Hi Guys,   I am currently busy with a project to implement a wlc 2504 anchor controller for guest wifi. The foreign controller is a wlc 5508 and the anchor controller is currently in the dmz behind a firewall. The tunnel is up up between the two controllers and we are using PSK authentication for testing.   The issue that we are currently experiencing, is when a user joins the guest wifi and enter the PSK, the users connection gets dropped after a few seconds. On the foreign controller, i can see the user joining the guest wiif ssid but on the anchor controller, theres no information on the connection.   Below is the logs for the users connectivity: *Dot1x_NW_MsgTask_0: Jan 01 03:07:39.507: 30:07:4d:59:00:00 Anchor Export Request Recvd for mobile 30:07:4d:59:00:00 from 196.0.0.1 type : 16 subtype : 0 seq no : 65090 xid : 291588 *Dot1x_NW_MsgTask_0: Jan 01 03:07:39.507: 30:07:4d:59:00:00mmAnchorExportRcv: Extracting mmPayloadExportForeignLradMac *Dot1x_NW_MsgTask_0: Jan 01 03:07:39.507: 30:07:4d:59:00:00IPv6 ACl Name is none *Dot1x_NW_MsgTask_0: Jan 01 03:07:39.508: 30:07:4d:59:00:0Created Acct-Session-ID (386d6f7b/30:07:4d:59:00:00/79) for the mobile *Dot1x_NW_MsgTask_0: Jan 01 03:07:39.508: 30:07:4d:59:00:00Adding mobile on Remote AP 00:00:00:00:00:00(0) *Dot1x_NW_MsgTask_0: Jan 01 03:07:39.508: 30:07:4d:59:00:00 mmAnchorExportRcv:, Mobility role is Unassoc . *Dot1x_NW_MsgTask_0: Jan 01 03:07:39.508: 30:07:4d:59:00:00mmAnchorExportRcv Ssid=Guest_Wifi Security Policy=0x40006040 *Dot1x_NW_MsgTask_0: Jan 01 03:07:39.508: 30:07:4d:59:00:00Scheduling deletion of Mobile Station: (callerId: 69) in 1 seconds *osapiBsnTimer: Jan 01 03:07:40.345: 30:07:4d:59:00:00 apfMsExpireCallback (apf_ms.c:639) Expiring Mobile! *apfReceiveTask: Jan 01 03:07:40.345: 30:07:4d:59:00:00 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfReceiveTask: Jan 01 03:07:40.345: 30:07:4d:59:00:000.0.0.0 START (0) Deleted mobile LWAPP rule on AP [00:00:00:00:00:00] *apfReceiveTask: Jan 01 03:07:40.345: 30:07:4d:59:00:00 Deleting mobile on AP 00:00:00:00:00:00(0)   Your assistance will be greatly appreciated.     ... View more

Hi Guys, I am currently experiencing an issue with a brand new Cisco WAP571 access point. Below is the errors on the access point, when a users tries to authenticate with their AD credentials via radius: Apr 4 2019 12:20:57 debug hostage[23954] station: 40:a3:cc:61:33:75 deauthenticated   Apr 4 2019 12:20:57 info hostapd[23954] STA 40:a3:cc:61:33:75 disassociated from BSSID 00:45:1d:e2:49:00 reason 8: Sending STA is leaving BSS   Apr 4 2019 12:20:57 debug hostapd[23954] station: 40:a3:cc:61:33:75 deauthenticated   Apr 4 2019 12:20:57 info hostapd[23954] STA 40:a3:cc:61:33:75 deauthed from BSSID 00:45:1d:e2:49:00 reason 1: Unspecified Reason   Apr 4 2019 12:20:57 info hostapd[23954] Station 40:a3:cc:61:33:75 had an authentication failure, reason 15   Apr 4 2019 12:20:46 info hostapd[23954] STA 40:a3:cc:61:33:75 associated with BSSID 00:45:1d:e2:49:00   Apr 4 2019 12:20:46 info hostapd[23954] Assoc request from 40:a3:cc:61:33:75 BSSID 00:45:1d:e2:49:00 SSID WIFI-ENT   Apr 4 2019 12:20:46 debug hostapd[23954] station: 40:a3:cc:61:33:75 deauthenticated   Apr 4 2019 12:20:46 info hostage[23954] STA 40:a3:cc:61:33:75 disassociated from SUBSIDY 00:45:1d:e2:49:00 reason 8: Sending STA is leaving BSS   A brief info on the setup of the network: - the access point is configured at one of our remote sites. - we have a cisco acs security appliance for tacacs and radius authentication at the head office and a secondary at the recovery site. - all network devices (switches, routers & firewalls) are accessed via tacacs, therefore communication from the remote site to the acs appliance at the head office is not an issue. - below is the error message on the acs appliance: Description: The Service Selection policy selected the DenyAccess Service   Any help would be very appreciated.   ... View more