Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Mike Clites
Stats
Member since
04-06-2011
94
Posts
5
Helpful
0
Solutions
Created by
Mike Clites
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
09-19-2013
06:44 AM
09-19-2013
06:44 AM
That is a bit of an issue since it is a remote (1/2 way across the country for me) location and the issue appears limited to 1 client. The client debugs, it appears the client is NOT sending out dhcp requests. Thats how i am reading it at least. I beleive I am going to have to have a desk-side guy make time to locate the client, check the devices wireless configuration out & possibly delete/re-establish it.
... View more
Created by
Mike Clites
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
09-19-2013
06:31 AM
09-19-2013
06:31 AM
Yes the client is connecting on a locally switched WLAN via H-REAP. vlan 96 The switch port is trunked. Native to the vlan of the ssid in question. The local server(dhcp) is also natively on the same vlan & yes is accessable from the AP. (i have verified via ping). For us, this type of H-REAP configuration is very common in our environment. interface FastEthernet0/34 switchport trunk encapsulation dot1q switchport trunk native vlan 96 switchport mode trunk switchport voice vlan 196 srr-queue bandwidth shape 10 0 0 0 mls qos trust device cisco-phone mls qos trust cos spanning-tree portfast end
... View more
Created by
Mike Clites
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
09-19-2013
05:56 AM
09-19-2013
05:56 AM
(Cisco Controller) >show dhcp proxy DHCP Proxy Behaviour: disabled Bootp-Broadcast:disabled ------------------------------------------------------------------------- show wlan 7 Status........................................... Enabled MAC Filtering.................................... Disabled Broadcast SSID................................... Enabled AAA Policy Override.............................. Disabled Network Admission Control Radius-NAC State............................... Disabled SNMP-NAC State................................. Disabled Quarantine VLAN................................ 0 Maximum number of Associated Clients............. 0 Number of Active Clients......................... 44 Exclusionlist.................................... Disabled Session Timeout.................................. 28800 seconds CHD per WLAN..................................... Enabled Webauth DHCP exclusion........................... Disabled Interface........................................ whq_58 Multicast Interface.............................. Not Configured WLAN ACL......................................... unconfigured DHCP Server...................................... Default DHCP Address Assignment Required................. Enabled Static IP client tunneling....................... Disabled Quality of Service............................... Gold (video) Scan Defer Priority.............................. 4,5,6 Scan Defer Time.................................. 100 milliseconds WMM.............................................. Allowed WMM UAPSD Compliant Client Support............... Disabled Media Stream Multicast-direct.................... Disabled CCX - AironetIe Support.......................... Disabled CCX - Gratuitous ProbeResponse (GPR)............. Disabled CCX - Diagnostics Channel Capability............. Disabled Dot11-Phone Mode (7920).......................... Disabled Wired Protocol................................... 802.1P (Tag=5) IPv6 Support..................................... Disabled Passive Client Feature........................... Disabled Peer-to-Peer Blocking Action..................... Disabled Radio Policy..................................... All DTIM period for 802.11a radio.................... 2 DTIM period for 802.11b radio.................... 2 Radius Servers Authentication................................ 172.16.1.47 1812 Authentication................................ 172.16.1.46 1812 Accounting.................................... 172.16.1.47 1813 Accounting.................................... 172.16.1.46 1813 Dynamic Interface............................. Disabled Local EAP Authentication......................... Disabled Security 802.11 Authentication:........................ Open System Static WEP Keys............................... Disabled 802.1X........................................ Disabled Wi-Fi Protected Access (WPA/WPA2)............. Enabled WPA (SSN IE)............................... Disabled WPA2 (RSN IE).............................. Enabled TKIP Cipher............................. Disabled AES Cipher.............................. Enabled Auth Key Management 802.1x.................................. Enabled PSK..................................... Disabled CCKM.................................... Disabled FT(802.11r)............................. Disabled FT-PSK(802.11r)......................... Disabled FT Reassociation Timeout......................... 20 FT Over-The-Air mode............................. Enabled FT Over-The-Ds mode.............................. Enabled CCKM tsf Tolerance............................... 1000 CKIP ......................................... Disabled Web Based Authentication...................... Disabled Web-Passthrough............................... Disabled Conditional Web Redirect...................... Disabled Splash-Page Web Redirect...................... Disabled Auto Anchor................................... Disabled H-REAP Local Switching........................ Enabled H-REAP Local Authentication................... Disabled H-REAP Learn IP Address....................... Enabled Client MFP.................................... Optional Tkip MIC Countermeasure Hold-down Timer....... 60 Call Snooping.................................... Disabled Roamed Call Re-Anchor Policy..................... Disabled SIP CAC Fail Send-486-Busy Policy................ Enabled SIP CAC Fail Send Dis-Association Policy......... Disabled Band Select...................................... Disabled Load Balancing................................... Disabled Mobility Anchor List WLAN ID IP Address Status ------- --------------- ------ -------------------------------------------------------------------------------------------------- DHCP server is windows server 2003. Standard config (corperate wide config on servers) no special flags on the pool. server is on same vlan as client @ the same location. ----------------------------------------------------------------------------------------------------- I also have a tac case open for this & the engineer is seeing the same issue; the client is NOT sending a dhcp request. The tacacs portion is fine. He is suggesting taking off the "dhcp required" security feature on the ssid. I am hesitant because we specifically require dhcp for security reasons. That will allow the client to work but it wont explain where the issue lay. Again, we have the vast majority of our clients connecting fine. I believe this to be isolated to the client/drivers/configuration but have not been able to have a desk-side guy check into the client. -------------------------------------------------------------------------------------------------------------------------------------------------- debug client 08:11:96:22:78:b0 (Cisco Controller) >*spamApTask6: Sep 18 14:26:12.435: 08:11:96:22:78:b0 Warning, ignore the DELETE_MOBILE_PAYLOAD from AP: 00:26:cb:aa:81:20, slot 0. STA connecting AP: 20:37:06:7c:0d:f0, slot 1 *apfReceiveTask: Sep 18 14:29:55.892: 08:11:96:22:78:b0 0.0.0.0 DHCP_REQD (7) DHCP Policy timeout. Number of DHCP request 0 from client *apfReceiveTask: Sep 18 14:29:55.892: 08:11:96:22:78:b0 0.0.0.0 DHCP_REQD (7) Pem timed out, Try to delete client in 10 secs. *apfReceiveTask: Sep 18 14:29:55.892: 08:11:96:22:78:b0 Scheduling deletion of Mobile Station: (callerId: 12) in 10 seconds *spamApTask6: Sep 18 14:29:58.869: 08:11:96:22:78:b0 Received Idle-Timeout from AP 00:26:cb:aa:81:20, slot 0 for STA 08:11:96:22:78:b0 *spamApTask6: Sep 18 14:29:58.869: 08:11:96:22:78:b0 apfMsDeleteByMscb Scheduling mobile for deletion with deleteReason 4, reasonCode 4 *spamApTask6: Sep 18 14:29:58.869: 08:11:96:22:78:b0 Scheduling deletion of Mobile Station: (callerId: 30) in 1 seconds *spamApTask6: Sep 18 14:29:58.869: 08:11:96:22:78:b0 CCKM: Sending cache delete *spamApTask6: Sep 18 14:29:58.869: 08:11:96:22:78:b0 PMK: Sending cache delete *spamApTask6: Sep 18 14:29:58.869: 08:11:96:22:78:b0 Removing PMK cache entry for station 08:11:96:22:78:b0 *osapiBsnTimer: Sep 18 14:29:59.691: 08:11:96:22:78:b0 apfMsExpireCallback (apf_ms.c:609) Expiring Mobile! *apfReceiveTask: Sep 18 14:29:59.692: 08:11:96:22:78:b0 apfMsExpireMobileStation (apf_ms.c:5021) Changing state for mobile 08:11:96:22:78:b0 on AP 00:26:cb:aa:81:20 from Associated to Disassociated *apfReceiveTask: Sep 18 14:29:59.694: 08:11:96:22:78:b0 Sent Deauthenticate to mobile on BSSID 00:26:cb:aa:81:20 slot 0(caller apf_ms.c:5113) *apfReceiveTask: Sep 18 14:29:59.694: 08:11:96:22:78:b0 apfMsAssoStateDec *apfReceiveTask: Sep 18 14:29:59.694: 08:11:96:22:78:b0 apfMsExpireMobileStation (apf_ms.c:5151) Changing state for mobile 08:11:96:22:78:b0 on AP 00:26:cb:aa:81:20 from Disassociated to Idle *apfReceiveTask: Sep 18 14:29:59.694: 08:11:96:22:78:b0 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfReceiveTask: Sep 18 14:29:59.694: 08:11:96:22:78:b0 0.0.0.0 DHCP_REQD (7) Deleted mobile LWAPP rule on AP [00:26:cb:aa:81:20] *apfReceiveTask: Sep 18 14:29:59.694: 08:11:96:22:78:b0 Username entry deleted for mobile *apfReceiveTask: Sep 18 14:29:59.694: 08:11:96:22:78:b0 apfMs1xStateDec *apfReceiveTask: Sep 18 14:29:59.694: 08:11:96:22:78:b0 Deleting mobile on AP 00:26:cb:aa:81:20(0) *pemReceiveTask: Sep 18 14:29:59.695: 08:11:96:22:78:b0 0.0.0.0 Removed NPU entry. *spamApTask6: Sep 18 14:29:59.898: 08:11:96:22:78:b0 Received Idle-Timeout from AP 00:26:cb:aa:81:20, slot 0 for STA 08:11:96:22:78:b0 *apfMsConnTask_6: Sep 18 14:30:00.033: 08:11:96:22:78:b0 Adding mobile on LWAPP AP 00:26:cb:aa:81:20(0) *apfMsConnTask_6: Sep 18 14:30:00.033: 08:11:96:22:78:b0 Association received from mobile on AP 00:26:cb:aa:81:20 *apfMsConnTask_6: Sep 18 14:30:00.033: 08:11:96:22:78:b0 0.0.0.0 START (0) Changing ACL 'Pre-Auth-for-External-Web-Server' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1633) *apfMsConnTask_6: Sep 18 14:30:00.033: 08:11:96:22:78:b0 Applying site-specific IPv6 override for station 08:11:96:22:78:b0 - vapId 7, site '1441_NY', interface 'management' *apfMsConnTask_6: Sep 18 14:30:00.033: 08:11:96:22:78:b0 Applying IPv6 Interface Policy for station 08:11:96:22:78:b0 - vlan 0, interface id 0, interface 'management' *apfMsConnTask_6: Sep 18 14:30:00.033: 08:11:96:22:78:b0 Applying site-specific override for station 08:11:96:22:78:b0 - vapId 7, site '1441_NY', interface 'management' *apfMsConnTask_6: Sep 18 14:30:00.033: 08:11:96:22:78:b0 0.0.0.0 START (0) Changing ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1633) *apfMsConnTask_6: Sep 18 14:30:00.033: 08:11:96:22:78:b0 STA - rates (8): 2 4 11 22 12 18 152 36 0 0 0 0 0 0 0 0 *apfMsConnTask_6: Sep 18 14:30:00.033: 08:11:96:22:78:b0 STA - rates (12): 2 4 11 22 12 18 152 36 48 72 96 108 0 0 0 0 *apfMsConnTask_6: Sep 18 14:30:00.033: 08:11:96:22:78:b0 Processing RSN IE type 48, length 38 for mobile 08:11:96:22:78:b0 *apfMsConnTask_6: Sep 18 14:30:00.033: 08:11:96:22:78:b0 Received RSN IE with 1 PMKIDs from mobile 08:11:96:22:78:b0 *apfMsConnTask_6: Sep 18 14:30:00.033: Received PMKID: (16) *apfMsConnTask_6: Sep 18 14:30:00.034: [0000] f2 1f d6 8c c0 f5 c7 94 77 87 45 cf f6 5f d1 56 *apfMsConnTask_6: Sep 18 14:30:00.034: 08:11:96:22:78:b0 Searching for PMKID in MSCB PMKID cache for mobile 08:11:96:22:78:b0 *apfMsConnTask_6: Sep 18 14:30:00.034: 08:11:96:22:78:b0 No valid PMKID found in the MSCB PMKID cache for mobile 08:11:96:22:78:b0 *apfMsConnTask_6: Sep 18 14:30:00.034: 08:11:96:22:78:b0 Trying to compute a PMKID from MSCB PMK cache for mobile 08:11:96:22:78:b0 *apfMsConnTask_6: Sep 18 14:30:00.034: CCKM: Find PMK in cache: BSSID = (6) *apfMsConnTask_6: Sep 18 14:30:00.034: [0000] 00 26 cb aa 81 20 *apfMsConnTask_6: Sep 18 14:30:00.034: CCKM: Find PMK in cache: realAA = (6) *apfMsConnTask_6: Sep 18 14:30:00.034: [0000] 00 26 cb aa 81 24 *apfMsConnTask_6: Sep 18 14:30:00.034: CCKM: Find PMK in cache: PMKID = (16) *apfMsConnTask_6: Sep 18 14:30:00.034: [0000] f2 1f d6 8c c0 f5 c7 94 77 87 45 cf f6 5f d1 56 *apfMsConnTask_6: Sep 18 14:30:00.034: 08:11:96:22:78:b0 Unable to compute a valid PMKID from MSCB PMK cache for mobile 08:11:96:22:78:b0 *apfMsConnTask_6: Sep 18 14:30:00.034: 08:11:96:22:78:b0 Searching for PMK in global PMK cache for mobile 08:11:96:22:78:b0 *apfMsConnTask_6: Sep 18 14:30:00.034: 08:11:96:22:78:b0 Unable to compute a valid PMKID from global PMK cache for mobile 08:11:96:22:78:b0 *apfMsConnTask_6: Sep 18 14:30:00.034: 08:11:96:22:78:b0 0.0.0.0 START (0) Initializing policy *apfMsConnTask_6: Sep 18 14:30:00.034: 08:11:96:22:78:b0 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state AUTHCHECK (2) *apfMsConnTask_6: Sep 18 14:30:00.034: 08:11:96:22:78:b0 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state 8021X_REQD (3) *apfMsConnTask_6: Sep 18 14:30:00.034: 08:11:96:22:78:b0 0.0.0.0 8021X_REQD (3) DHCP Not required on AP 00:26:cb:aa:81:20 vapId 7 apVapId 5for this client *apfMsConnTask_6: Sep 18 14:30:00.034: 08:11:96:22:78:b0 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_6: Sep 18 14:30:00.034: 08:11:96:22:78:b0 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 00:26:cb:aa:81:20 vapId 7 apVapId 5 *apfMsConnTask_6: Sep 18 14:30:00.034: 08:11:96:22:78:b0 apfMsAssoStateInc *apfMsConnTask_6: Sep 18 14:30:00.034: 08:11:96:22:78:b0 apfPemAddUser2 (apf_policy.c:223) Changing state for mobile 08:11:96:22:78:b0 on AP 00:26:cb:aa:81:20 from Idle to Associated *apfMsConnTask_6: Sep 18 14:30:00.034: 08:11:96:22:78:b0 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_6: Sep 18 14:30:00.034: 08:11:96:22:78:b0 Sending Assoc Response to station on BSSID 00:26:cb:aa:81:20 (status 0) ApVapId 5 Slot 0 *apfMsConnTask_6: Sep 18 14:30:00.034: 08:11:96:22:78:b0 apfProcessAssocReq (apf_80211.c:5276) Changing state for mobile 08:11:96:22:78:b0 on AP 00:26:cb:aa:81:20 from Associated to Associated *apfMsConnTask_6: Sep 18 14:30:00.066: 08:11:96:22:78:b0 Updating AID for REAP AP Client 00:26:cb:aa:81:20 - AID ===> 6 *dot1xMsgTask: Sep 18 14:30:00.068: 08:11:96:22:78:b0 Station 08:11:96:22:78:b0 setting dot1x reauth timeout = 28800 *dot1xMsgTask: Sep 18 14:30:00.068: 08:11:96:22:78:b0 dot1x - moving mobile 08:11:96:22:78:b0 into Connecting state *dot1xMsgTask: Sep 18 14:30:00.068: 08:11:96:22:78:b0 Sending EAP-Request/Identity to mobile 08:11:96:22:78:b0 (EAP Id 1) *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.104: 08:11:96:22:78:b0 Received EAPOL EAPPKT from mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.104: 08:11:96:22:78:b0 Received Identity Response (count=1) from mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.104: 08:11:96:22:78:b0 EAP State update from Connecting to Authenticating for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.104: 08:11:96:22:78:b0 dot1x - moving mobile 08:11:96:22:78:b0 into Authenticating state *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.104: 08:11:96:22:78:b0 Entering Backend Auth Response state for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.113: 08:11:96:22:78:b0 Processing Access-Challenge for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.113: 08:11:96:22:78:b0 Entering Backend Auth Req state (id=2) for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.113: 08:11:96:22:78:b0 Sending EAP Request from AAA to mobile 08:11:96:22:78:b0 (EAP Id 2) *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.142: 08:11:96:22:78:b0 Received EAPOL EAPPKT from mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.142: 08:11:96:22:78:b0 Received EAP Response from mobile 08:11:96:22:78:b0 (EAP Id 2, EAP Type 25) *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.142: 08:11:96:22:78:b0 Entering Backend Auth Response state for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.144: 08:11:96:22:78:b0 Processing Access-Challenge for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.144: 08:11:96:22:78:b0 Entering Backend Auth Req state (id=3) for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.145: 08:11:96:22:78:b0 Sending EAP Request from AAA to mobile 08:11:96:22:78:b0 (EAP Id 3) *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.179: 08:11:96:22:78:b0 Received EAPOL EAPPKT from mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.179: 08:11:96:22:78:b0 Received EAP Response from mobile 08:11:96:22:78:b0 (EAP Id 3, EAP Type 25) *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.179: 08:11:96:22:78:b0 Entering Backend Auth Response state for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.186: 08:11:96:22:78:b0 Processing Access-Challenge for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.186: 08:11:96:22:78:b0 Entering Backend Auth Req state (id=6) for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.186: 08:11:96:22:78:b0 WARNING: updated EAP-Identifier 3 ===> 6 for STA 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.186: 08:11:96:22:78:b0 Sending EAP Request from AAA to mobile 08:11:96:22:78:b0 (EAP Id 6) *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.220: 08:11:96:22:78:b0 Received EAPOL EAPPKT from mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.220: 08:11:96:22:78:b0 Received EAP Response from mobile 08:11:96:22:78:b0 (EAP Id 6, EAP Type 25) *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.220: 08:11:96:22:78:b0 Entering Backend Auth Response state for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.225: 08:11:96:22:78:b0 Processing Access-Accept for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.225: 08:11:96:22:78:b0 Resetting web acl from 255 to 255 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.225: 08:11:96:22:78:b0 Setting re-auth timeout to 28800 seconds, got from WLAN config. *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.225: 08:11:96:22:78:b0 Station 08:11:96:22:78:b0 setting dot1x reauth timeout = 28800 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.225: 08:11:96:22:78:b0 Username entry (host/DS7M4R1.kwd.ad.kellwood.com) created for mobile, length = 253 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.225: 08:11:96:22:78:b0 Username entry (host/DS7M4R1.kwd.ad.kellwood.com) created in mscb for mobile, length = 253 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.227: 08:11:96:22:78:b0 Creating a PKC PMKID Cache entry for station 08:11:96:22:78:b0 (RSN 2) *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.227: 08:11:96:22:78:b0 Adding BSSID 00:26:cb:aa:81:24 to PMKID cache for station 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.227: New PMKID: (16) *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.227: [0000] af c8 54 cf 2f 16 ca 2e cb 36 0b 86 59 ac 8f 62 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.227: 08:11:96:22:78:b0 Disabling re-auth since PMK lifetime can take care of same. *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.227: 08:11:96:22:78:b0 PMK sent to mobility group *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.227: 08:11:96:22:78:b0 Sending EAP-Success to mobile 08:11:96:22:78:b0 (EAP Id 6) *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.227: Including PMKID in M1 (16) *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.227: [0000] af c8 54 cf 2f 16 ca 2e cb 36 0b 86 59 ac 8f 62 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.227: 08:11:96:22:78:b0 Starting key exchange to mobile 08:11:96:22:78:b0, data packets will be dropped *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.227: 08:11:96:22:78:b0 Sending EAPOL-Key Message to mobile 08:11:96:22:78:b0 state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.227: 08:11:96:22:78:b0 Entering Backend Auth Success state (id=6) for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.227: 08:11:96:22:78:b0 Received Auth Success while in Authenticating state for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.228: 08:11:96:22:78:b0 dot1x - moving mobile 08:11:96:22:78:b0 into Authenticated state *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.265: 08:11:96:22:78:b0 Received EAPOL-Key from mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.265: 08:11:96:22:78:b0 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.265: 08:11:96:22:78:b0 Received EAPOL-key in PTK_START state (message 2) from mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.266: 08:11:96:22:78:b0 PMK: Sending cache add *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.266: 08:11:96:22:78:b0 Stopping retransmission timer for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.266: 08:11:96:22:78:b0 Sending EAPOL-Key Message to mobile 08:11:96:22:78:b0 state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.297: 08:11:96:22:78:b0 Received EAPOL-Key from mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.297: 08:11:96:22:78:b0 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.297: 08:11:96:22:78:b0 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.297: 08:11:96:22:78:b0 apfMs1xStateInc *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.298: 08:11:96:22:78:b0 0.0.0.0 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state L2AUTHCOMPLETE (4) *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.298: 08:11:96:22:78:b0 0.0.0.0 L2AUTHCOMPLETE (4) DHCP Not required on AP 00:26:cb:aa:81:20 vapId 7 apVapId 5for this client *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.298: 08:11:96:22:78:b0 Not Using WMM Compliance code qosCap 00 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.298: 08:11:96:22:78:b0 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 00:26:cb:aa:81:20 vapId 7 apVapId 5 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.298: 08:11:96:22:78:b0 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state DHCP_REQD (7) *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.298: 08:11:96:22:78:b0 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 4838, Adding TMP rule *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.298: 08:11:96:22:78:b0 0.0.0.0 DHCP_REQD (7) Adding Fast Path rule type = Airespace AP - Learn IP address on AP 00:26:cb:aa:81:20, slot 0, interface = 1, QOS = 1 ACL Id = 255, Jumbo Fr *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.298: 08:11:96:22:78:b0 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 5, DSCP = 0, TokenID = 7006 IPv6 Vlan = 0, IPv6 intf id = 0 *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.298: 08:11:96:22:78:b0 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (ACL ID 255) *Dot1x_NW_MsgTask_0: Sep 18 14:30:00.298: 08:11:96:22:78:b0 Stopping retransmission timer for mobile 08:11:96:22:78:b0 *pemReceiveTask: Sep 18 14:30:00.299: 08:11:96:22:78:b0 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0 *apfReceiveTask: Sep 18 14:30:03.292: 08:11:96:22:78:b0 0.0.0.0 DHCP_REQD (7) State Update from Mobility-Incomplete to Mobility-Complete, mobility role=Local, client state=APF_MS_STATE_ASSOCIATED *apfReceiveTask: Sep 18 14:30:03.292: 08:11:96:22:78:b0 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 4499, Adding TMP rule *apfReceiveTask: Sep 18 14:30:03.292: 08:11:96:22:78:b0 0.0.0.0 DHCP_REQD (7) Replacing Fast Path rule type = Airespace AP - Learn IP address on AP 00:26:cb:aa:81:20, slot 0, interface = 1, QOS = 1 ACL Id = 255, Jumbo *apfReceiveTask: Sep 18 14:30:03.292: 08:11:96:22:78:b0 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 5, DSCP = 0, TokenID = 7006 IPv6 Vlan = 0, IPv6 intf id = 0 *apfReceiveTask: Sep 18 14:30:03.292: 08:11:96:22:78:b0 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (ACL ID 255) *pemReceiveTask: Sep 18 14:30:03.292: 08:11:96:22:78:b0 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0 *apfReceiveTask: Sep 18 14:32:00.292: 08:11:96:22:78:b0 0.0.0.0 DHCP_REQD (7) DHCP Policy timeout. Number of DHCP request 0 from client *apfReceiveTask: Sep 18 14:32:00.292: 08:11:96:22:78:b0 0.0.0.0 DHCP_REQD (7) Pem timed out, Try to delete client in 10 secs. *apfReceiveTask: Sep 18 14:32:00.292: 08:11:96:22:78:b0 Scheduling deletion of Mobile Station: (callerId: 12) in 10 seconds *spamApTask6: Sep 18 14:32:03.409: 08:11:96:22:78:b0 Received Idle-Timeout from AP 00:26:cb:aa:81:20, slot 0 for STA 08:11:96:22:78:b0 *spamApTask6: Sep 18 14:32:03.409: 08:11:96:22:78:b0 apfMsDeleteByMscb Scheduling mobile for deletion with deleteReason 4, reasonCode 4 *spamApTask6: Sep 18 14:32:03.409: 08:11:96:22:78:b0 Scheduling deletion of Mobile Station: (callerId: 30) in 1 seconds *spamApTask6: Sep 18 14:32:03.409: 08:11:96:22:78:b0 CCKM: Sending cache delete *spamApTask6: Sep 18 14:32:03.410: 08:11:96:22:78:b0 PMK: Sending cache delete *spamApTask6: Sep 18 14:32:03.410: 08:11:96:22:78:b0 Removing PMK cache entry for station 08:11:96:22:78:b0 *osapiBsnTimer: Sep 18 14:32:04.291: 08:11:96:22:78:b0 apfMsExpireCallback (apf_ms.c:609) Expiring Mobile! *apfReceiveTask: Sep 18 14:32:04.292: 08:11:96:22:78:b0 apfMsExpireMobileStation (apf_ms.c:5021) Changing state for mobile 08:11:96:22:78:b0 on AP 00:26:cb:aa:81:20 from Associated to Disassociated *apfReceiveTask: Sep 18 14:32:04.294: 08:11:96:22:78:b0 Sent Deauthenticate to mobile on BSSID 00:26:cb:aa:81:20 slot 0(caller apf_ms.c:5113) *apfReceiveTask: Sep 18 14:32:04.294: 08:11:96:22:78:b0 apfMsAssoStateDec *apfReceiveTask: Sep 18 14:32:04.294: 08:11:96:22:78:b0 apfMsExpireMobileStation (apf_ms.c:5151) Changing state for mobile 08:11:96:22:78:b0 on AP 00:26:cb:aa:81:20 from Disassociated to Idle *apfReceiveTask: Sep 18 14:32:04.294: 08:11:96:22:78:b0 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfReceiveTask: Sep 18 14:32:04.294: 08:11:96:22:78:b0 0.0.0.0 DHCP_REQD (7) Deleted mobile LWAPP rule on AP [00:26:cb:aa:81:20] *apfReceiveTask: Sep 18 14:32:04.294: 08:11:96:22:78:b0 Username entry deleted for mobile *apfReceiveTask: Sep 18 14:32:04.294: 08:11:96:22:78:b0 apfMs1xStateDec *apfReceiveTask: Sep 18 14:32:04.294: 08:11:96:22:78:b0 Deleting mobile on AP 00:26:cb:aa:81:20(0) *pemReceiveTask: Sep 18 14:32:04.295: 08:11:96:22:78:b0 0.0.0.0 Removed NPU entry. *spamApTask6: Sep 18 14:32:04.437: 08:11:96:22:78:b0 Received Idle-Timeout from AP 00:26:cb:aa:81:20, slot 0 for STA 08:11:96:22:78:b0 *apfMsConnTask_0: Sep 18 14:32:04.569: 08:11:96:22:78:b0 Adding mobile on LWAPP AP 20:37:06:7c:0d:f0(1) *apfMsConnTask_0: Sep 18 14:32:04.569: 08:11:96:22:78:b0 Association received from mobile on AP 20:37:06:7c:0d:f0 *apfMsConnTask_0: Sep 18 14:32:04.569: 08:11:96:22:78:b0 0.0.0.0 START (0) Changing ACL 'Pre-Auth-for-External-Web-Server' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1633) *apfMsConnTask_0: Sep 18 14:32:04.570: 08:11:96:22:78:b0 Applying site-specific IPv6 override for station 08:11:96:22:78:b0 - vapId 7, site '1441_NY', interface 'management' *apfMsConnTask_0: Sep 18 14:32:04.570: 08:11:96:22:78:b0 Applying IPv6 Interface Policy for station 08:11:96:22:78:b0 - vlan 0, interface id 0, interface 'management' *apfMsConnTask_0: Sep 18 14:32:04.570: 08:11:96:22:78:b0 Applying site-specific override for station 08:11:96:22:78:b0 - vapId 7, site '1441_NY', interface 'management' *apfMsConnTask_0: Sep 18 14:32:04.570: 08:11:96:22:78:b0 0.0.0.0 START (0) Changing ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1633) *apfMsConnTask_0: Sep 18 14:32:04.570: 08:11:96:22:78:b0 STA - rates (6): 152 36 176 72 96 108 0 0 0 0 0 0 0 0 0 0 *apfMsConnTask_0: Sep 18 14:32:04.570: 08:11:96:22:78:b0 Processing RSN IE type 48, length 38 for mobile 08:11:96:22:78:b0 *apfMsConnTask_0: Sep 18 14:32:04.570: 08:11:96:22:78:b0 Received RSN IE with 1 PMKIDs from mobile 08:11:96:22:78:b0 *apfMsConnTask_0: Sep 18 14:32:04.570: Received PMKID: (16) *apfMsConnTask_0: Sep 18 14:32:04.570: [0000] 04 5f c4 aa 88 39 bb ad 70 80 d1 a4 93 33 fc 54 *apfMsConnTask_0: Sep 18 14:32:04.570: 08:11:96:22:78:b0 Searching for PMKID in MSCB PMKID cache for mobile 08:11:96:22:78:b0 *apfMsConnTask_0: Sep 18 14:32:04.570: 08:11:96:22:78:b0 No valid PMKID found in the MSCB PMKID cache for mobile 08:11:96:22:78:b0 *apfMsConnTask_0: Sep 18 14:32:04.570: 08:11:96:22:78:b0 Trying to compute a PMKID from MSCB PMK cache for mobile 08:11:96:22:78:b0 *apfMsConnTask_0: Sep 18 14:32:04.570: CCKM: Find PMK in cache: BSSID = (6) *apfMsConnTask_0: Sep 18 14:32:04.570: [0000] 20 37 06 7c 0d f0 *apfMsConnTask_0: Sep 18 14:32:04.570: CCKM: Find PMK in cache: realAA = (6) *apfMsConnTask_0: Sep 18 14:32:04.570: [0000] 20 37 06 7c 0d fb *apfMsConnTask_0: Sep 18 14:32:04.570: CCKM: Find PMK in cache: PMKID = (16) *apfMsConnTask_0: Sep 18 14:32:04.570: [0000] 04 5f c4 aa 88 39 bb ad 70 80 d1 a4 93 33 fc 54 *apfMsConnTask_0: Sep 18 14:32:04.570: 08:11:96:22:78:b0 Unable to compute a valid PMKID from MSCB PMK cache for mobile 08:11:96:22:78:b0 *apfMsConnTask_0: Sep 18 14:32:04.570: 08:11:96:22:78:b0 Searching for PMK in global PMK cache for mobile 08:11:96:22:78:b0 *apfMsConnTask_0: Sep 18 14:32:04.570: 08:11:96:22:78:b0 Unable to compute a valid PMKID from global PMK cache for mobile 08:11:96:22:78:b0 *apfMsConnTask_0: Sep 18 14:32:04.570: 08:11:96:22:78:b0 0.0.0.0 START (0) Initializing policy *apfMsConnTask_0: Sep 18 14:32:04.570: 08:11:96:22:78:b0 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state AUTHCHECK (2) *apfMsConnTask_0: Sep 18 14:32:04.570: 08:11:96:22:78:b0 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state 8021X_REQD (3) *apfMsConnTask_0: Sep 18 14:32:04.570: 08:11:96:22:78:b0 0.0.0.0 8021X_REQD (3) DHCP Not required on AP 20:37:06:7c:0d:f0 vapId 7 apVapId 5for this client *apfMsConnTask_0: Sep 18 14:32:04.570: 08:11:96:22:78:b0 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_0: Sep 18 14:32:04.570: 08:11:96:22:78:b0 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 20:37:06:7c:0d:f0 vapId 7 apVapId 5 *apfMsConnTask_0: Sep 18 14:32:04.570: 08:11:96:22:78:b0 apfMsAssoStateInc *apfMsConnTask_0: Sep 18 14:32:04.570: 08:11:96:22:78:b0 apfPemAddUser2 (apf_policy.c:223) Changing state for mobile 08:11:96:22:78:b0 on AP 20:37:06:7c:0d:f0 from Idle to Associated *apfMsConnTask_0: Sep 18 14:32:04.571: 08:11:96:22:78:b0 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_0: Sep 18 14:32:04.571: 08:11:96:22:78:b0 Sending Assoc Response to station on BSSID 20:37:06:7c:0d:f0 (status 0) ApVapId 5 Slot 1 *apfMsConnTask_0: Sep 18 14:32:04.571: 08:11:96:22:78:b0 apfProcessAssocReq (apf_80211.c:5276) Changing state for mobile 08:11:96:22:78:b0 on AP 20:37:06:7c:0d:f0 from Associated to Associated *apfMsConnTask_0: Sep 18 14:32:04.596: 08:11:96:22:78:b0 Updating AID for REAP AP Client 20:37:06:7c:0d:f0 - AID ===> 2 *dot1xMsgTask: Sep 18 14:32:04.598: 08:11:96:22:78:b0 Station 08:11:96:22:78:b0 setting dot1x reauth timeout = 28800 *dot1xMsgTask: Sep 18 14:32:04.598: 08:11:96:22:78:b0 dot1x - moving mobile 08:11:96:22:78:b0 into Connecting state *dot1xMsgTask: Sep 18 14:32:04.598: 08:11:96:22:78:b0 Sending EAP-Request/Identity to mobile 08:11:96:22:78:b0 (EAP Id 1) *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.627: 08:11:96:22:78:b0 Received EAPOL EAPPKT from mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.627: 08:11:96:22:78:b0 Received Identity Response (count=1) from mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.627: 08:11:96:22:78:b0 EAP State update from Connecting to Authenticating for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.627: 08:11:96:22:78:b0 dot1x - moving mobile 08:11:96:22:78:b0 into Authenticating state *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.627: 08:11:96:22:78:b0 Entering Backend Auth Response state for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.644: 08:11:96:22:78:b0 Processing Access-Challenge for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.644: 08:11:96:22:78:b0 Entering Backend Auth Req state (id=2) for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.644: 08:11:96:22:78:b0 Sending EAP Request from AAA to mobile 08:11:96:22:78:b0 (EAP Id 2) *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.672: 08:11:96:22:78:b0 Received EAPOL EAPPKT from mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.672: 08:11:96:22:78:b0 Received EAP Response from mobile 08:11:96:22:78:b0 (EAP Id 2, EAP Type 25) *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.672: 08:11:96:22:78:b0 Entering Backend Auth Response state for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.674: 08:11:96:22:78:b0 Processing Access-Challenge for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.674: 08:11:96:22:78:b0 Entering Backend Auth Req state (id=3) for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.674: 08:11:96:22:78:b0 Sending EAP Request from AAA to mobile 08:11:96:22:78:b0 (EAP Id 3) *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.705: 08:11:96:22:78:b0 Received EAPOL EAPPKT from mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.705: 08:11:96:22:78:b0 Received EAP Response from mobile 08:11:96:22:78:b0 (EAP Id 3, EAP Type 25) *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.705: 08:11:96:22:78:b0 Entering Backend Auth Response state for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.708: 08:11:96:22:78:b0 Processing Access-Challenge for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.708: 08:11:96:22:78:b0 Entering Backend Auth Req state (id=6) for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.708: 08:11:96:22:78:b0 WARNING: updated EAP-Identifier 3 ===> 6 for STA 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.708: 08:11:96:22:78:b0 Sending EAP Request from AAA to mobile 08:11:96:22:78:b0 (EAP Id 6) *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.743: 08:11:96:22:78:b0 Received EAPOL EAPPKT from mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.743: 08:11:96:22:78:b0 Received EAP Response from mobile 08:11:96:22:78:b0 (EAP Id 6, EAP Type 25) *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.743: 08:11:96:22:78:b0 Entering Backend Auth Response state for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.745: 08:11:96:22:78:b0 Processing Access-Accept for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.745: 08:11:96:22:78:b0 Resetting web acl from 255 to 255 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.745: 08:11:96:22:78:b0 Setting re-auth timeout to 28800 seconds, got from WLAN config. *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.745: 08:11:96:22:78:b0 Station 08:11:96:22:78:b0 setting dot1x reauth timeout = 28800 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.745: 08:11:96:22:78:b0 Username entry (host/DS7M4R1.kwd.ad.kellwood.com) created for mobile, length = 253 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.745: 08:11:96:22:78:b0 Username entry (host/DS7M4R1.kwd.ad.kellwood.com) created in mscb for mobile, length = 253 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.747: 08:11:96:22:78:b0 Creating a PKC PMKID Cache entry for station 08:11:96:22:78:b0 (RSN 2) *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.747: 08:11:96:22:78:b0 Adding BSSID 20:37:06:7c:0d:fb to PMKID cache for station 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.747: New PMKID: (16) *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.747: [0000] f6 95 c1 bf c3 18 01 9a 82 3d 87 99 d6 5c b6 57 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.747: 08:11:96:22:78:b0 Disabling re-auth since PMK lifetime can take care of same. *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.747: 08:11:96:22:78:b0 PMK sent to mobility group *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.747: 08:11:96:22:78:b0 Sending EAP-Success to mobile 08:11:96:22:78:b0 (EAP Id 6) *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.748: Including PMKID in M1 (16) *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.748: [0000] f6 95 c1 bf c3 18 01 9a 82 3d 87 99 d6 5c b6 57 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.748: 08:11:96:22:78:b0 Starting key exchange to mobile 08:11:96:22:78:b0, data packets will be dropped *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.748: 08:11:96:22:78:b0 Sending EAPOL-Key Message to mobile 08:11:96:22:78:b0 state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.748: 08:11:96:22:78:b0 Entering Backend Auth Success state (id=6) for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.748: 08:11:96:22:78:b0 Received Auth Success while in Authenticating state for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.748: 08:11:96:22:78:b0 dot1x - moving mobile 08:11:96:22:78:b0 into Authenticated state *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.782: 08:11:96:22:78:b0 Received EAPOL-Key from mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.782: 08:11:96:22:78:b0 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.782: 08:11:96:22:78:b0 Received EAPOL-key in PTK_START state (message 2) from mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.782: 08:11:96:22:78:b0 PMK: Sending cache add *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.782: 08:11:96:22:78:b0 Stopping retransmission timer for mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.782: 08:11:96:22:78:b0 Sending EAPOL-Key Message to mobile 08:11:96:22:78:b0 state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.811: 08:11:96:22:78:b0 Received EAPOL-Key from mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.811: 08:11:96:22:78:b0 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.811: 08:11:96:22:78:b0 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 08:11:96:22:78:b0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.811: 08:11:96:22:78:b0 apfMs1xStateInc *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.811: 08:11:96:22:78:b0 0.0.0.0 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state L2AUTHCOMPLETE (4) *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.811: 08:11:96:22:78:b0 0.0.0.0 L2AUTHCOMPLETE (4) DHCP Not required on AP 20:37:06:7c:0d:f0 vapId 7 apVapId 5for this client *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.811: 08:11:96:22:78:b0 Not Using WMM Compliance code qosCap 00 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.811: 08:11:96:22:78:b0 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 20:37:06:7c:0d:f0 vapId 7 apVapId 5 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.811: 08:11:96:22:78:b0 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state DHCP_REQD (7) *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.811: 08:11:96:22:78:b0 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 4838, Adding TMP rule *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.811: 08:11:96:22:78:b0 0.0.0.0 DHCP_REQD (7) Adding Fast Path rule type = Airespace AP - Learn IP address on AP 20:37:06:7c:0d:f0, slot 1, interface = 1, QOS = 1 ACL Id = 255, Jumbo Fr *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.811: 08:11:96:22:78:b0 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 5, DSCP = 0, TokenID = 7006 IPv6 Vlan = 0, IPv6 intf id = 0 *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.811: 08:11:96:22:78:b0 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (ACL ID 255) *Dot1x_NW_MsgTask_0: Sep 18 14:32:04.811: 08:11:96:22:78:b0 Stopping retransmission timer for mobile 08:11:96:22:78:b0 *pemReceiveTask: Sep 18 14:32:04.812: 08:11:96:22:78:b0 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0 *spamApTask6: Sep 18 14:32:05.467: 08:11:96:22:78:b0 Received Idle-Timeout from AP 00:26:cb:aa:81:20, slot 0 for STA 08:11:96:22:78:b0 *spamApTask6: Sep 18 14:32:05.468: 08:11:96:22:78:b0 Warning, ignore the DELETE_MOBILE_PAYLOAD from AP: 00:26:cb:aa:81:20, slot 0. STA connecting AP: 20:37:06:7c:0d:f0, slot 1 *spamApTask6: Sep 18 14:32:06.496: 08:11:96:22:78:b0 Received Idle-Timeout from AP 00:26:cb:aa:81:20, slot 0 for STA 08:11:96:22:78:b0 *spamApTask6: Sep 18 14:32:06.496: 08:11:96:22:78:b0 Warning, ignore the DELETE_MOBILE_PAYLOAD from AP: 00:26:cb:aa:81:20, slot 0. STA connecting AP: 20:37:06:7c:0d:f0, slot 1 *spamApTask6: Sep 18 14:32:07.525: 08:11:96:22:78:b0 Received Idle-Timeout from AP 00:26:cb:aa:81:20, slot 0 for STA 08:11:96:22:78:b0 *spamApTask6: Sep 18 14:32:07.525: 08:11:96:22:78:b0 Warning, ignore the DELETE_MOBILE_PAYLOAD from AP: 00:26:cb:aa:81:20, slot 0. STA connecting AP: 20:37:06:7c:0d:f0, slot 1 *apfReceiveTask: Sep 18 14:32:07.692: 08:11:96:22:78:b0 0.0.0.0 DHCP_REQD (7) State Update from Mobility-Incomplete to Mobility-Complete, mobility role=Local, client state=APF_MS_STATE_ASSOCIATED *apfReceiveTask: Sep 18 14:32:07.692: 08:11:96:22:78:b0 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 4499, Adding TMP rule *apfReceiveTask: Sep 18 14:32:07.692: 08:11:96:22:78:b0 0.0.0.0 DHCP_REQD (7) Replacing Fast Path rule type = Airespace AP - Learn IP address on AP 20:37:06:7c:0d:f0, slot 1, interface = 1, QOS = 1 ACL Id = 255, Jumbo
... View more
Created by
Mike Clites
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
09-19-2013
05:45 AM
09-19-2013
05:45 AM
Najaf, here is the output of the "show wlan 7". Also keep in mind that this wlan works at this location for other clients & at other locations around the continental USA (same primary controller for all, we use H-REAP for local vlan handoff). Status........................................... Enabled MAC Filtering.................................... Disabled Broadcast SSID................................... Enabled AAA Policy Override.............................. Disabled Network Admission Control Radius-NAC State............................... Disabled SNMP-NAC State................................. Disabled Quarantine VLAN................................ 0 Maximum number of Associated Clients............. 0 Number of Active Clients......................... 42 Exclusionlist.................................... Disabled Session Timeout.................................. 28800 seconds CHD per WLAN..................................... Enabled Webauth DHCP exclusion........................... Disabled Interface........................................ whq_58 Multicast Interface.............................. Not Configured WLAN ACL......................................... unconfigured DHCP Server...................................... Default DHCP Address Assignment Required................. Enabled Static IP client tunneling....................... Disabled Quality of Service............................... Gold (video) Scan Defer Priority.............................. 4,5,6 Scan Defer Time.................................. 100 milliseconds WMM.............................................. Allowed WMM UAPSD Compliant Client Support............... Disabled Media Stream Multicast-direct.................... Disabled CCX - AironetIe Support.......................... Disabled CCX - Gratuitous ProbeResponse (GPR)............. Disabled CCX - Diagnostics Channel Capability............. Disabled Dot11-Phone Mode (7920).......................... Disabled Wired Protocol................................... 802.1P (Tag=5) IPv6 Support..................................... Disabled Passive Client Feature........................... Disabled Peer-to-Peer Blocking Action..................... Disabled Radio Policy..................................... All DTIM period for 802.11a radio.................... 2 DTIM period for 802.11b radio.................... 2 Radius Servers Authentication................................ 172.16.1.47 1812 Authentication................................ 172.16.1.46 1812 Accounting.................................... 172.16.1.47 1813 Accounting.................................... 172.16.1.46 1813 Dynamic Interface............................. Disabled Local EAP Authentication......................... Disabled Security 802.11 Authentication:........................ Open System Static WEP Keys............................... Disabled 802.1X........................................ Disabled Wi-Fi Protected Access (WPA/WPA2)............. Enabled WPA (SSN IE)............................... Disabled WPA2 (RSN IE).............................. Enabled TKIP Cipher............................. Disabled AES Cipher.............................. Enabled Auth Key Management 802.1x.................................. Enabled PSK..................................... Disabled CCKM.................................... Disabled FT(802.11r)............................. Disabled FT-PSK(802.11r)......................... Disabled FT Reassociation Timeout......................... 20 FT Over-The-Air mode............................. Enabled FT Over-The-Ds mode.............................. Enabled CCKM tsf Tolerance............................... 1000 CKIP ......................................... Disabled Web Based Authentication...................... Disabled Web-Passthrough............................... Disabled Conditional Web Redirect...................... Disabled Splash-Page Web Redirect...................... Disabled Auto Anchor................................... Disabled H-REAP Local Switching........................ Enabled H-REAP Local Authentication................... Disabled H-REAP Learn IP Address....................... Enabled Client MFP.................................... Optional Tkip MIC Countermeasure Hold-down Timer....... 60 Call Snooping.................................... Disabled Roamed Call Re-Anchor Policy..................... Disabled SIP CAC Fail Send-486-Busy Policy................ Enabled SIP CAC Fail Send Dis-Association Policy......... Disabled Band Select...................................... Disabled Load Balancing................................... Disabled Mobility Anchor List WLAN ID IP Address Status ------- --------------- ------
... View more
Created by
Mike Clites
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
09-18-2013
12:25 PM
09-18-2013
12:25 PM
I am running 7.0.240 on WLC 5508. I have a client trying to connect to an wlan with wpa2, AES & 802.1x auth key. This client keeps attempting to connect but eventually fails. I have some debug captured via putty if that helps. Here is one of the lines I copied frm the WCS log analysis. Association request received from a client has an invalid RSN IE.(One reason could be mismatch in WPA2 algorithm). Anyone have ideas on what the issue is?
... View more
WCS 7.0 & 3502i AP on map shows unknown...
in Wireless Security and Network Management
08-19-2013
01:32 PM
08-19-2013
01:32 PM
Basant, where can I double check these settings you recommend, would it be in the wcs or wlc? Not sure I remember off the top of my head about Asset Care & stuff. Thank you
... View more
WCS 7.0 & 3502i AP on map shows unknown...
in Wireless Security and Network Management
08-16-2013
06:29 AM
08-16-2013
06:29 AM
Success! I created a light weight template in the WCS & from there was able to adjust the antenna settings for both 2.4 & 5 Ghz radios. I am attaching an image for anyone wanting to see.
... View more
WCS 7.0 & 3502i AP on map shows unknown...
in Wireless Security and Network Management
08-16-2013
05:56 AM
08-16-2013
05:56 AM
Rob, thank you for taking the time to look & respond. The 3500 series is a thin only AP & my WCS & all WLC are running the same version of code 7.0.x This particular facility has 44 of the 3502i at it. Almost all were installed in the same 2 day period almost 2 years ago. As far as I can tell, this 1 AP is the only one showing as Internal "other" in its profile. Short of factory resetting the AP I would like to know if there is a way to modify or otherwise force the WLC/WCS to rediscover the AP correctly so that the antenna shows like a normal 3502i.
... View more
Created by
Mike Clites
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
06-12-2013
05:42 AM
06-12-2013
05:42 AM
Scott, I marked your answers as correct because changing the DTIM to 2 & disabling the loadbalancing are the right move. The users have not complained about it since then though getting to communicate with them is also a chore. I am putting this one to bed as complete for now. Thank you for your timely efforts & assistance. Mike
... View more
Created by
Mike Clites
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
06-07-2013
09:32 AM
06-07-2013
09:32 AM
Scott, as an update: I just got a report from the primary user at the remote location where the issue has been occuring. He connected to one of the other ssid we have floating around out there that actually encaplsulates the traffic & brings it back here to my HQ. He said that since changing it to this ssid his connection has been rock solid. I asked him to move back over to the guest ssid later & see how that connection looks after a while. On a side note: We have 5-6 web-passthrough guest ssid's about the corperation. It came to my attention yesterday that no one was using/on them. This is of course NOT normal so I knew something was amiss. This morning I discovered that on the foreign controller the "dhcp require" was unchecked but on the anchor the same field was checked. I unchecked it from the anchor & bam, my guest wireless (web-passthrough) ssid was working again. So somewhere in the upgrade from 7.0.235.5 to 7.0.240.0 process one or more settings were changed.
... View more
Created by
Mike Clites
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
06-06-2013
05:55 AM
06-06-2013
05:55 AM
Scott, thank you for your help. I will work with the remote users when they get in today & let you know. I hope it was just a matter of the load balancing feature though it was already enabled before so I am cautious with my expectation.
... View more
Created by
Mike Clites
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
06-06-2013
05:50 AM
06-06-2013
05:50 AM
Scott, You are correct this ssid is NOT going to the anchor. I cant change the QoS down to Bronze since we do rate limiting on the Bronze for our other, anchor guest ssid's which are seen by the outside world. This ssid were discussing is a guest but only in the corperate environments & do not want to rate limit. Ok so I can change those 3 settings (disable Client-LB, change becons from 1 to 2). Would those cause the issue after the code upgrade? Those settings were (pretty sure) set to those values on the previous code too. Thank you Mike
... View more
Created by
Mike Clites
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
06-05-2013
05:19 PM
06-05-2013
05:19 PM
Scott, I grabbed 1 of the ssid the users are having the issue with from one of the 2 foreign controllers & attached it above. The wlan in question (file attached above) is using H-REAP (Flex) as many are. So far I have 2 locations (geographically seperate & on seperate foreign controllers) which are reporting similar issues with the same wlan. The traffic is handed off locally. We are an all cisco shop. The APs in question are all 3502i models connected to 5508's as primary controllers. All 3 (that includes the anchor) WLC are running 7.0.240.0 code. When we upgrade we do all of them, one at a time. Let me know if you need to see more. Thank you
... View more
Created by
Mike Clites
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
06-05-2013
02:00 PM
06-05-2013
02:00 PM
Hello all, I upgraded all 3 of my WLC, 2 foreign controllers (5508) & 1 anchor controller (4402) from 7.0.235.0 to 7.0.240.0. Since the upgrade I am getting users at different locations (both foreign controllers) complaining about keeping a steady connection to the ssid. This appears to be a new issue since the upgrade 2 weekends ago. At first we thought it was 1 site specific since no other users were creating tickets. We just got our 2nd location set of tickets and the complaint is very similar to the first one. The only changes I am aware to the wireless is the code upgrade. We made the move to the newer code because of the known issue of H-REAP(Flex) APs losing their vlan mapping that exists on previous code. I have not been able to find anything so far online related to what I am seeing. Anyone have any thoughts or ideas before I open a tac case? Thank you Mike
... View more
Created by
Mike Clites
in Wireless - Mobility Documents
in Wireless - Mobility Documents
05-14-2013
07:00 AM
05-14-2013
07:00 AM
I have a question if you dont mind. For Multicast-Multicast (recommended) you say Select Multicast - Multicast Where is this selection available to be made? I have a 5508 & am running 7.0.235.3 & do not see anywhere in the wlc the Multicast - Multicast, let alone where to configure the group. What I want is to enable the VoIP ssid/interface to use multicast for Music on Hold. I dont necessarily need this on any other vlan. We have a series of remote locations all running HREAP with 3502AP's & each facility has the same VoIP vlan/ssid which requires multicast for MOH. Thank you
... View more
Created by
Mike Clites
in Other Wireless - Mobility Subjects
09-19-2013
09-19-2013
That is a bit of an issue since it is a remote (1/2 way across the
country for me) location and the ...
Created by
Mike Clites
in Other Wireless - Mobility Subjects
09-19-2013
09-19-2013
Yes the client is connecting on a locally switched WLAN via H-REAP. vlan
96The switch port is trunke...
Created by
Mike Clites
in Other Wireless - Mobility Subjects
09-19-2013
09-19-2013
(Cisco Controller) >show dhcp proxyDHCP Proxy Behaviour: disabled
Bootp-Broadcast:disabled----------...
Created by
Mike Clites
in Other Wireless - Mobility Subjects
09-19-2013
09-19-2013
Najaf,here is the output of the "show wlan 7".Also keep in mind that
this wlan works at this locatio...
Created by
Mike Clites
in Other Wireless - Mobility Subjects
09-18-2013
09-18-2013
I am running 7.0.240 on WLC 5508.I have a client trying to connect to an
wlan with wpa2, AES & 802.1...
Created by
Mike Clites
in Wireless Security and Network Management
08-19-2013
08-19-2013
Basant,where can I double check these settings you recommend, would it
be in the wcs or wlc?Not sure...
Created by
Mike Clites
in Wireless Security and Network Management
08-16-2013
08-16-2013
Success!I created a light weight template in the WCS & from there was
able to adjust the antenna set...
Created by
Mike Clites
in Wireless Security and Network Management
08-16-2013
08-16-2013
Rob,thank you for taking the time to look & respond.The 3500 series is a
thin only AP & my WCS & all...
06-12-2013
Scott,I marked your answers as correct because changing the DTIM to 2 &
disabling the loadbalancing ...
06-07-2013
Scott, as an update:I just got a report from the primary user at the
remote location where the issue...
06-06-2013
Scott,thank you for your help.I will work with the remote users when
they get in today & let you kno...
06-06-2013
Scott,You are correct this ssid is NOT going to the anchor.I cant change
the QoS down to Bronze sinc...
06-05-2013
Scott,I grabbed 1 of the ssid the users are having the issue with from
one of the 2 foreign controll...
06-05-2013
Hello all,I upgraded all 3 of my WLC, 2 foreign controllers (5508) & 1
anchor controller (4402) from...
Created by
Mike Clites
in Wireless - Mobility Documents
05-14-2013
05-14-2013
I have a question if you dont mind.For Multicast-Multicast (recommended)
you say Select Multicast - ...
Public Statistics
| Date Registered | 04-06-2011 11:35 AM |
| Date Last Visited | 07-11-2018 12:38 AM |
| Total Messages Posted | 94 |
| Total Helpful Votes Received | 5 |
.jpg "Hall of Fame Master"){kind=icon}
