Iphones unable to obtain IP address after WLC upgrade to 8.5.120.0

danailpetrov · ‎03-08-2018

Hello everyone,

I have upgraded from 8.3.102.0 to 8.5.120.0. Everything went fairly good, except that my phones are now unable to obtain IP address... I didn't have much time to troubleshoot but I couldn't spot anything obvious.

In short I have two SSIDs (Two VLANs) wifi@home & guests. the problematic one is wifi@home. So far everything else which is not iPhone works just fine (even some older models work just okay!)

I am testing with Iphone X, Iphone 6 and Iphone 6+. Apparently Apple TV and IPADs are okay... very weird.

If I try to connect to the guests SSID - it works just fine!

I am really in a hurry now and need to shoot of, but just want to leave this here if I can get some thoughts from you. See the attached file - I tried to capture most of what I believe is helpful for the initial troubleshooting.

Any thoughts?

Flavio Miranda · ‎03-08-2018

Hi

Who is providing your DHCP service?

I can see your wlc asking IP address but I did not see response from anywhere:

*Dot1x_NW_MsgTask_6: Mar 08 18:31:14.429: d4:a3:3d:26:71:e6 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit:  AppID = 0 ,AppAction = 4, AppToken = 15206  AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_6: Mar 08 18:31:14.429: d4:a3:3d:26:71:e6 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit:  AppID = 0 ,AppAction = 4, AppToken = 15206  AverageRate = 0, BurstRate = 0

-If I helped you somehow, please, rate it as useful.-

danailpetrov · ‎03-08-2018

Hi,

the DHCP server is 10.0.0.1 and all the other devices on the network (other than a few iPhones) are working just fine.

Also, within the file there is actually a DHCP OFFER which is been sent by the DHCP server with an appropriate address and everything, but for some reason something's not working ...

*DHCP Socket Task: Mar 08 18:29:43.859: d4:a3:3d:26:71:e6 DHCP intf:wifi-1 dhcp proxy mode global
*DHCP Socket Task: Mar 08 18:29:43.859: d4:a3:3d:26:71:e6 DHCP processing DHCP OFFER (2)
*DHCP Socket Task: Mar 08 18:29:43.859: d4:a3:3d:26:71:e6 DHCP   op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Mar 08 18:29:43.859: d4:a3:3d:26:71:e6 DHCP   xid: 0x471b46d4 (1192969940), secs: 0, flags: 0
*DHCP Socket Task: Mar 08 18:29:43.859: d4:a3:3d:26:71:e6 DHCP   chaddr: d4:a3:3d:26:71:e6
*DHCP Socket Task: Mar 08 18:29:43.859: d4:a3:3d:26:71:e6 DHCP   ciaddr: 0.0.0.0,  yiaddr: 10.0.0.143
*DHCP Socket Task: Mar 08 18:29:43.859: d4:a3:3d:26:71:e6 DHCP   siaddr: 0.0.0.0,  giaddr: 0.0.0.0
*DHCP Socket Task: Mar 08 18:29:43.859: d4:a3:3d:26:71:e6 DHCP   server id: 10.0.0.1  rcvd server id: 10.0.0.1
*DHCP Socket Task: Mar 08 18:29:43.859: d4:a3:3d:26:71:e6 DHCP successfully bridged packet to STA
*DHCP Socket Task: Mar 08 18:29:45.198: d4:a3:3d:26:71:e6 DHCP received op BOOTREQUEST (1) (len 308,vlan 5, port 13, encap 0xec03, xid 0x471b46d4)
*DHCP Socket Task: Mar 08 18:29:45.198: d4:a3:3d:26:71:e6 DHCP option len (including the magic cookie) 72

Flavio Miranda · ‎03-08-2018

By any chance do you have RADIUS server with some BYOD policy preventing iOS and Android. Cisco ISE is able to do that.

-If I helped you somehow, please, rate it as useful.-

danailpetrov · ‎03-08-2018

Nope, everything is done locally (PSK auth - this is my home network...) no device/client profiling/policies are used..