cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1288
Views
5
Helpful
7
Replies
Highlighted

roaming issue - Layer 2 switch CAM table updates

Hi,

We have a setup with 2 WLC2500  and 10 1041 LAP distributed on various sites (3 or 2 per site), using HREAP (local switching, central auth) and AP Groups, for grouping the APs on each site.

On one site everything works fine, roaming was correctly done, and client could communicate inmediatly after the roaming process, but on other site we found that if we roam between the 2 APs found out that even the client get conected to the AP it takes about 300 second (5 minutes) for the client to get traffic forwarding.

Here i´m attaching the debug session for client and l2roam:

*apfMsConnTask_2: Jun 13 11:27:59.198: 9c:02:98:8e:c6:5d Association received from mobile on AP 50:06:04:2a:4a:10

*apfMsConnTask_2: Jun 13 11:27:59.198: 9c:02:98:8e:c6:5d 192.33.1.251 RUN (20) Changing ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1626)

*apfMsConnTask_2: Jun 13 11:27:59.198: 9c:02:98:8e:c6:5d Applying site-specific IPv6 override for station 9c:02:98:8e:c6:5d - vapId 3, site 'PRUVIA', interface 'management'

*apfMsConnTask_2: Jun 13 11:27:59.198: 9c:02:98:8e:c6:5d Applying IPv6 Interface Policy for station 9c:02:98:8e:c6:5d - vlan 0, interface id 0, interface 'management'

*apfMsConnTask_2: Jun 13 11:27:59.198: 9c:02:98:8e:c6:5d Applying site-specific override for station 9c:02:98:8e:c6:5d - vapId 3, site 'PRUVIA', interface 'management'

*apfMsConnTask_2: Jun 13 11:27:59.198: 9c:02:98:8e:c6:5d 192.33.1.251 RUN (20) Changing ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1626)

*apfMsConnTask_2: Jun 13 11:27:59.198: 9c:02:98:8e:c6:5d STA - rates (8): 2 4 11 22 164 48 72 108 12 18 24 96 0 0 0 0

*apfMsConnTask_2: Jun 13 11:27:59.198: 9c:02:98:8e:c6:5d STA - rates (12): 2 4 11 22 164 48 72 108 12 18 24 96 0 0 0 0

*apfMsConnTask_2: Jun 13 11:27:59.198: 9c:02:98:8e:c6:5d Processing WPA IE type 221, length 22 for mobile 9c:02:98:8e:c6:5d

*apfMsConnTask_2: Jun 13 11:27:59.198: 9c:02:98:8e:c6:5d apfMsRunStateDec

*apfMsConnTask_2: Jun 13 11:27:59.198: 9c:02:98:8e:c6:5d apfMs1xStateDec

*apfMsConnTask_2: Jun 13 11:27:59.198: 9c:02:98:8e:c6:5d 192.33.1.251 RUN (20) Change state to START (0) last state RUN (20)

*apfMsConnTask_2: Jun 13 11:27:59.198: 9c:02:98:8e:c6:5d 192.33.1.251 START (0) Initializing policy

*apfMsConnTask_2: Jun 13 11:27:59.198: 9c:02:98:8e:c6:5d 192.33.1.251 START (0) Change state to AUTHCHECK (2) last state RUN (20)

*apfMsConnTask_2: Jun 13 11:27:59.198: 9c:02:98:8e:c6:5d 192.33.1.251 AUTHCHECK (2) Change state to 8021X_REQD (3) last state RUN (20)

*apfMsConnTask_2: Jun 13 11:27:59.198: 9c:02:98:8e:c6:5d 192.33.1.251 8021X_REQD (3) DHCP required on AP 50:06:04:2a:4a:10 vapId 3 apVapId 1for this client

*apfMsConnTask_2: Jun 13 11:27:59.198: 9c:02:98:8e:c6:5d Not Using WMM Compliance code qosCap 00

*apfMsConnTask_2: Jun 13 11:27:59.198: 9c:02:98:8e:c6:5d 192.33.1.251 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 50:06:04:2a:4a:10 vapId 3 apVapId 1

*apfMsConnTask_2: Jun 13 11:27:59.199: 9c:02:98:8e:c6:5d apfPemAddUser2 (apf_policy.c:223) Changing state for mobile 9c:02:98:8e:c6:5d on AP 50:06:04:2a:4a:10 from Associated to Associated

*apfMsConnTask_2: Jun 13 11:27:59.199: 9c:02:98:8e:c6:5d Scheduling deletion of Mobile Station:  (callerId: 49) in 1800 seconds

*apfMsConnTask_2: Jun 13 11:27:59.199: 9c:02:98:8e:c6:5d Sending Assoc Response to station on BSSID 50:06:04:2a:4a:10 (status 0) ApVapId 1 Slot 0

*apfMsConnTask_2: Jun 13 11:27:59.199: 9c:02:98:8e:c6:5d apfProcessAssocReq (apf_80211.c:5237) Changing state for mobile 9c:02:98:8e:c6:5d on AP 50:06:04:2a:4a:10 from Associated to Associated

*dot1xMsgTask: Jun 13 11:27:59.247: 9c:02:98:8e:c6:5d Creating a PKC PMKID Cache entry for station 9c:02:98:8e:c6:5d (RSN 0)

*dot1xMsgTask: Jun 13 11:27:59.247: 9c:02:98:8e:c6:5d Initiating WPA PSK to mobile 9c:02:98:8e:c6:5d

*dot1xMsgTask: Jun 13 11:27:59.247: 9c:02:98:8e:c6:5d dot1x - moving mobile 9c:02:98:8e:c6:5d into Force Auth state

*dot1xMsgTask: Jun 13 11:27:59.247: 9c:02:98:8e:c6:5d Skipping EAP-Success to mobile 9c:02:98:8e:c6:5d

*dot1xMsgTask: Jun 13 11:27:59.247: 9c:02:98:8e:c6:5d Starting key exchange to mobile 9c:02:98:8e:c6:5d, data packets will be dropped

*dot1xMsgTask: Jun 13 11:27:59.247: 9c:02:98:8e:c6:5d Sending EAPOL-Key Message to mobile 9c:02:98:8e:c6:5d

   state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00

*Dot1x_NW_MsgTask_5: Jun 13 11:27:59.316: 9c:02:98:8e:c6:5d Received EAPOL-Key from mobile 9c:02:98:8e:c6:5d

*Dot1x_NW_MsgTask_5: Jun 13 11:27:59.316: 9c:02:98:8e:c6:5d Received EAPOL-key in PTK_START state (message 2) from mobile 9c:02:98:8e:c6:5d

*Dot1x_NW_MsgTask_5: Jun 13 11:27:59.316: 9c:02:98:8e:c6:5d Stopping retransmission timer for mobile 9c:02:98:8e:c6:5d

*Dot1x_NW_MsgTask_5: Jun 13 11:27:59.317: 9c:02:98:8e:c6:5d Sending EAPOL-Key Message to mobile 9c:02:98:8e:c6:5d

   state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01

*Dot1x_NW_MsgTask_5: Jun 13 11:27:59.375: 9c:02:98:8e:c6:5d Received EAPOL-Key from mobile 9c:02:98:8e:c6:5d

*Dot1x_NW_MsgTask_5: Jun 13 11:27:59.375: 9c:02:98:8e:c6:5d Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 9c:02:98:8e:c6:5d

*Dot1x_NW_MsgTask_5: Jun 13 11:27:59.375: 9c:02:98:8e:c6:5d apfMs1xStateInc

*Dot1x_NW_MsgTask_5: Jun 13 11:27:59.375: 9c:02:98:8e:c6:5d 192.33.1.251 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state RUN (20)

*Dot1x_NW_MsgTask_5: Jun 13 11:27:59.375: 9c:02:98:8e:c6:5d 192.33.1.251 L2AUTHCOMPLETE (4) DHCP required on AP 50:06:04:2a:4a:10 vapId 3 apVapId 1for this client

*Dot1x_NW_MsgTask_5: Jun 13 11:27:59.375: 9c:02:98:8e:c6:5d Not Using WMM Compliance code qosCap 00

*Dot1x_NW_MsgTask_5: Jun 13 11:27:59.375: 9c:02:98:8e:c6:5d 192.33.1.251 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 50:06:04:2a:4a:10 vapId 3 apVapId 1

*Dot1x_NW_MsgTask_5: Jun 13 11:27:59.375: 9c:02:98:8e:c6:5d apfMsRunStateInc

*Dot1x_NW_MsgTask_5: Jun 13 11:27:59.375: 9c:02:98:8e:c6:5d 192.33.1.251 L2AUTHCOMPLETE (4) Change state to RUN (20) last state RUN (20)

*Dot1x_NW_MsgTask_5: Jun 13 11:27:59.375: 9c:02:98:8e:c6:5d Mobile 9c:02:98:8e:c6:5d associated

*Dot1x_NW_MsgTask_5: Jun 13 11:27:59.375: 9c:02:98:8e:c6:5d 192.33.1.251 RUN (20) Reached PLUMBFASTPATH: from line 4918

*Dot1x_NW_MsgTask_5: Jun 13 11:27:59.375: 9c:02:98:8e:c6:5d Stopping retransmission timer for mobile 9c:02:98:8e:c6:5d

*Dot1x_NW_MsgTask_5: Jun 13 11:27:59.375: 9c:02:98:8e:c6:5d Key exchange done, data packets from mobile 9c:02:98:8e:c6:5d should be forwarded shortly

*Dot1x_NW_MsgTask_5: Jun 13 11:27:59.375: 9c:02:98:8e:c6:5d Sending EAPOL-Key Message to mobile 9c:02:98:8e:c6:5d

   state PTKINITDONE (message 5 - group), replay counter 00.00.00.00.00.00.00.02

*ccxL2RoamTask: Jun 13 11:27:59.376: 9c:02:98:8e:c6:5d Mobile 9c:02:98:8e:c6:5d has unsupported CCX version 0 in [l2roamProcessClientAssociation]

*spamApTask1: Jun 13 11:27:59.418: 9c:02:98:8e:c6:5d Sent EAPOL-Key M5 for mobile 9c:02:98:8e:c6:5d

*Dot1x_NW_MsgTask_5: Jun 13 11:27:59.486: 9c:02:98:8e:c6:5d Received EAPOL-Key from mobile 9c:02:98:8e:c6:5d

*Dot1x_NW_MsgTask_5: Jun 13 11:27:59.486: 9c:02:98:8e:c6:5d Received EAPOL-key in REKEYNEGOTIATING state (message 6) from mobile 9c:02:98:8e:c6:5d

*Dot1x_NW_MsgTask_5: Jun 13 11:27:59.486: 9c:02:98:8e:c6:5d Stopping retransmission timer for mobile 9c:02:98:8e:c6:5d

*ccxL2RoamTask: Jun 13 11:28:16.823: Neighbor List for LRAD 50:06:04:2a:db:80,  Slot 1 not found in [l2roamGetNeighborListForSlot].

*ccxL2RoamTask: Jun 13 11:28:16.823: 00000000: 00 36 33 81 84 a6 c8 ac  d7 71 50 06 04 2a db 80  .63......qP..*..

*ccxL2RoamTask: Jun 13 11:28:16.823: 00000010: 28 11 50 06 04 2a db 80  0b 00 06 01 06 ab 11 11  (.P..*..........

*ccxL2RoamTask: Jun 13 11:28:16.823: 00000020: 03 b8 02 28 11 50 06 04  2a 4a 10 01 00 07 01 06  ...(.P..*J......

*ccxL2RoamTask: Jun 13 11:28:16.823: 00000030: ab 10 11 03 b8 02                                 ......

*ccxL2RoamTask: Jun 13 11:28:47.441: Neighbor List for LRAD 50:06:04:2a:e0:40,  Slot 1 not found in [l2roamGetNeighborListForSlot].

*ccxL2RoamTask: Jun 13 11:28:47.442: 00000000: 00 49 33 81 00 23 14 84  0d 64 50 06 04 2a e0 40  .I3..#...dP..*.@

*ccxL2RoamTask: Jun 13 11:28:47.442: 00000010: 28 11 50 06 04 2a e0 40  0b 00 06 01 06 ab 11 11  (.P..*.@........

*ccxL2RoamTask: Jun 13 11:28:47.442: 00000020: 03 b8 02 28 11 50 06 04  2a de 70 01 00 07 01 06  ...(.P..*.p.....

*ccxL2RoamTask: Jun 13 11:28:47.442: 00000030: ab 10 11 03 b8 02 28 11  50 06 04 2a 47 20 06 00  ......(.P..*G...

*ccxL2RoamTask: Jun 13 11:28:47.442: 00000040: 07 01 06 ab 10 11 03 b8  02                       .........

*ccxL2RoamTask: Jun 13 11:29:27.832: Neighbor List for LRAD 50:06:04:2a:db:80,  Slot 1 not found in [l2roamGetNeighborListForSlot].

*ccxL2RoamTask: Jun 13 11:29:27.832: 00000000: 00 36 33 81 84 a6 c8 ac  d7 71 50 06 04 2a db 80  .63......qP..*..

*ccxL2RoamTask: Jun 13 11:29:27.832: 00000010: 28 11 50 06 04 2a db 80  0b 00 06 01 06 ab 11 11  (.P..*..........

*ccxL2RoamTask: Jun 13 11:29:27.832: 00000020: 03 b8 02 28 11 50 06 04  2a 4a 10 01 00 07 01 06  ...(.P..*J......

*ccxL2RoamTask: Jun 13 11:29:27.832: 00000030: ab 10 11 03 b8 02                                 ......

*apfMsConnTask_3: Jun 13 11:29:32.375: 9c:02:98:8e:c6:5d Reassociation received from mobile on AP 50:06:04:2a:db:80

*apfMsConnTask_3: Jun 13 11:29:32.375: 9c:02:98:8e:c6:5d 192.33.1.251 RUN (20) Changing ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1626)

*apfMsConnTask_3: Jun 13 11:29:32.375: 9c:02:98:8e:c6:5d Applying site-specific IPv6 override for station 9c:02:98:8e:c6:5d - vapId 3, site 'PRUVIA', interface 'management'

*apfMsConnTask_3: Jun 13 11:29:32.375: 9c:02:98:8e:c6:5d Applying IPv6 Interface Policy for station 9c:02:98:8e:c6:5d - vlan 0, interface id 0, interface 'management'

*apfMsConnTask_3: Jun 13 11:29:32.375: 9c:02:98:8e:c6:5d Applying site-specific override for station 9c:02:98:8e:c6:5d - vapId 3, site 'PRUVIA', interface 'management'

*apfMsConnTask_3: Jun 13 11:29:32.375: 9c:02:98:8e:c6:5d 192.33.1.251 RUN (20) Changing ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1626)

*apfMsConnTask_3: Jun 13 11:29:32.375: 9c:02:98:8e:c6:5d STA - rates (8): 2 4 11 22 164 48 72 108 12 18 24 96 0 0 0 0

*apfMsConnTask_3: Jun 13 11:29:32.375: 9c:02:98:8e:c6:5d STA - rates (12): 2 4 11 22 164 48 72 108 12 18 24 96 0 0 0 0

*apfMsConnTask_3: Jun 13 11:29:32.375: 9c:02:98:8e:c6:5d Processing WPA IE type 221, length 22 for mobile 9c:02:98:8e:c6:5d

*apfMsConnTask_3: Jun 13 11:29:32.375: 9c:02:98:8e:c6:5d 192.33.1.251 RUN (20) Deleted mobile LWAPP rule on AP [50:06:04:2a:4a:10]

*apfMsConnTask_3: Jun 13 11:29:32.375: 9c:02:98:8e:c6:5d Updated location for station old AP 50:06:04:2a:4a:10-0, new AP 50:06:04:2a:db:80-0

*apfMsConnTask_3: Jun 13 11:29:32.375: 9c:02:98:8e:c6:5d apfMsRunStateDec

*apfMsConnTask_3: Jun 13 11:29:32.375: 9c:02:98:8e:c6:5d apfMs1xStateDec

*apfMsConnTask_3: Jun 13 11:29:32.375: 9c:02:98:8e:c6:5d 192.33.1.251 RUN (20) Change state to START (0) last state RUN (20)

*apfMsConnTask_3: Jun 13 11:29:32.375: 9c:02:98:8e:c6:5d 192.33.1.251 START (0) Initializing policy

*apfMsConnTask_3: Jun 13 11:29:32.375: 9c:02:98:8e:c6:5d 192.33.1.251 START (0) Change state to AUTHCHECK (2) last state RUN (20)

*apfMsConnTask_3: Jun 13 11:29:32.375: 9c:02:98:8e:c6:5d 192.33.1.251 AUTHCHECK (2) Change state to 8021X_REQD (3) last state RUN (20)

*apfMsConnTask_3: Jun 13 11:29:32.375: 9c:02:98:8e:c6:5d 192.33.1.251 8021X_REQD (3) DHCP required on AP 50:06:04:2a:db:80 vapId 3 apVapId 1for this client

*apfMsConnTask_3: Jun 13 11:29:32.375: 9c:02:98:8e:c6:5d Not Using WMM Compliance code qosCap 00

*apfMsConnTask_3: Jun 13 11:29:32.375: 9c:02:98:8e:c6:5d 192.33.1.251 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 50:06:04:2a:db:80 vapId 3 apVapId 1

*apfMsConnTask_3: Jun 13 11:29:32.375: 9c:02:98:8e:c6:5d apfPemAddUser2 (apf_policy.c:223) Changing state for mobile 9c:02:98:8e:c6:5d on AP 50:06:04:2a:db:80 from Associated to Associated

*apfMsConnTask_3: Jun 13 11:29:32.375: 9c:02:98:8e:c6:5d Scheduling deletion of Mobile Station:  (callerId: 49) in 1800 seconds

*apfMsConnTask_3: Jun 13 11:29:32.376: 9c:02:98:8e:c6:5d Sending Assoc Response to station on BSSID 50:06:04:2a:db:80 (status 0) ApVapId 1 Slot 0

*apfMsConnTask_3: Jun 13 11:29:32.376: 9c:02:98:8e:c6:5d apfProcessAssocReq (apf_80211.c:5237) Changing state for mobile 9c:02:98:8e:c6:5d on AP 50:06:04:2a:db:80 from Associated to Associated

*apfMsConnTask_3: Jun 13 11:29:32.409: 9c:02:98:8e:c6:5d Updating AID for REAP AP Client 50:06:04:2a:db:80 - AID ===> 2

*dot1xMsgTask: Jun 13 11:29:32.418: 9c:02:98:8e:c6:5d Creating a PKC PMKID Cache entry for station 9c:02:98:8e:c6:5d (RSN 0)

*dot1xMsgTask: Jun 13 11:29:32.418: 9c:02:98:8e:c6:5d Initiating WPA PSK to mobile 9c:02:98:8e:c6:5d

*dot1xMsgTask: Jun 13 11:29:32.418: 9c:02:98:8e:c6:5d dot1x - moving mobile 9c:02:98:8e:c6:5d into Force Auth state

*dot1xMsgTask: Jun 13 11:29:32.419: 9c:02:98:8e:c6:5d Skipping EAP-Success to mobile 9c:02:98:8e:c6:5d

*dot1xMsgTask: Jun 13 11:29:32.419: 9c:02:98:8e:c6:5d Starting key exchange to mobile 9c:02:98:8e:c6:5d, data packets will be dropped

*dot1xMsgTask: Jun 13 11:29:32.419: 9c:02:98:8e:c6:5d Sending EAPOL-Key Message to mobile 9c:02:98:8e:c6:5d

   state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00

*Dot1x_NW_MsgTask_5: Jun 13 11:29:32.475: 9c:02:98:8e:c6:5d Received EAPOL-Key from mobile 9c:02:98:8e:c6:5d

*Dot1x_NW_MsgTask_5: Jun 13 11:29:32.475: 9c:02:98:8e:c6:5d Received EAPOL-key in PTK_START state (message 2) from mobile 9c:02:98:8e:c6:5d

*Dot1x_NW_MsgTask_5: Jun 13 11:29:32.475: 9c:02:98:8e:c6:5d Stopping retransmission timer for mobile 9c:02:98:8e:c6:5d

*Dot1x_NW_MsgTask_5: Jun 13 11:29:32.475: 9c:02:98:8e:c6:5d Sending EAPOL-Key Message to mobile 9c:02:98:8e:c6:5d

   state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01

*Dot1x_NW_MsgTask_5: Jun 13 11:29:32.514: 9c:02:98:8e:c6:5d Received EAPOL-Key from mobile 9c:02:98:8e:c6:5d

*Dot1x_NW_MsgTask_5: Jun 13 11:29:32.514: 9c:02:98:8e:c6:5d Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 9c:02:98:8e:c6:5d

*Dot1x_NW_MsgTask_5: Jun 13 11:29:32.514: 9c:02:98:8e:c6:5d apfMs1xStateInc

*Dot1x_NW_MsgTask_5: Jun 13 11:29:32.514: 9c:02:98:8e:c6:5d 192.33.1.251 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state RUN (20)

*Dot1x_NW_MsgTask_5: Jun 13 11:29:32.515: 9c:02:98:8e:c6:5d 192.33.1.251 L2AUTHCOMPLETE (4) DHCP required on AP 50:06:04:2a:db:80 vapId 3 apVapId 1for this client

*Dot1x_NW_MsgTask_5: Jun 13 11:29:32.515: 9c:02:98:8e:c6:5d Not Using WMM Compliance code qosCap 00

*Dot1x_NW_MsgTask_5: Jun 13 11:29:32.515: 9c:02:98:8e:c6:5d 192.33.1.251 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 50:06:04:2a:db:80 vapId 3 apVapId 1

*Dot1x_NW_MsgTask_5: Jun 13 11:29:32.515: 9c:02:98:8e:c6:5d apfMsRunStateInc

*Dot1x_NW_MsgTask_5: Jun 13 11:29:32.515: 9c:02:98:8e:c6:5d 192.33.1.251 L2AUTHCOMPLETE (4) Change state to RUN (20) last state RUN (20)

*Dot1x_NW_MsgTask_5: Jun 13 11:29:32.515: 9c:02:98:8e:c6:5d Mobile 9c:02:98:8e:c6:5d associated

*Dot1x_NW_MsgTask_5: Jun 13 11:29:32.515: 9c:02:98:8e:c6:5d 192.33.1.251 RUN (20) Reached PLUMBFASTPATH: from line 4918

*Dot1x_NW_MsgTask_5: Jun 13 11:29:32.515: 9c:02:98:8e:c6:5d Stopping retransmission timer for mobile 9c:02:98:8e:c6:5d

*Dot1x_NW_MsgTask_5: Jun 13 11:29:32.515: 9c:02:98:8e:c6:5d Key exchange done, data packets from mobile 9c:02:98:8e:c6:5d should be forwarded shortly

*Dot1x_NW_MsgTask_5: Jun 13 11:29:32.515: 9c:02:98:8e:c6:5d Sending EAPOL-Key Message to mobile 9c:02:98:8e:c6:5d

   state PTKINITDONE (message 5 - group), replay counter 00.00.00.00.00.00.00.02

*ccxL2RoamTask: Jun 13 11:29:32.516: 9c:02:98:8e:c6:5d Mobile 9c:02:98:8e:c6:5d has unsupported CCX version 0 in [l2roamProcessClientAssociation]

*spamApTask5: Jun 13 11:29:32.558: 9c:02:98:8e:c6:5d Sent EAPOL-Key M5 for mobile 9c:02:98:8e:c6:5d

*Dot1x_NW_MsgTask_5: Jun 13 11:29:32.601: 9c:02:98:8e:c6:5d Received EAPOL-Key from mobile 9c:02:98:8e:c6:5d

*Dot1x_NW_MsgTask_5: Jun 13 11:29:32.601: 9c:02:98:8e:c6:5d Received EAPOL-key in REKEYNEGOTIATING state (message 6) from mo

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted

There is no configuration you can do to adjust that. Since you already noticed that the MAC address doesn't change to the ap the client roamed to, then I would ask HP to see of there is a workaround or configuration required on their switch.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***

View solution in original post

7 REPLIES 7
Highlighted
Hall of Fame Master

Since this is FlexConnect I would verify the vlan mapping on the WLAN and also make sure that the AP is connected to a trunk port if passing multiple vlans.

It seems like one of the APs either doesn't have the correct WLAN to vlan mapping or the AP is not on a trunk port or the vlan is not allowed.

Sent from Cisco Technical Support iPhone App

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
Highlighted

No vlan mapping configured.

Will a non trunk port will be causing this issue, I mean that if there´sno trunk port passing all vlan, will it start working after 300 seconds?

Thanks

Highlighted

If your putting the users on the same vlan as the AP's are on, then you don't need to trunk.

It also can be a bad cable.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
Highlighted

Already check everything you said, but no luck. Also check on another site and found out that could be a mac learning/updating issue with HP procurve 2510 switches. When a client roams from AP1 to AP2, on the switch the mac table entry for the client does not update to the port where AP2 is. After the mac-aging-time on the HP Procurve switch ends, the mac updates correctly and the traffic start going fine. Any ideas on how can i deal with this issue? Any configuration help for the WLC controller or APs? HP switches are configured as default (out-of-the-box).

Highlighted

There is no configuration you can do to adjust that. Since you already noticed that the MAC address doesn't change to the ap the client roamed to, then I would ask HP to see of there is a workaround or configuration required on their switch.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***

View solution in original post

Highlighted

Is this issue/bug still open on version 7.0.220 ?

CSCti21621 Switch CAM table not updated after L2 roam.

Highlighted

Per the bug toolkit, its been fixed.

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCti21621

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***