsgTask_2: Aug 21 15:08:06.121: b8:c7:5d:e0:4d:62 Stopping retransmission timer for mobile b8:c7:5d:e0:4d:62

*pemReceiveTask: Aug 21 15:08:06.121: b8:c7:5d:e0:4d:62 172.22.73.42 Added NPU entry of type 1, dtlFlags 0x0

*DHCP Socket Task: Aug 21 15:08:07.575: b8:c7:5d:e0:4d:62 DHCP received op BOOTREQUEST (1) (len 308,vlan 90, port 13, encap 0xec03)

*DHCP Socket Task: Aug 21 15:08:07.575: b8:c7:5d:e0:4d:62 DHCP selecting relay 1 - control block settings:

dhcpServer: 172.22.64.230, dhcpNetmask: 255.255.255.0,

dhcpGateway: 172.22.73.1, dhcpRelay: 172.22.73.2 VLAN: 73

*DHCP Socket Task: Aug 21 15:08:07.575: b8:c7:5d:e0:4d:62 DHCP selected relay 1 - 172.22.64.230 (local address 172.22.73.2, gateway 172.22.73.1, VLAN 73, port 13)

*DHCP Socket Task: Aug 21 15:08:07.575: b8:c7:5d:e0:4d:62 DHCP transmitting DHCP REQUEST (3)

*DHCP Socket Task: Aug 21 15:08:07.575: b8:c7:5d:e0:4d:62 DHCP op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1

*DHCP Socket Task: Aug 21 15:08:07.575: b8:c7:5d:e0:4d:62 DHCP xid: 0x66170eff (1712787199), secs: 2, flags: 0

*DHCP Socket Task: Aug 21 15:08:07.575: b8:c7:5d:e0:4d:62 DHCP chaddr: b8:c7:5d:e0:4d:62

*DHCP Socket Task: Aug 21 15:08:07.575: b8:c7:5d:e0:4d:62 DHCP ciaddr: 0.0.0.0, yiaddr: 0.0.0.0

*DHCP Socket Task: Aug 21 15:08:07.575: b8:c7:5d:e0:4d:62 DHCP siaddr: 0.0.0.0, giaddr: 172.22.73.2

*DHCP Socket Task: Aug 21 15:08:07.575: b8:c7:5d:e0:4d:62 DHCP requested ip: 172.22.73.42

*DHCP Socket Task: Aug 21 15:08:07.575: b8:c7:5d:e0:4d:62 DHCP sending REQUEST to 172.22.73.1 (len 350, port 13, vlan 73)

*DHCP Socket Task: Aug 21 15:08:07.575: b8:c7:5d:e0:4d:62 DHCP selecting relay 2 - control block settings:

dhcpServer: 172.22.64.230, dhcpNetmask: 255.255.255.0,

dhcpGateway: 172.22.73.1, dhcpRelay: 172.22.73.2 VLAN: 73

*DHCP Socket Task: Aug 21 15:08:07.575: b8:c7:5d:e0:4d:62 DHCP selected relay 2 - NONE

*DHCP Socket Task: Aug 21 15:08:07.586: b8:c7:5d:e0:4d:62 DHCP received op BOOTREPLY (2) (len 309,vlan 73, port 13, encap 0xec00)

*DHCP Socket Task: Aug 21 15:08:07.586: b8:c7:5d:e0:4d:62 DHCP sending REPLY to STA (len 418, port 13, vlan 90)

*DHCP Socket Task: Aug 21 15:08:07.586: b8:c7:5d:e0:4d:62 DHCP transmitting DHCP ACK (5)

*DHCP Socket Task: Aug 21 15:08:07.586: b8:c7:5d:e0:4d:62 DHCP op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0

*DHCP Socket Task: Aug 21 15:08:07.586: b8:c7:5d:e0:4d:62 DHCP xid: 0x66170eff (1712787199), secs: 0, flags: 0

*DHCP Socket Task: Aug 21 15:08:07.586: b8:c7:5d:e0:4d:62 DHCP chaddr: b8:c7:5d:e0:4d:62

*DHCP Socket Task: Aug 21 15:08:07.587: b8:c7:5d:e0:4d:62 DHCP ciaddr: 0.0.0.0, yiaddr: 172.22.73.42

*DHCP Socket Task: Aug 21 15:08:07.587: b8:c7:5d:e0:4d:62 DHCP siaddr: 0.0.0.0, giaddr: 0.0.0.0

*DHCP Socket Task: Aug 21 15:08:07.587: b8:c7:5d:e0:4d:62 DHCP server id: 1.1.1.1 rcvd server id: 172.22.64.230

*apfMsConnTask_6: Aug 21 15:08:22.329: b8:c7:5d:e0:4d:62 Association received from mobile on AP 68:bc:0c:63:3d:a0

*apfMsConnTask_6: Aug 21 15:08:22.329: b8:c7:5d:e0:4d:62 Clearing Address 172.22.73.42 on mobile

*apfMsConnTask_6: Aug 21 15:08:22.330: b8:c7:5d:e0:4d:62 172.22.73.42 RUN (20) Skipping TMP rule add

*apfMsConnTask_6: Aug 21 15:08:22.330: b8:c7:5d:e0:4d:62 apfMsRunStateDec

*apfMsConnTask_6: Aug 21 15:08:22.330: b8:c7:5d:e0:4d:62 172.22.73.42 RUN (20) Change state to DHCP_REQD (7) last state RUN (20)

*apfMsConnTask_6: Aug 21 15:08:22.330: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) State Update from Mobility-Complete to Mobility-Incomplete

*apfMsConnTask_6: Aug 21 15:08:22.330: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) Reached FAILURE: from line 5154

*apfMsConnTask_6: Aug 21 15:08:22.330: b8:c7:5d:e0:4d:62 Scheduling deletion of Mobile Station: (callerId: 9) in 10 seconds

*apfMsConnTask_6: Aug 21 15:08:22.330: b8:c7:5d:e0:4d:62 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.

*apfMsConnTask_6: Aug 21 15:08:22.330: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) Deleted mobile LWAPP rule on AP [68:bc:0c:63:3d:a0]

*pemReceiveTask: Aug 21 15:08:22.330: b8:c7:5d:e0:4d:62 0.0.0.0 Removed NPU entry.

*apfMsConnTask_6: Aug 21 15:08:22.330: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) Changing ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1633)

*apfMsConnTask_6: Aug 21 15:08:22.330: b8:c7:5d:e0:4d:62 Applying site-specific IPv6 override for station b8:c7:5d:e0:4d:62 - vapId 3, site 'default-group', interface 'novyguest'

*apfMsConnTask_6: Aug 21 15:08:22.330: b8:c7:5d:e0:4d:62 Applying IPv6 Interface Policy for station b8:c7:5d:e0:4d:62 - vlan 63, interface id 12, interface 'novyguest'

*apfMsConnTask_6: Aug 21 15:08:22.330: b8:c7:5d:e0:4d:62 STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0

*apfMsConnTask_6: Aug 21 15:08:22.330: b8:c7:5d:e0:4d:62 STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0

*apfMsConnTask_6: Aug 21 15:08:22.330: b8:c7:5d:e0:4d:62 Processing RSN IE type 48, length 20 for mobile b8:c7:5d:e0:4d:62

*apfMsConnTask_6: Aug 21 15:08:22.330: b8:c7:5d:e0:4d:62 apfMs1xStateDec

*apfMsConnTask_6: Aug 21 15:08:22.330: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) Change state to START (0) last state DHCP_REQD (7)

*apfMsConnTask_6: Aug 21 15:08:22.330: b8:c7:5d:e0:4d:62 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.

*apfMsConnTask_6: Aug 21 15:08:22.330: b8:c7:5d:e0:4d:62 0.0.0.0 START (0) Initializing policy

*apfMsConnTask_6: Aug 21 15:08:22.330: b8:c7:5d:e0:4d:62 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state DHCP_REQD (7)

*apfMsConnTask_6: Aug 21 15:08:22.330: b8:c7:5d:e0:4d:62 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state DHCP_REQD (7)

*apfMsConnTask_6: Aug 21 15:08:22.330: b8:c7:5d:e0:4d:62 0.0.0.0 8021X_REQD (3) DHCP Not required on AP 68:bc:0c:63:3d:a0 vapId 3 apVapId 3for this client

*apfMsConnTask_6: Aug 21 15:08:22.330: b8:c7:5d:e0:4d:62 Not Using WMM Compliance code qosCap 00

*apfMsConnTask_6: Aug 21 15:08:22.331: b8:c7:5d:e0:4d:62 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 68:bc:0c:63:3d:a0 vapId 3 apVapId 3

*apfMsConnTask_6: Aug 21 15:08:22.331: b8:c7:5d:e0:4d:62 apfPemAddUser2 (apf_policy.c:223) Changing state for mobile b8:c7:5d:e0:4d:62 on AP 68:bc:0c:63:3d:a0 from Associated to Associated

*apfMsConnTask_6: Aug 21 15:08:22.331: b8:c7:5d:e0:4d:62 Scheduling deletion of Mobile Station: (callerId: 49) in 1800 seconds

*apfMsConnTask_6: Aug 21 15:08:22.331: b8:c7:5d:e0:4d:62 Sending Assoc Response to station on BSSID 68:bc:0c:63:3d:a0 (status 0) ApVapId 3 Slot 0

*apfMsConnTask_6: Aug 21 15:08:22.331: b8:c7:5d:e0:4d:62 apfProcessAssocReq (apf_80211.c:5272) Changing state for mobile b8:c7:5d:e0:4d:62 on AP 68:bc:0c:63:3d:a0 from Associated to Associated

*dot1xMsgTask: Aug 21 15:08:22.333: b8:c7:5d:e0:4d:62 Creating a PKC PMKID Cache entry for station b8:c7:5d:e0:4d:62 (RSN 2)

*dot1xMsgTask: Aug 21 15:08:22.333: b8:c7:5d:e0:4d:62 Adding BSSID 68:bc:0c:63:3d:a2 to PMKID cache for station b8:c7:5d:e0:4d:62

*dot1xMsgTask: Aug 21 15:08:22.333: New PMKID: (16)

*dot1xMsgTask: Aug 21 15:08:22.333: [0000] 7b 0d 3b 5c fa 1a a5 5b 59 89 1e 00 12 72 61 17

*dot1xMsgTask: Aug 21 15:08:22.333: b8:c7:5d:e0:4d:62 Initiating RSN PSK to mobile b8:c7:5d:e0:4d:62

*dot1xMsgTask: Aug 21 15:08:22.333: b8:c7:5d:e0:4d:62 dot1x - moving mobile b8:c7:5d:e0:4d:62 into Force Auth state

*dot1xMsgTask: Aug 21 15:08:22.333: b8:c7:5d:e0:4d:62 Skipping EAP-Success to mobile b8:c7:5d:e0:4d:62

*dot1xMsgTask: Aug 21 15:08:22.333: Including PMKID in M1 (16)

*dot1xMsgTask: Aug 21 15:08:22.333: [0000] 7b 0d 3b 5c fa 1a a5 5b 59 89 1e 00 12 72 61 17

*dot1xMsgTask: Aug 21 15:08:22.333: b8:c7:5d:e0:4d:62 Starting key exchange to mobile b8:c7:5d:e0:4d:62, data packets will be dropped

*dot1xMsgTask: Aug 21 15:08:22.333: b8:c7:5d:e0:4d:62 Sending EAPOL-Key Message to mobile b8:c7:5d:e0:4d:62

state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00

*Dot1x_NW_MsgTask_2: Aug 21 15:08:22.342: b8:c7:5d:e0:4d:62 Received EAPOL-Key from mobile b8:c7:5d:e0:4d:62

*Dot1x_NW_MsgTask_2: Aug 21 15:08:22.342: b8:c7:5d:e0:4d:62 Received EAPOL-key in PTK_START state (message 2) from mobile b8:c7:5d:e0:4d:62

*Dot1x_NW_MsgTask_2: Aug 21 15:08:22.343: b8:c7:5d:e0:4d:62 Stopping retransmission timer for mobile b8:c7:5d:e0:4d:62

*Dot1x_NW_MsgTask_2: Aug 21 15:08:22.343: b8:c7:5d:e0:4d:62 Sending EAPOL-Key Message to mobile b8:c7:5d:e0:4d:62

state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01

*Dot1x_NW_MsgTask_2: Aug 21 15:08:22.348: b8:c7:5d:e0:4d:62 Received EAPOL-Key from mobile b8:c7:5d:e0:4d:62

*Dot1x_NW_MsgTask_2: Aug 21 15:08:22.348: b8:c7:5d:e0:4d:62 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile b8:c7:5d:e0:4d:62

*Dot1x_NW_MsgTask_2: Aug 21 15:08:22.348: b8:c7:5d:e0:4d:62 apfMs1xStateInc

*Dot1x_NW_MsgTask_2: Aug 21 15:08:22.348: b8:c7:5d:e0:4d:62 0.0.0.0 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state DHCP_REQD (7)

*Dot1x_NW_MsgTask_2: Aug 21 15:08:22.348: b8:c7:5d:e0:4d:62 0.0.0.0 L2AUTHCOMPLETE (4) DHCP Not required on AP 68:bc:0c:63:3d:a0 vapId 3 apVapId 3for this client

*Dot1x_NW_MsgTask_2: Aug 21 15:08:22.348: b8:c7:5d:e0:4d:62 Not Using WMM Compliance code qosCap 00

*Dot1x_NW_MsgTask_2: Aug 21 15:08:22.348: b8:c7:5d:e0:4d:62 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 68:bc:0c:63:3d:a0 vapId 3 apVapId 3

*Dot1x_NW_MsgTask_2: Aug 21 15:08:22.348: b8:c7:5d:e0:4d:62 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state DHCP_REQD (7)

*Dot1x_NW_MsgTask_2: Aug 21 15:08:22.348: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 4833, Adding TMP rule

*Dot1x_NW_MsgTask_2: Aug 21 06:27:50.348: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) Adding Fast Path rule

type = Airespace AP - Learn IP address

on AP 68:bc:0c:63:3d:a0, slot 0, interface = 13, QOS = 0

ACL Id = 255, Jumbo F

*Dot1x_NW_MsgTask_2: Aug 21 15:08:22.348: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 7006 IPv6 Vlan = 63, IPv6 intf id = 12

*Dot1x_NW_MsgTask_2: Aug 21 15:08:22.349: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (ACL ID 255)

*Dot1x_NW_MsgTask_2: Aug 21 15:08:22.349: b8:c7:5d:e0:4d:62 Stopping retransmission timer for mobile b8:c7:5d:e0:4d:62

*apfReceiveTask: Aug 21 15:08:22.349: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) State Update from Mobility-Incomplete to Mobility-Complete, mobility role=Local, client state=APF_MS_STATE_ASSOCIATED

*apfReceiveTask: Aug 21 15:08:22.349: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 4494, Adding TMP rule

*apfReceiveTask: Aug 21 15:08:22.021: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) Replacing Fast Path rule

type = Airespace AP - Learn IP address

on AP 68:bc:0c:63:3d:a0, slot 0, interface = 13, QOS = 0

ACL Id = 255, Jumb

*apfReceiveTask: Aug 21 15:08:22.349: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 7006 IPv6 Vlan = 63, IPv6 intf id = 12

*apfReceiveTask: Aug 21 15:08:22.349: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (ACL ID 255)

*pemReceiveTask: Aug 21 15:08:22.349: b8:c7:5d:e0:4d:62 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0

*pemReceiveTask: Aug 21 15:08:22.349: b8:c7:5d:e0:4d:62 Sent an XID frame

*pemReceiveTask: Aug 21 15:08:22.349: b8:c7:5d:e0:4d:62 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0

*pemReceiveTask: Aug 21 15:08:22.349: b8:c7:5d:e0:4d:62 Sent an XID frame

*DHCP Socket Task: Aug 21 15:08:32.927: b8:c7:5d:e0:4d:62 DHCP received op BOOTREQUEST (1) (len 308,vlan 90, port 13, encap 0xec03)

*DHCP Socket Task: Aug 21 15:08:32.927: b8:c7:5d:e0:4d:62 DHCP selecting relay 1 - control block settings:

dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,

dhcpGateway: 0.0.0.0, dhcpRelay: 0.0.0.0 VLAN: 0

*DHCP Socket Task: Aug 21 15:08:32.927: b8:c7:5d:e0:4d:62 DHCP selected relay 1 - 172.22.90.20 (local address 172.22.63.2, gateway 172.22.63.1, VLAN 63, port 13)

*DHCP Socket Task: Aug 21 15:08:32.927: b8:c7:5d:e0:4d:62 DHCP transmitting DHCP DISCOVER (1)

*DHCP Socket Task: Aug 21 15:08:32.927: b8:c7:5d:e0:4d:62 DHCP op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1

*DHCP Socket Task: Aug 21 15:08:32.927: b8:c7:5d:e0:4d:62 DHCP xid: 0x66170f01 (1712787201), secs: 11, flags: 0

*DHCP Socket Task: Aug 21 15:08:32.927: b8:c7:5d:e0:4d:62 DHCP chaddr: b8:c7:5d:e0:4d:62

*DHCP Socket Task: Aug 21 15:08:32.927: b8:c7:5d:e0:4d:62 DHCP ciaddr: 0.0.0.0, yiaddr: 0.0.0.0

*DHCP Socket Task: Aug 21 15:08:32.928: b8:c7:5d:e0:4d:62 DHCP siaddr: 0.0.0.0, giaddr: 172.22.63.2

*DHCP Socket Task: Aug 21 15:08:32.928: b8:c7:5d:e0:4d:62 DHCP selecting relay 2 - control block settings:

dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,

dhcpGateway: 0.0.0.0, dhcpRelay: 172.22.63.2 VLAN: 63

*DHCP Socket Task: Aug 21 15:08:32.928: b8:c7:5d:e0:4d:62 DHCP selected relay 2 - NONE

*DHCP Proxy Task: Aug 21 15:08:32.929: b8:c7:5d:e0:4d:62 DHCP received op BOOTREPLY (2) (len 572,vlan 0, port 0, encap 0x0)

*DHCP Proxy Task: Aug 21 15:08:32.929: b8:c7:5d:e0:4d:62 DHCP setting server from OFFER (server 172.22.90.20, yiaddr 172.22.63.223)

*DHCP Proxy Task: Aug 21 15:08:32.929: b8:c7:5d:e0:4d:62 DHCP sending REPLY to STA (len 418, port 13, vlan 90)

*DHCP Proxy Task: Aug 21 15:08:32.929: b8:c7:5d:e0:4d:62 DHCP transmitting DHCP OFFER (2)

*DHCP Proxy Task: Aug 21 15:08:32.929: b8:c7:5d:e0:4d:62 DHCP op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0

*DHCP Proxy Task: Aug 21 15:08:32.929: b8:c7:5d:e0:4d:62 DHCP xid: 0x66170f01 (1712787201), secs: 0, flags: 0

*DHCP Proxy Task: Aug 21 15:08:32.929: b8:c7:5d:e0:4d:62 DHCP chaddr: b8:c7:5d:e0:4d:62

*DHCP Proxy Task: Aug 21 15:08:32.929: b8:c7:5d:e0:4d:62 DHCP ciaddr: 0.0.0.0, yiaddr: 172.22.63.223

*DHCP Proxy Task: Aug 21 15:08:32.929: b8:c7:5d:e0:4d:62 DHCP siaddr: 0.0.0.0, giaddr: 0.0.0.0

*DHCP Proxy Task: Aug 21 15:08:32.929: b8:c7:5d:e0:4d:62 DHCP server id: 1.1.1.1 rcvd server id: 172.22.90.20

*DHCP Socket Task: Aug 21 15:08:33.944: b8:c7:5d:e0:4d:62 DHCP received op BOOTREQUEST (1) (len 308,vlan 90, port 13, encap 0xec03)

*DHCP Socket Task: Aug 21 15:08:33.944: b8:c7:5d:e0:4d:62 DHCP selecting relay 1 - control block settings:

dhcpServer: 172.22.90.20, dhcpNetmask: 0.0.0.0,

dhcpGateway: 0.0.0.0, dhcpRelay: 172.22.63.2 VLAN: 63

*DHCP Socket Task: Aug 21 15:08:33.944: b8:c7:5d:e0:4d:62 DHCP selected relay 1 - 172.22.90.20 (local address 172.22.63.2, gateway 172.22.63.1, VLAN 63, port 13)

*DHCP Socket Task: Aug 21 15:08:33.945: b8:c7:5d:e0:4d:62 DHCP transmitting DHCP REQUEST (3)

*DHCP Socket Task: Aug 21 15:08:33.945: b8:c7:5d:e0:4d:62 DHCP op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1

*DHCP Socket Task: Aug 21 15:08:33.945: b8:c7:5d:e0:4d:62 DHCP xid: 0x66170f01 (1712787201), secs: 12, flags: 0

*DHCP Socket Task: Aug 21 15:08:33.945: b8:c7:5d:e0:4d:62 DHCP chaddr: b8:c7:5d:e0:4d:62

*DHCP Socket Task: Aug 21 15:08:33.945: b8:c7:5d:e0:4d:62 DHCP ciaddr: 0.0.0.0, yiaddr: 0.0.0.0

*DHCP Socket Task: Aug 21 15:08:33.945: b8:c7:5d:e0:4d:62 DHCP siaddr: 0.0.0.0, giaddr: 172.22.63.2

*DHCP Socket Task: Aug 21 15:08:33.945: b8:c7:5d:e0:4d:62 DHCP requested ip: 172.22.63.223

*DHCP Socket Task: Aug 21 15:08:33.945: b8:c7:5d:e0:4d:62 DHCP server id: 172.22.90.20 rcvd server id: 1.1.1.1

*DHCP Socket Task: Aug 21 15:08:33.945: b8:c7:5d:e0:4d:62 DHCP selecting relay 2 - control block settings:

dhcpServer: 172.22.90.20, dhcpNetmask: 0.0.0.0,

dhcpGateway: 0.0.0.0, dhcpRelay: 172.22.63.2 VLAN: 63

*DHCP Socket Task: Aug 21 15:08:33.945: b8:c7:5d:e0:4d:62 DHCP selected relay 2 - NONE

*DHCP Proxy Task: Aug 21 15:08:33.946: b8:c7:5d:e0:4d:62 DHCP received op BOOTREPLY (2) (len 572,vlan 0, port 0, encap 0x0)

*DHCP Proxy Task: Aug 21 15:08:33.946: b8:c7:5d:e0:4d:62 Static IP client associated to interface novyguest which can support client subnet.

*DHCP Proxy Task: Aug 21 15:08:33.946: b8:c7:5d:e0:4d:62 apfMsRunStateInc

*DHCP Proxy Task: Aug 21 15:08:33.946: b8:c7:5d:e0:4d:62 172.22.63.223 DHCP_REQD (7) Change state to RUN (20) last state RUN (20)

*DHCP Proxy Task: Aug 21 15:08:33.946: b8:c7:5d:e0:4d:62 172.22.63.223 RUN (20) Reached PLUMBFASTPATH: from line 5354

*DHCP Proxy Task: Aug 21 15:08:33.946: b8:c7:5d:e0:4d:62 172.22.63.223 RUN (20) Replacing Fast Path rule

type = Airespace AP Client

on AP 68:bc:0c:63:3d:a0, slot 0, interface = 13, QOS = 0

ACL Id = 255, Jumbo Frames =

*DHCP Proxy Task: Aug 21 15:08:33.947: b8:c7:5d:e0:4d:62 172.22.63.223 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 7006 IPv6 Vlan = 63, IPv6 intf id = 12

*DHCP Proxy Task: Aug 21 15:08:33.947: b8:c7:5d:e0:4d:62 172.22.63.223 RUN (20) Successfully plumbed mobile rule (ACL ID 255)

*DHCP Proxy Task: Aug 21 15:08:33.947: b8:c7:5d:e0:4d:62 Assigning Address 172.22.63.223 to mobile

*DHCP Proxy Task: Aug 21 15:08:33.947: b8:c7:5d:e0:4d:62 DHCP success event for client. Clearing dhcp failure count for interface novyguest.

*DHCP Proxy Task: Aug 21 15:08:33.947: b8:c7:5d:e0:4d:62 DHCP sending REPLY to STA (len 418, port 13, vlan 90)

*DHCP Proxy Task: Aug 21 15:08:33.947: b8:c7:5d:e0:4d:62 DHCP transmitting DHCP ACK (5)

*DHCP Proxy Task: Aug 21 15:08:33.947: b8:c7:5d:e0:4d:62 DHCP op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0

*DHCP Proxy Task: Aug 21 15:08:33.947: b8:c7:5d:e0:4d:62 DHCP xid: 0x66170f01 (1712787201), secs: 0, flags: 0

*DHCP Proxy Task: Aug 21 15:08:33.947: b8:c7:5d:e0:4d:62 DHCP chaddr: b8:c7:5d:e0:4d:62

*DHCP Proxy Task: Aug 21 15:08:33.947: b8:c7:5d:e0:4d:62 DHCP ciaddr: 0.0.0.0, yiaddr: 172.22.63.223

*DHCP Proxy Task: Aug 21 15:08:33.947: b8:c7:5d:e0:4d:62 DHCP siaddr: 0.0.0.0, giaddr: 0.0.0.0

*DHCP Proxy Task: Aug 21 15:08:33.947: b8:c7:5d:e0:4d:62 DHCP server id: 1.1.1.1 rcvd server id: 172.22.90.20

*pemReceiveTask: Aug 21 15:08:33.947: b8:c7:5d:e0:4d:62 172.22.63.223 Added NPU entry of type 1, dtlFlags 0x0

*pemReceiveTask: Aug 21 15:08:33.947: b8:c7:5d:e0:4d:62 Sending a gratuitous ARP for 172.22.63.223, VLAN Id 63

*apfMsConnTask_6: Aug 21 15:10:22.128: b8:c7:5d:e0:4d:62 Association received from mobile on AP 68:bc:0c:63:3d:a0

*apfMsConnTask_6: Aug 21 15:10:22.129: b8:c7:5d:e0:4d:62 172.22.63.223 RUN (20) Changing ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1633)

*apfMsConnTask_6: Aug 21 15:10:22.129: b8:c7:5d:e0:4d:62 Applying site-specific IPv6 override for station b8:c7:5d:e0:4d:62 - vapId 3, site 'default-group', interface 'novyguest'

*apfMsConnTask_6: Aug 21 15:10:22.129: b8:c7:5d:e0:4d:62 Applying IPv6 Interface Policy for station b8:c7:5d:e0:4d:62 - vlan 63, interface id 12, interface 'novyguest'

*apfMsConnTask_6: Aug 21 15:10:22.129: b8:c7:5d:e0:4d:62 STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0

*apfMsConnTask_6: Aug 21 15:10:22.129: b8:c7:5d:e0:4d:62 STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0

*apfMsConnTask_6: Aug 21 15:10:22.129: b8:c7:5d:e0:4d:62 Processing RSN IE type 48, length 20 for mobile b8:c7:5d:e0:4d:62

*apfMsConnTask_6: Aug 21 15:10:22.129: b8:c7:5d:e0:4d:62 apfMsRunStateDec

*apfMsConnTask_6: Aug 21 15:10:22.129: b8:c7:5d:e0:4d:62 apfMs1xStateDec

*apfMsConnTask_6: Aug 21 15:10:22.129: b8:c7:5d:e0:4d:62 172.22.63.223 RUN (20) Change state to START (0) last state RUN (20)

*apfMsConnTask_6: Aug 21 15:10:22.129: b8:c7:5d:e0:4d:62 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.

*apfMsConnTask_6: Aug 21 15:10:22.129: b8:c7:5d:e0:4d:62 172.22.63.223 START (0) Initializing policy

*apfMsConnTask_6: Aug 21 15:10:22.129: b8:c7:5d:e0:4d:62 172.22.63.223 START (0) Change state to AUTHCHECK (2) last state RUN (20)

*apfMsConnTask_6: Aug 21 15:10:22.129: b8:c7:5d:e0:4d:62 172.22.63.223 AUTHCHECK (2) Change state to 8021X_REQD (3) last state RUN (20)

*apfMsConnTask_6: Aug 21 15:10:22.129: b8:c7:5d:e0:4d:62 172.22.63.223 8021X_REQD (3) DHCP required on AP 68:bc:0c:63:3d:a0 vapId 3 apVapId 3for this client

*apfMsConnTask_6: Aug 21 15:10:22.129: b8:c7:5d:e0:4d:62 Not Using WMM Compliance code qosCap 00

*apfMsConnTask_6: Aug 21 15:10:22.129: b8:c7:5d:e0:4d:62 172.22.63.223 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 68:bc:0c:63:3d:a0 vapId 3 apVapId 3

*apfMsConnTask_6: Aug 21 15:10:22.129: b8:c7:5d:e0:4d:62 apfPemAddUser2 (apf_policy.c:223) Changing state for mobile b8:c7:5d:e0:4d:62 on AP 68:bc:0c:63:3d:a0 from Associated to Associated

*apfMsConnTask_6: Aug 21 15:10:22.129: b8:c7:5d:e0:4d:62 Scheduling deletion of Mobile Station: (callerId: 49) in 1800 seconds

*apfMsConnTask_6: Aug 21 15:10:22.129: b8:c7:5d:e0:4d:62 Sending Assoc Response to station on BSSID 68:bc:0c:63:3d:a0 (status 0) ApVapId 3 Slot 0

*apfMsConnTask_6: Aug 21 15:10:22.129: b8:c7:5d:e0:4d:62 apfProcessAssocReq (apf_80211.c:5272) Changing state for mobile b8:c7:5d:e0:4d:62 on AP 68:bc:0c:63:3d:a0 from Associated to Associated

*dot1xMsgTask: Aug 21 15:10:22.131: b8:c7:5d:e0:4d:62 Creating a PKC PMKID Cache entry for station b8:c7:5d:e0:4d:62 (RSN 2)

*dot1xMsgTask: Aug 21 15:10:22.131: b8:c7:5d:e0:4d:62 Adding BSSID 68:bc:0c:63:3d:a2 to PMKID cache for station b8:c7:5d:e0:4d:62

*dot1xMsgTask: Aug 21 15:10:22.131: New PMKID: (16)

*dot1xMsgTask: Aug 21 15:10:22.131: [0000] 7b 0d 3b 5c fa 1a a5 5b 59 89 1e 00 12 72 61 17

*dot1xMsgTask: Aug 21 15:10:22.131: b8:c7:5d:e0:4d:62 Initiating RSN PSK to mobile b8:c7:5d:e0:4d:62

*dot1xMsgTask: Aug 21 15:10:22.131: b8:c7:5d:e0:4d:62 dot1x - moving mobile b8:c7:5d:e0:4d:62 into Force Auth state

*dot1xMsgTask: Aug 21 15:10:22.131: b8:c7:5d:e0:4d:62 Skipping EAP-Success to mobile b8:c7:5d:e0:4d:62

*dot1xMsgTask: Aug 21 15:10:22.131: Including PMKID in M1 (16)

*dot1xMsgTask: Aug 21 15:10:22.131: [0000] 7b 0d 3b 5c fa 1a a5 5b 59 89 1e 00 12 72 61 17

*dot1xMsgTask: Aug 21 15:10:22.131: b8:c7:5d:e0:4d:62 Starting key exchange to mobile b8:c7:5d:e0:4d:62, data packets will be dropped

*dot1xMsgTask: Aug 21 15:10:22.131: b8:c7:5d:e0:4d:62 Sending EAPOL-Key Message to mobile b8:c7:5d:e0:4d:62

state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00

*pemReceiveTask: Aug 21 15:10:22.132: b8:c7:5d:e0:4d:62 172.22.63.223 Removed NPU entry.

*Dot1x_NW_MsgTask_2: Aug 21 15:10:22.138: b8:c7:5d:e0:4d:62 Received EAPOL-Key from mobile b8:c7:5d:e0:4d:62

*Dot1x_NW_MsgTask_2: Aug 21 15:10:22.138: b8:c7:5d:e0:4d:62 Received EAPOL-key in PTK_START state (message 2) from mobile b8:c7:5d:e0:4d:62

*Dot1x_NW_MsgTask_2: Aug 21 15:10:22.138: b8:c7:5d:e0:4d:62 Stopping retransmission timer for mobile b8:c7:5d:e0:4d:62

*Dot1x_NW_MsgTask_2: Aug 21 15:10:22.138: b8:c7:5d:e0:4d:62 Sending EAPOL-Key Message to mobile b8:c7:5d:e0:4d:62

state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01

*Dot1x_NW_MsgTask_2: Aug 21 15:10:22.145: b8:c7:5d:e0:4d:62 Received EAPOL-Key from mobile b8:c7:5d:e0:4d:62

*Dot1x_NW_MsgTask_2: Aug 21 15:10:22.145: b8:c7:5d:e0:4d:62 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile b8:c7:5d:e0:4d:62

*Dot1x_NW_MsgTask_2: Aug 21 15:10:22.145: b8:c7:5d:e0:4d:62 apfMs1xStateInc

*Dot1x_NW_MsgTask_2: Aug 21 15:10:22.145: b8:c7:5d:e0:4d:62 172.22.63.223 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state RUN (20)

*Dot1x_NW_MsgTask_2: Aug 21 15:10:22.145: b8:c7:5d:e0:4d:62 172.22.63.223 L2AUTHCOMPLETE (4) DHCP required on AP 68:bc:0c:63:3d:a0 vapId 3 apVapId 3for this client

*Dot1x_NW_MsgTask_2: Aug 21 15:10:22.145: b8:c7:5d:e0:4d:62 Not Using WMM Compliance code qosCap 00

*Dot1x_NW_MsgTask_2: Aug 21 15:10:22.146: b8:c7:5d:e0:4d:62 172.22.63.223 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 68:bc:0c:63:3d:a0 vapId 3 apVapId 3

*Dot1x_NW_MsgTask_2: Aug 21 15:10:22.146: b8:c7:5d:e0:4d:62 apfMsRunStateInc

*Dot1x_NW_MsgTask_2: Aug 21 15:10:22.146: b8:c7:5d:e0:4d:62 172.22.63.223 L2AUTHCOMPLETE (4) Change state to RUN (20) last state RUN (20)

*Dot1x_NW_MsgTask_2: Aug 21 15:10:22.146: b8:c7:5d:e0:4d:62 172.22.63.223 RUN (20) Reached PLUMBFASTPATH: from line 4942

*Dot1x_NW_MsgTask_2: Aug 21 15:10:22.146: b8:c7:5d:e0:4d:62 172.22.63.223 RUN (20) Adding Fast Path rule

type = Airespace AP Client

on AP 68:bc:0c:63:3d:a0, slot 0, interface = 13, QOS = 0

ACL Id = 255, Jumbo Frames = NO

*Dot1x_NW_MsgTask_2: Aug 21 15:10:22.146: b8:c7:5d:e0:4d:62 172.22.63.223 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 7006 IPv6 Vlan = 63, IPv6 intf id = 12

*Dot1x_NW_MsgTask_2: Aug 21 15:10:22.146: b8:c7:5d:e0:4d:62 172.22.63.223 RUN (20) Successfully plumbed mobile rule (ACL ID 255)

*Dot1x_NW_MsgTask_2: Aug 21 15:10:22.146: b8:c7:5d:e0:4d:62 Stopping retransmission timer for mobile b8:c7:5d:e0:4d:62

*pemReceiveTask: Aug 21 15:10:22.146: b8:c7:5d:e0:4d:62 172.22.63.223 Added NPU entry of type 1, dtlFlags 0x0

*DHCP Socket Task: Aug 21 15:10:55.134: b8:c7:5d:e0:4d:62 DHCP received op BOOTREQUEST (1) (len 308,vlan 90, port 13, encap 0xec03)

*DHCP Socket Task: Aug 21 15:10:55.134: b8:c7:5d:e0:4d:62 DHCP selecting relay 1 - control block settings:

dhcpServer: 172.22.90.20, dhcpNetmask: 0.0.0.0,

dhcpGateway: 0.0.0.0, dhcpRelay: 172.22.63.2 VLAN: 63

*DHCP Socket Task: Aug 21 15:10:55.134: b8:c7:5d:e0:4d:62 DHCP selected relay 1 - 172.22.90.20 (local address 172.22.63.2, gateway 172.22.63.1, VLAN 63, port 13)

*DHCP Socket Task: Aug 21 15:10:55.134: b8:c7:5d:e0:4d:62 DHCP transmitting DHCP DISCOVER (1)

*DHCP Socket Task: Aug 21 15:10:55.134: b8:c7:5d:e0:4d:62 DHCP op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1

*DHCP Socket Task: Aug 21 15:10:55.134: b8:c7:5d:e0:4d:62 DHCP xid: 0x66170f03 (1712787203), secs: 33, flags: 0

*DHCP Socket Task: Aug 21 15:10:55.135: b8:c7:5d:e0:4d:62 DHCP chaddr: b8:c7:5d:e0:4d:62

*DHCP Socket Task: Aug 21 15:10:55.135: b8:c7:5d:e0:4d:62 DHCP ciaddr: 0.0.0.0, yiaddr: 0.0.0.0

*DHCP Socket Task: Aug 21 15:10:55.135: b8:c7:5d:e0:4d:62 DHCP siaddr: 0.0.0.0, giaddr: 172.22.63.2

*DHCP Socket Task: Aug 21 15:10:55.135: b8:c7:5d:e0:4d:62 DHCP selecting relay 2 - control block settings:

dhcpServer: 172.22.90.20, dhcpNetmask: 0.0.0.0,

dhcpGateway: 0.0.0.0, dhcpRelay: 172.22.63.2 VLAN: 63

*DHCP Socket Task: Aug 21 15:10:55.135: b8:c7:5d:e0:4d:62 DHCP selected relay 2 - NONE

*DHCP Proxy Task: Aug 21 15:10:55.135: b8:c7:5d:e0:4d:62 DHCP received op BOOTREPLY (2) (len 572,vlan 0, port 0, encap 0x0)

*DHCP Proxy Task: Aug 21 15:10:55.135: b8:c7:5d:e0:4d:62 DHCP sending REPLY to STA (len 418, port 13, vlan 90)

*DHCP Proxy Task: Aug 21 15:10:55.135: b8:c7:5d:e0:4d:62 DHCP transmitting DHCP OFFER (2)

*DHCP Proxy Task: Aug 21 15:10:55.135: b8:c7:5d:e0:4d:62 DHCP op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0

*DHCP Proxy Task: Aug 21 15:10:55.135: b8:c7:5d:e0:4d:62 DHCP xid: 0x66170f03 (1712787203), secs: 0, flags: 0

*DHCP Proxy Task: Aug 21 15:10:55.135: b8:c7:5d:e0:4d:62 DHCP chaddr: b8:c7:5d:e0:4d:62

*DHCP Proxy Task: Aug 21 15:10:55.135: b8:c7:5d:e0:4d:62 DHCP ciaddr: 0.0.0.0, yiaddr: 172.22.63.223

*DHCP Proxy Task: Aug 21 15:10:55.135: b8:c7:5d:e0:4d:62 DHCP siaddr: 0.0.0.0, giaddr: 0.0.0.0

*DHCP Proxy Task: Aug 21 15:10:55.135: b8:c7:5d:e0:4d:62 DHCP server id: 1.1.1.1 rcvd server id: 172.22.90.20

*DHCP Socket Task: Aug 21 15:10:56.150: b8:c7:5d:e0:4d:62 DHCP received op BOOTREQUEST (1) (len 308,vlan 90, port 13, encap 0xec03)

*DHCP Socket Task: Aug 21 15:10:56.150: b8:c7:5d:e0:4d:62 DHCP selecting relay 1 - control block settings:

dhcpServer: 172.22.90.20, dhcpNetmask: 0.0.0.0,

dhcpGateway: 0.0.0.0, dhcpRelay: 172.22.63.2 VLAN: 63

*DHCP Socket Task: Aug 21 15:10:56.150: b8:c7:5d:e0:4d:62 DHCP selected relay 1 - 172.22.90.20 (local address 172.22.63.2, gateway 172.22.63.1, VLAN 63, port 13)

*DHCP Socket Task: Aug 21 15:10:56.150: b8:c7:5d:e0:4d:62 DHCP transmitting DHCP REQUEST (3)

*DHCP Socket Task: Aug 21 15:10:56.150: b8:c7:5d:e0:4d:62 DHCP op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1

*DHCP Socket Task: Aug 21 15:10:56.150: b8:c7:5d:e0:4d:62 DHCP xid: 0x66170f03 (1712787203), secs: 34, flags: 0

*DHCP Socket Task: Aug 21 15:10:56.150: b8:c7:5d:e0:4d:62 DHCP chaddr: b8:c7:5d:e0:4d:62

*DHCP Socket Task: Aug 21 15:10:56.150: b8:c7:5d:e0:4d:62 DHCP ciaddr: 0.0.0.0, yiaddr: 0.0.0.0

*DHCP Socket Task: Aug 21 15:10:56.150: b8:c7:5d:e0:4d:62 DHCP siaddr: 0.0.0.0, giaddr: 172.22.63.2

*DHCP Socket Task: Aug 21 15:10:56.150: b8:c7:5d:e0:4d:62 DHCP requested ip: 172.22.63.223

*DHCP Socket Task: Aug 21 15:10:56.150: b8:c7:5d:e0:4d:62 DHCP server id: 172.22.90.20 rcvd server id: 1.1.1.1

*DHCP Socket Task: Aug 21 15:10:56.150: b8:c7:5d:e0:4d:62 DHCP selecting relay 2 - control block settings:

dhcpServer: 172.22.90.20, dhcpNetmask: 0.0.0.0,

dhcpGateway: 0.0.0.0, dhcpRelay: 172.22.63.2 VLAN: 63

*DHCP Socket Task: Aug 21 15:10:56.151: b8:c7:5d:e0:4d:62 DHCP selected relay 2 - NONE

*DHCP Proxy Task: Aug 21 15:10:56.151: b8:c7:5d:e0:4d:62 DHCP received op BOOTREPLY (2) (len 572,vlan 0, port 0, encap 0x0)

*DHCP Proxy Task: Aug 21 15:10:56.151: b8:c7:5d:e0:4d:62 DHCP sending REPLY to STA (len 418, port 13, vlan 90)

*DHCP Proxy Task: Aug 21 15:10:56.151: b8:c7:5d:e0:4d:62 DHCP transmitting DHCP ACK (5)

*DHCP Proxy Task: Aug 21 15:10:56.151: b8:c7:5d:e0:4d:62 DHCP op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0

*DHCP Proxy Task: Aug 21 15:10:56.151: b8:c7:5d:e0:4d:62 DHCP xid: 0x66170f03 (1712787203), secs: 0, flags: 0

*DHCP Proxy Task: Aug 21 15:10:56.151: b8:c7:5d:e0:4d:62 DHCP chaddr: b8:c7:5d:e0:4d:62

*DHCP Proxy Task: Aug 21 15:10:56.151: b8:c7:5d:e0:4d:62 DHCP ciaddr: 0.0.0.0, yiaddr: 172.22.63.223

*DHCP Proxy Task: Aug 21 15:10:56.151: b8:c7:5d:e0:4d:62 DHCP siaddr: 0.0.0.0, giaddr: 0.0.0.0

*DHCP Proxy Task: Aug 21 15:10:56.151: b8:c7:5d:e0:4d:62 DHCP server id: 1.1.1.1 rcvd server id: 172.22.90.20

*apfMsConnTask_6: Aug 21 15:13:53.374: b8:c7:5d:e0:4d:62 Association received from mobile on AP 68:bc:0c:63:3d:a0

*apfMsConnTask_6: Aug 21 15:13:53.374: b8:c7:5d:e0:4d:62 Clearing Address 172.22.63.223 on mobile

*apfMsConnTask_6: Aug 21 15:13:53.374: b8:c7:5d:e0:4d:62 172.22.63.223 RUN (20) Skipping TMP rule add

*apfMsConnTask_6: Aug 21 15:13:53.374: b8:c7:5d:e0:4d:62 apfMsRunStateDec

*apfMsConnTask_6: Aug 21 15:13:53.374: b8:c7:5d:e0:4d:62 172.22.63.223 RUN (20) Change state to DHCP_REQD (7) last state RUN (20)

*apfMsConnTask_6: Aug 21 15:13:53.374: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) State Update from Mobility-Complete to Mobility-Incomplete

*apfMsConnTask_6: Aug 21 15:13:53.374: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) Reached FAILURE: from line 5154

*apfMsConnTask_6: Aug 21 15:13:53.374: b8:c7:5d:e0:4d:62 Scheduling deletion of Mobile Station: (callerId: 9) in 10 seconds

*apfMsConnTask_6: Aug 21 15:13:53.374: b8:c7:5d:e0:4d:62 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.

*apfMsConnTask_6: Aug 21 15:13:53.374: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) Deleted mobile LWAPP rule on AP [68:bc:0c:63:3d:a0]

*apfMsConnTask_6: Aug 21 15:13:53.374: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) Changing ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1633)

*apfMsConnTask_6: Aug 21 15:13:53.374: b8:c7:5d:e0:4d:62 Applying site-specific IPv6 override for station b8:c7:5d:e0:4d:62 - vapId 4, site 'default-group', interface 'novyapple'

*apfMsConnTask_6: Aug 21 15:13:53.374: b8:c7:5d:e0:4d:62 Applying IPv6 Interface Policy for station b8:c7:5d:e0:4d:62 - vlan 73, interface id 13, interface 'novyapple'

*apfMsConnTask_6: Aug 21 15:13:53.375: b8:c7:5d:e0:4d:62 STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0

*apfMsConnTask_6: Aug 21 15:13:53.375: b8:c7:5d:e0:4d:62 STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0

*apfMsConnTask_6: Aug 21 15:13:53.375: b8:c7:5d:e0:4d:62 Processing RSN IE type 48, length 20 for mobile b8:c7:5d:e0:4d:62

*apfMsConnTask_6: Aug 21 15:13:53.375: b8:c7:5d:e0:4d:62 apfMsAssoStateDec

*apfMsConnTask_6: Aug 21 15:13:53.375: b8:c7:5d:e0:4d:62 apfProcessAssocReq (apf_80211.c:5153) Changing state for mobile b8:c7:5d:e0:4d:62 on AP 68:bc:0c:63:3d:a0 from Associated to AAA Pending

*apfMsConnTask_6: Aug 21 15:13:53.375: b8:c7:5d:e0:4d:62 Scheduling deletion of Mobile Station: (callerId: 20) in 10 seconds

*apfReceiveTask: Aug 21 15:13:53.375: b8:c7:5d:e0:4d:62 apfMs1xStateDec

*apfReceiveTask: Aug 21 15:13:53.375: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) Change state to START (0) last state DHCP_REQD (7)

*apfReceiveTask: Aug 21 15:13:53.375: b8:c7:5d:e0:4d:62 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.

*apfReceiveTask: Aug 21 15:13:53.375: b8:c7:5d:e0:4d:62 0.0.0.0 START (0) Initializing policy

*apfReceiveTask: Aug 21 15:13:53.375: b8:c7:5d:e0:4d:62 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state DHCP_REQD (7)

*apfReceiveTask: Aug 21 15:13:53.375: b8:c7:5d:e0:4d:62 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state DHCP_REQD (7)

*apfReceiveTask: Aug 21 15:13:53.375: b8:c7:5d:e0:4d:62 0.0.0.0 8021X_REQD (3) DHCP Not required on AP 68:bc:0c:63:3d:a0 vapId 4 apVapId 4for this client

*apfReceiveTask: Aug 21 15:13:53.375: b8:c7:5d:e0:4d:62 Not Using WMM Compliance code qosCap 00

*apfReceiveTask: Aug 21 15:13:53.375: b8:c7:5d:e0:4d:62 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 68:bc:0c:63:3d:a0 vapId 4 apVapId 4

*apfReceiveTask: Aug 21 15:13:53.375: b8:c7:5d:e0:4d:62 apfMsAssoStateInc

*apfReceiveTask: Aug 21 15:13:53.375: b8:c7:5d:e0:4d:62 apfPemAddUser2 (apf_policy.c:223) Changing state for mobile b8:c7:5d:e0:4d:62 on AP 68:bc:0c:63:3d:a0 from AAA Pending to Associated

*apfReceiveTask: Aug 21 15:13:53.376: b8:c7:5d:e0:4d:62 Scheduling deletion of Mobile Station: (callerId: 49) in 1800 seconds

*apfReceiveTask: Aug 21 15:13:53.376: b8:c7:5d:e0:4d:62 Sending Assoc Response to station on BSSID 68:bc:0c:63:3d:a0 (status 0) ApVapId 4 Slot 0

*apfReceiveTask: Aug 21 15:13:53.376: b8:c7:5d:e0:4d:62 apfProcessRadiusAssocResp (apf_80211.c:2166) Changing state for mobile b8:c7:5d:e0:4d:62 on AP 68:bc:0c:63:3d:a0 from Associated to Associated

*pemReceiveTask: Aug 21 15:13:53.377: b8:c7:5d:e0:4d:62 0.0.0.0 Removed NPU entry.

*dot1xMsgTask: Aug 21 15:13:53.377: b8:c7:5d:e0:4d:62 Creating a PKC PMKID Cache entry for station b8:c7:5d:e0:4d:62 (RSN 2)

*dot1xMsgTask: Aug 21 15:13:53.377: b8:c7:5d:e0:4d:62 Adding BSSID 68:bc:0c:63:3d:a3 to PMKID cache for station b8:c7:5d:e0:4d:62

*dot1xMsgTask: Aug 21 15:13:53.377: New PMKID: (16)

*dot1xMsgTask: Aug 21 15:13:53.377: [0000] e6 17 e7 ae e5 96 34 cb 09 32 b9 6e 69 47 28 ed

*dot1xMsgTask: Aug 21 15:13:53.377: b8:c7:5d:e0:4d:62 Initiating RSN PSK to mobile b8:c7:5d:e0:4d:62

*dot1xMsgTask: Aug 21 15:13:53.377: b8:c7:5d:e0:4d:62 dot1x - moving mobile b8:c7:5d:e0:4d:62 into Force Auth state

*dot1xMsgTask: Aug 21 15:13:53.378: b8:c7:5d:e0:4d:62 Skipping EAP-Success to mobile b8:c7:5d:e0:4d:62

*dot1xMsgTask: Aug 21 15:13:53.378: Including PMKID in M1 (16)

*dot1xMsgTask: Aug 21 15:13:53.378: [0000] e6 17 e7 ae e5 96 34 cb 09 32 b9 6e 69 47 28 ed

*dot1xMsgTask: Aug 21 15:13:53.378: b8:c7:5d:e0:4d:62 Starting key exchange to mobile b8:c7:5d:e0:4d:62, data packets will be dropped

*dot1xMsgTask: Aug 21 15:13:53.378: b8:c7:5d:e0:4d:62 Sending EAPOL-Key Message to mobile b8:c7:5d:e0:4d:62

state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00

*Dot1x_NW_MsgTask_2: Aug 21 15:13:53.384: b8:c7:5d:e0:4d:62 Received EAPOL-Key from mobile b8:c7:5d:e0:4d:62

*Dot1x_NW_MsgTask_2: Aug 21 15:13:53.384: b8:c7:5d:e0:4d:62 Received EAPOL-key in PTK_START state (message 2) from mobile b8:c7:5d:e0:4d:62

*Dot1x_NW_MsgTask_2: Aug 21 15:13:53.384: b8:c7:5d:e0:4d:62 Stopping retransmission timer for mobile b8:c7:5d:e0:4d:62

*Dot1x_NW_MsgTask_2: Aug 21 15:13:53.384: b8:c7:5d:e0:4d:62 Sending EAPOL-Key Message to mobile b8:c7:5d:e0:4d:62

state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01

*Dot1x_NW_MsgTask_2: Aug 21 15:13:53.389: b8:c7:5d:e0:4d:62 Received EAPOL-Key from mobile b8:c7:5d:e0:4d:62

*Dot1x_NW_MsgTask_2: Aug 21 15:13:53.389: b8:c7:5d:e0:4d:62 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile b8:c7:5d:e0:4d:62

*Dot1x_NW_MsgTask_2: Aug 21 15:13:53.389: b8:c7:5d:e0:4d:62 apfMs1xStateInc

*Dot1x_NW_MsgTask_2: Aug 21 15:13:53.389: b8:c7:5d:e0:4d:62 0.0.0.0 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state DHCP_REQD (7)

*Dot1x_NW_MsgTask_2: Aug 21 15:13:53.389: b8:c7:5d:e0:4d:62 0.0.0.0 L2AUTHCOMPLETE (4) DHCP Not required on AP 68:bc:0c:63:3d:a0 vapId 4 apVapId 4for this client

*Dot1x_NW_MsgTask_2: Aug 21 15:13:53.389: b8:c7:5d:e0:4d:62 Not Using WMM Compliance code qosCap 00

*Dot1x_NW_MsgTask_2: Aug 21 15:13:53.389: b8:c7:5d:e0:4d:62 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 68:bc:0c:63:3d:a0 vapId 4 apVapId 4

*Dot1x_NW_MsgTask_2: Aug 21 15:13:53.389: b8:c7:5d:e0:4d:62 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state DHCP_REQD (7)

*Dot1x_NW_MsgTask_2: Aug 21 15:13:53.389: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 4833, Adding TMP rule

*Dot1x_NW_MsgTask_2: Aug 21 06:29:05.389: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) Adding Fast Path rule

type = Airespace AP - Learn IP address

on AP 68:bc:0c:63:3d:a0, slot 0, interface = 13, QOS = 1

ACL Id = 255, Jumbo F

*Dot1x_NW_MsgTask_2: Aug 21 15:13:53.389: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 7006 IPv6 Vlan = 73, IPv6 intf id = 13

*Dot1x_NW_MsgTask_2: Aug 21 15:13:53.390: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (ACL ID 255)

*Dot1x_NW_MsgTask_2: Aug 21 15:13:53.390: b8:c7:5d:e0:4d:62 Stopping retransmission timer for mobile b8:c7:5d:e0:4d:62

*pemReceiveTask: Aug 21 15:13:53.390: b8:c7:5d:e0:4d:62 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0

*pemReceiveTask: Aug 21 15:13:53.390: b8:c7:5d:e0:4d:62 Sent an XID frame

*apfReceiveTask: Aug 21 15:13:53.390: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) State Update from Mobility-Incomplete to Mobility-Complete, mobility role=Local, client state=APF_MS_STATE_ASSOCIATED

*apfReceiveTask: Aug 21 15:13:53.390: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 4494, Adding TMP rule

*apfReceiveTask: Aug 21 15:13:53.062: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) Replacing Fast Path rule

type = Airespace AP - Learn IP address

on AP 68:bc:0c:63:3d:a0, slot 0, interface = 13, QOS = 1

ACL Id = 255, Jumb

*apfReceiveTask: Aug 21 15:13:53.390: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 7006 IPv6 Vlan = 73, IPv6 intf id = 13

*apfReceiveTask: Aug 21 15:13:53.390: b8:c7:5d:e0:4d:62 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (ACL ID 255)

*pemReceiveTask: Aug 21 15:13:53.390: b8:c7:5d:e0:4d:62 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0

*pemReceiveTask: Aug 21 15:13:53.390: b8:c7:5d:e0:4d:62 Sent an XID frame

*DHCP Socket Task: Aug 21 15:13:53.415: b8:c7:5d:e0:4d:62 DHCP received op BOOTREQUEST (1) (len 308,vlan 90, port 13, encap 0xec03)

*DHCP Socket Task: Aug 21 15:13:53.415: b8:c7:5d:e0:4d:62 DHCP selecting relay 1 - control block settings:

dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,

dhcpGateway: 0.0.0.0, dhcpRelay: 0.0.0.0 VLAN: 0

*DHCP Socket Task: Aug 21 15:13:53.415: b8:c7:5d:e0:4d:62 DHCP selected relay 1 - 172.22.64.230 (local address 172.22.73.2, gateway 172.22.73.1, VLAN 73, port 13)

*DHCP Socket Task: Aug 21 15:13:53.416: b8:c7:5d:e0:4d:62 DHCP transmitting DHCP REQUEST (3)

*DHCP Socket Task: Aug 21 15:13:53.416: b8:c7:5d:e0:4d:62 DHCP op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1

*DHCP Socket Task: Aug 21 15:13:53.416: b8:c7:5d:e0:4d:62 DHCP xid: 0x66170f04 (1712787204), secs: 0, flags: 0

*DHCP Socket Task: Aug 21 15:13:53.416: b8:c7:5d:e0:4d:62 DHCP chaddr: b8:c7:5d:e0:4d:62

*DHCP Socket Task: Aug 21 15:13:53.416: b8:c7:5d:e0:4d:62 DHCP ciaddr: 0.0.0.0, yiaddr: 0.0.0.0

*DHCP Socket Task: Aug 21 15:13:53.416: b8:c7:5d:e0:4d:62 DHCP siaddr: 0.0.0.0, giaddr: 172.22.73.2

*DHCP Socket Task: Aug 21 15:13:53.416: b8:c7:5d:e0:4d:62 DHCP requested ip: 172.22.63.223

*DHCP Socket Task: Aug 21 15:13:53.416: b8:c7:5d:e0:4d:62 DHCP sending REQUEST to 172.22.73.1 (len 350, port 13, vlan 73)

*DHCP Socket Task: Aug 21 15:13:53.416: b8:c7:5d:e0:4d:62 DHCP selecting relay 2 - control block settings:

dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,

dhcpGateway: 0.0.0.0, dhcpRelay: 172.22.73.2 VLAN: 73

*DHCP Socket Task: Aug 21 15:13:53.416: b8:c7:5d:e0:4d:62 DHCP selected relay 2 - NONE

*DHCP Socket Task: Aug 21 15:13:53.421: b8:c7:5d:e0:4d:62 DHCP received op BOOTREPLY (2) (len 308,vlan 73, port 13, encap 0xec00)

*DHCP Socket Task: Aug 21 15:13:53.421: b8:c7:5d:e0:4d:62 DHCP sending REPLY to STA (len 418, port 13, vlan 90)

*DHCP Socket Task: Aug 21 15:13:53.421: b8:c7:5d:e0:4d:62 DHCP transmitting DHCP NAK (6)

*DHCP Socket Task: Aug 21 15:13:53.421: b8:c7:5d:e0:4d:62 DHCP op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0

*DHCP Socket Task: Aug 21 15:13:53.421: b8:c7:5d:e0:4d:62 DHCP xid: 0x66170f04 (1712787204), secs: 0, flags: 8000

*DHCP Socket Task: Aug 21 15:13:53.421: b8:c7:5d:e0:4d:62 DHCP chaddr: b8:c7:5d:e0:4d:62

*DHCP Socket Task: Aug 21 15:13:53.421: b8:c7:5d:e0:4d:62 DHCP ciaddr: 0.0.0.0, yiaddr: 0.0.0.0

*DHCP Socket Task: Aug 21 15:13:53.421: b8:c7:5d:e0:4d:62 DHCP siaddr: 0.0.0.0, giaddr: 0.0.0.0

*DHCP Socket Task: Aug 21 15:13:53.421: b8:c7:5d:e0:4d:62 DHCP server id: 1.1.1.1 rcvd server id: 172.22.64.230

*DHCP Socket Task: Aug 21 15:13:53.524: b8:c7:5d:e0:4d:62 DHCP received op BOOTREQUEST (1) (len 308,vlan 90, port 13, encap 0xec03)

*DHCP Socket Task: Aug 21 15:13:53.524: b8:c7:5d:e0:4d:62 DHCP selecting relay 1 - control block settings:

dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,

dhcpGateway: 0.0.0.0, dhcpRelay: 0.0.0.0 VLAN: 0

*DHCP Socket Task: Aug 21 15:13:53.524: b8:c7:5d:e0:4d:62 DHCP selected relay 1 - 172.22.64.230 (local address 172.22.73.2, gateway 172.22.73.1, VLAN 73, port 13)

*DHCP Socket Task: Aug 21 15:13:53.524: b8:c7:5d:e0:4d:62 DHCP transmitting DHCP DISCOVER (1)

*DHCP Socket Task: Aug 21 15:13:53.524: b8:c7:5d:e0:4d:62 DHCP op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1

*DHCP Socket Task: Aug 21 15:13:53.524: b8:c7:5d:e0:4d:62 DHCP xid: 0x66170f05 (1712787205), secs: 0, flags: 0

*DHCP Socket Task: Aug 21 15:13:53.524: b8:c7:5d:e0:4d:62 DHCP chaddr: b8:c7:5d:e0:4d:62

*DHCP Socket Task: Aug 21 15:13:53.524: b8:c7:5d:e0:4d:62 DHCP ciaddr: 0.0.0.0, yiaddr: 0.0.0.0

*DHCP Socket Task: Aug 21 15:13:53.524: b8:c7:5d:e0:4d:62 DHCP siaddr: 0.0.0.0, giaddr: 172.22.73.2

*DHCP Socket Task: Aug 21 15:13:53.524: b8:c7:5d:e0:4d:62 DHCP sending REQUEST to 172.22.73.1 (len 350, port 13, vlan 73)

*DHCP Socket Task: Aug 21 15:13:53.524: b8:c7:5d:e0:4d:62 DHCP selecting relay 2 - control block settings:

dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,

dhcpGateway: 0.0.0.0, dhcpRelay: 172.22.73.2 VLAN: 73

*DHCP Socket Task: Aug 21 15:13:53.524: b8:c7:5d:e0:4d:62 DHCP selected relay 2 - NONE

*DHCP Socket Task: Aug 21 15:13:53.528: b8:c7:5d:e0:4d:62 DHCP received op BOOTREPLY (2) (len 309,vlan 73, port 13, encap 0xec00)

*DHCP Socket Task: Aug 21 15:13:53.528: b8:c7:5d:e0:4d:62 DHCP setting server from OFFER (server 172.22.64.230, yiaddr 172.22.73.42)

*DHCP Socket Task: Aug 21 15:13:53.528: b8:c7:5d:e0:4d:62 DHCP sending REPLY to STA (len 418, port 13, vlan 90)

*DHCP Socket Task: Aug 21 15:13:53.528: b8:c7:5d:e0:4d:62 DHCP transmitting DHCP OFFER (2)

*DHCP Socket Task: Aug 21 15:13:53.528: b8:c7:5d:e0:4d:62 DHCP op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0

*DHCP Socket Task: Aug 21 15:13:53.528: b8:c7:5d:e0:4d:62 DHCP xid: 0x66170f05 (1712787205), secs: 0, flags: 0

*DHCP Socket Task: Aug 21 15:13:53.528: b8:c7:5d:e0:4d:62 DHCP chaddr: b8:c7:5d:e0:4d:62

*DHCP Socket Task: Aug 21 15:13:53.528: b8:c7:5d:e0:4d:62 DHCP ciaddr: 0.0.0.0, yiaddr: 172.22.73.42

*DHCP Socket Task: Aug 21 15:13:53.528: b8:c7:5d:e0:4d:62 DHCP siaddr: 0.0.0.0, giaddr: 0.0.0.0

*DHCP Socket Task: Aug 21 15:13:53.528: b8:c7:5d:e0:4d:62 DHCP server id: 1.1.1.1 rcvd server id: 172.22.64.230

*DHCP Socket Task: Aug 21 15:13:54.532: b8:c7:5d:e0:4d:62 DHCP received op BOOTREQUEST (1) (len 308,vlan 90, port 13, encap 0xec03)

*DHCP Socket Task: Aug 21 15:13:54.532: b8:c7:5d:e0:4d:62 DHCP selecting relay 1 - control block settings:

dhcpServer: 172.22.64.230, dhcpNetmask: 0.0.0.0,

dhcpGateway: 0.0.0.0, dhcpRelay: 172.22.73.2 VLAN: 73

*DHCP Socket Task: Aug 21 15:13:54.532: b8:c7:5d:e0:4d:62 DHCP selected relay 1 - 172.22.64.230 (local address 172.22.73.2, gateway 172.22.73.1, VLAN 73, port 13)

*DHCP Socket Task: Aug 21 15:13:54.532: b8:c7:5d:e0:4d:62 DHCP transmitting DHCP REQUEST (3)

*DHCP Socket Task: Aug 21 15:13:54.532: b8:c7:5d:e0:4d:62 DHCP op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1

*DHCP Socket Task: Aug 21 15:13:54.533: b8:c7:5d:e0:4d:62 DHCP xid: 0x66170f05 (1712787205), secs: 1, flags: 0

*DHCP Socket Task: Aug 21 15:13:54.533: b8:c7:5d:e0:4d:62 DHCP chaddr: b8:c7:5d:e0:4d:62

*DHCP Socket Task: Aug 21 15:13:54.533: b8:c7:5d:e0:4d:62 DHCP ciaddr: 0.0.0.0, yiaddr: 0.0.0.0

*DHCP Socket Task: Aug 21 15:13:54.533: b8:c7:5d:e0:4d:62 DHCP siaddr: 0.0.0.0, giaddr: 172.22.73.2

*DHCP Socket Task: Aug 21 15:13:54.533: b8:c7:5d:e0:4d:62 DHCP requested ip: 172.22.73.42

*DHCP Socket Task: Aug 21 15:13:54.533: b8:c7:5d:e0:4d:62 DHCP server id: 172.22.64.230 rcvd server id: 1.1.1.1

*DHCP Socket Task: Aug 21 15:13:54.533: b8:c7:5d:e0:4d:62 DHCP sending REQUEST to 172.22.73.1 (len 350, port 13, vlan 73)

*DHCP Socket Task: Aug 21 15:13:54.533: b8:c7:5d:e0:4d:62 DHCP selecting relay 2 - control block settings:

dhcpServer: 172.22.64.230, dhcpNetmask: 0.0.0.0,

dhcpGateway: 0.0.0.0, dhcpRelay: 172.22.73.2 VLAN: 73

*DHCP Socket Task: Aug 21 15:13:54.533: b8:c7:5d:e0:4d:62 DHCP selected relay 2 - NONE

*DHCP Socket Task: Aug 21 15:13:54.537: b8:c7:5d:e0:4d:62 DHCP received op BOOTREPLY (2) (len 309,vlan 73, port 13, encap 0xec00)

*DHCP Socket Task: Aug 21 15:13:54.537: b8:c7:5d:e0:4d:62 apfMsRunStateInc

*DHCP Socket Task: Aug 21 15:13:54.537: b8:c7:5d:e0:4d:62 172.22.73.42 DHCP_REQD (7) Change state to RUN (20) last state RUN (20)

*DHCP Socket Task: Aug 21 15:13:54.537: b8:c7:5d:e0:4d:62 172.22.73.42 RUN (20) Reached PLUMBFASTPATH: from line 5354

*DHCP Socket Task: Aug 21 15:13:54.537: b8:c7:5d:e0:4d:62 172.22.73.42 RUN (20) Replacing Fast Path rule

type = Airespace AP Client

on AP 68:bc:0c:63:3d:a0, slot 0, interface = 13, QOS = 1

ACL Id = 255, Jumbo Frames = N

*DHCP Socket Task: Aug 21 15:13:54.537: b8:c7:5d:e0:4d:62 172.22.73.42 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 7006 IPv6 Vlan = 73, IPv6 intf id = 13

*DHCP Socket Task: Aug 21 15:13:54.537: b8:c7:5d:e0:4d:62 172.22.73.42 RUN (20) Successfully plumbed mobile rule (ACL ID 255)

*DHCP Socket Task: Aug 21 15:13:54.537: b8:c7:5d:e0:4d:62 Assigning Address 172.22.73.42 to mobile

*DHCP Socket Task: Aug 21 15:13:54.537: b8:c7:5d:e0:4d:62 DHCP success event for client. Clearing dhcp failure count for interface novyapple.

*DHCP Socket Task: Aug 21 15:13:54.537: b8:c7:5d:e0:4d:62 DHCP sending REPLY to STA (len 418, port 13, vlan 90)

*DHCP Socket Task: Aug 21 15:13:54.537: b8:c7:5d:e0:4d:62 DHCP transmitting DHCP ACK (5)

*DHCP Socket Task: Aug 21 15:13:54.537: b8:c7:5d:e0:4d:62 DHCP op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0

*DHCP Socket Task: Aug 21 15:13:54.537: b8:c7:5d:e0:4d:62 DHCP xid: 0x66170f05 (1712787205), secs: 0, flags: 0

*DHCP Socket Task: Aug 21 15:13:54.538: b8:c7:5d:e0:4d:62 DHCP chaddr: b8:c7:5d:e0:4d:62

*DHCP Socket Task: Aug 21 15:13:54.538: b8:c7:5d:e0:4d:62 DHCP ciaddr: 0.0.0.0, yiaddr: 172.22.73.42

*DHCP Socket Task: Aug 21 15:13:54.538: b8:c7:5d:e0:4d:62 DHCP siaddr: 0.0.0.0, giaddr: 0.0.0.0

*DHCP Socket Task: Aug 21 15:13:54.538: b8:c7:5d:e0:4d:62 DHCP server id: 1.1.1.1 rcvd server id: 172.22.64.230

*pemReceiveTask: Aug 21 15:13:54.538: b8:c7:5d:e0:4d:62 172.22.73.42 Added NPU entry of type 1, dtlFlags 0x0

*pemReceiveTask: Aug 21 15:13:54.538: b8:c7:5d:e0:4d:62 Sending a gratuitous ARP for 172.22.73.42, VLAN Id 73

*emWeb: Aug 21 15:20:58.064: Created WARP Capabilities IE (length 12) for WLAN NovyGuest

Leo Laohoo · ‎08-22-2012

Ok, Natalia. What happens if you change to OPEN encryption? Will the iPad associate to the WAP?

18091988n · ‎08-23-2012

yes, there are no problems with the Open encryption. only with WPA2+AES or WPA+AES+TKIP

Scott Fella · ‎08-23-2012

You will have issues when a WLAN is configured with WPAAESTKIP. I run WPA2+AES at home with no issues at all.

Like mentioned before, best practice if you use wpa is to use tkip. Or wpa2, you use aes.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***

18091988n · ‎08-23-2012

thanks, I understand it, but with WPA2+AES Ipads don't want to work properly. After a couple of minutes of good connection we see that internet pages stop opening, ping to the iPad's ip shows

Request timeout for icmp_seq 1

and we have to reconnect . And the reconnection is not always successful. Only after a couple of attempts we reach the success. Is there any suspicious in my logs that are above? I just can't see

fbarboza · ‎08-21-2012

Hi ,

Remmber that if you want to use N speeds, the only encryption that supports N speeds is WPA version2 +AES, WPA version1 + TKIP or any other combination does not support N speeds. Also we need to have WMM support enable.

When the WLC reports "Decrypt errors occurred for client xx:xx:xx:xx:xx:xx using WPA2 key on 802.11b/g interface of AP xx:xx:xx:xx:xx:xx", this is letting us know that the wireless client is having issues to negotiate the encryption configured on the access points or WLC.

As per the IEEE and WiFi alliance to garanty compatibility between wireless clinets and access points we should configure either WPA version1 with TKIP or WPA version 2 with AES, if you use any other combination it may or may not work if the wireless clients support it or not.

If you want that N speeds work then you can only use WPA version 2 with AES.

Scott Fella · ‎08-23-2012

Can you post the WLAN configuration the iPad is using. Is it just one iPad?

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***

18091988n · ‎08-23-2012

not one, ALL the iPads

WLAN Identifier.................................. 3
Profile Name..................................... NovyGuest
Network Name (SSID).............................. NovyGuest
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled
Network Admission Control

Radius-NAC State............................... Disabled
SNMP-NAC State................................. Disabled
Quarantine VLAN................................ 0
Maximum number of Associated Clients............. 0
Number of Active Clients......................... 50
Exclusionlist Timeout............................ 60 seconds
Session Timeout.................................. 1800 seconds
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ novyguest
Multicast Interface.............................. Not Configured
WLAN ACL......................................... unconfigured
DHCP Server...................................... Default
DHCP Address Assignment Required................. Disabled
Static IP client tunneling....................... Disabled
Quality of Service............................... Silver (best effort)
Scan Defer Priority.............................. 5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Allowed
WMM UAPSD Compliant Client Support............... Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Enabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
IPv6 Support..................................... Disabled
Passive Client Feature........................... Disabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... All
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
   Authentication................................ Global Servers
   Accounting.................................... Global Servers
   Dynamic Interface............................. Disabled
Local EAP Authentication......................... Disabled
Security

   802.11 Authentication:........................ Open System
   Static WEP Keys............................... Disabled
   802.1X........................................ Disabled
   Wi-Fi Protected Access (WPA/WPA2)............. Enabled
      WPA (SSN IE)............................... Disabled
      WPA2 (RSN IE).............................. Enabled
         TKIP Cipher............................. Enabled
         AES Cipher.............................. Disabled
                                                                Auth Key Management
         802.1x.................................. Disabled
         PSK..................................... Enabled
         CCKM.................................... Disabled
         FT(802.11r)............................. Disabled
         FT-PSK(802.11r)......................... Disabled
FT Reassociation Timeout......................... 20
FT Over-The-Air mode............................. Enabled
FT Over-The-Ds mode.............................. Enabled
CCKM tsf Tolerance............................... 1000
   CKIP ......................................... Disabled
   Web Based Authentication...................... Disabled
   Web-Passthrough............................... Disabled
   Conditional Web Redirect...................... Disabled
   Splash-Page Web Redirect...................... Disabled
   Auto Anchor................................... Disabled
   H-REAP Local Switching........................ Disabled
   H-REAP Local Authentication................... Disabled
   H-REAP Learn IP Address....................... Enabled
   Client MFP.................................... Optional
   Tkip MIC Countermeasure Hold-down Timer....... 60
Call Snooping.................................... Disabled
Roamed Call Re-Anchor Policy..................... Disabled
SIP CAC Fail Send-486-Busy Policy................ Enabled
SIP CAC Fail Send Dis-Association Policy......... Disabled
Band Select...................................... Disabled
Load Balancing................................... Disabled

Mobility Anchor List
WLAN ID IP Address Status
------- --------------- ------

Scott Fella · ‎08-23-2012

You need to uncheck wpa2 and check wpa. You can't gave wpa2+tkip a

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***

fbarboza · ‎08-27-2012

Hi,

For N speeds to work the WLAN needs to have only WPA version 2 + AES configured, any other combination used will not allow N speeds to work since N is only supported by AES.

Then wehn working with an encryoption method we should use WPA version 1 + TKIP or WPA version 2+ AES any other combination may or may not work.

Also try to disable aironet IE , session time out ,client exclusion and MFP protection and once the changes have been made on the WLC, go to the wireless clients remove the current profile created for the SSID and then do view avialable networks and connect again.

18091988n · ‎08-31-2012

Finally, I have found the solution. Thanks to the article that advised me an engineer of cisco TAC

http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a0080ab7c01.shtml#

First I did ALL the recommendations that are described there and iPads started to connect using WPA2+AES without dropping the connection, but then I started to return all the settings back, one by one.

And I have found the reason of our problem! It was too short Preamble in the header of the packet (point 10 in the article).

It’s amazing! So now it seems that everything works properly! Also I have put DTIM period of 6 in the WLAN setting as recommended in point 6 in the article.

So if anyone faces such a problem, I hope that advices in the article can help.